
≈ 1.8kvisits/mo
Use not read yet · estimate, read Oct 18, 2026
- For
- Security teams and developers checking suspicious IPs, domains and URLs, and feeding threat intel into SIEMs or apps.
- Price
- Free plan · From ≈ $55/mo€49 · pricing page, read Oct 19, 2026
- Activity
- Actively maintainedrelease 7 weeks ago · site updated 3 days ago
- Used for
- Investigate an IP, domain or suspicious link with sourced evidence
- Import threat indicators into a SIEM or OpenCTI over STIX/TAXII
- Check indicators from your code via a REST API
- Used more than 84% of the 438 tools on its shelfINITE Atlas →
- On the web since 2024, older than 63% of its shelfINITE Atlas
- Has an MCP server (1 in the registry)public registry →
- Publishes llms.txt, a file written for AI assistantsismalicious.com ↗
- Trust centertheir owntrust center ↗
- Privacy policy updated2026-10-05privacy policy ↗
- Security contactsecurity.txt
These are isMalicious's own statements, read from its pages. We did not audit them. A line that is missing was not found on the pages we read; it does not mean the practice is absent.
- MCP servercom.ismalicious/mcp-serververified in the MCP registry
- Stateanswers, 8 toolschecked 2026-10-19
- Address to connectapi.ismalicious.com/mcp
- OpenAPI spec55 pathsthe spec ↗
- API docsismalicious.com/api-docsthe vendor's page ↗
- MCP docsismalicious.com/mcpthe vendor's page ↗
- Status pagelinked from the homepageismalicious.com/resources/status ↗
This card as JSON, for your agent →
Each line is something a program found when it went looking: the registry entry, the server's own answer, a spec that parses. A missing line means we did not find it, not that it does not exist.
Figure and bar: visits/mo, estimate · year: online since
- #1

MlabMCP · sign-in
Enriches IPs, domains, hashes and uploaded files with DNS history, reputation checks and YARA matches, returning graded findings reports.
1.3kActiveFrom ≈ $66/mo
Not it? Say what you need
betaThree tools from the Atlas for the job you describe, each with what fits and what does not.
No notes yet. What do you use isMalicious for?
Sign in to leave a noteWhat is isMalicious?
Looks up IPs, domains and URLs against threat sources and returns verdicts with the evidence behind them. It is listed in the Atlas under Security.
Who is isMalicious for?
Security teams and developers checking suspicious IPs, domains and URLs, and feeding threat intel into SIEMs or apps.
How much does isMalicious cost?
isMalicious has a free plan; paid plans start at ≈ $55/mo (€49/mo), per its pricing page on 2026-10-19.
Is isMalicious free?
Yes, isMalicious has a free plan, per its pricing page on 2026-10-19.
Is isMalicious still maintained?
Actively maintained: release 7 weeks ago · site updated 3 days ago.
Is isMalicious safe?
We do not audit vendors. What isMalicious publishes, read 2026-10-19: a trust center.
Does isMalicious give refunds?
In its own words (terms of service, 2026-10-19): “Except as expressly stated at purchase or in a separate agreement, fees are non-refundable.”
What are alternatives to isMalicious?
In Security, by use: Mlab.
How we read a tool
No votes, no reviews, no vendor claims. Every week a crawler reads each tool's own site and a few public registries, and the words on the card are bands over what it read.
- Use: visits to the site (estimated), installs from npm and PyPI, presence in Chrome's usage report.
- Activity: the newest release on GitHub, npm or PyPI; the newest dated page on the site; open roles on a public jobs board.
- Price: the vendor's own pricing page, read with the date. A figure is printed only when it is on that page.
- The line and the use cases are written by us from the homepage, one tool at a time, and refused when they repeat the vendor's marketing.
How AI assistants read each site — the reading vendors ask us about — is on each tool's own visibility page.
How we read every tool → · By INITE Atlas Desk
Cookies
Before we count this visit
Analytics and ad measurement tell us which pages and which of our ads do their job: Google Analytics and Google Ads, the Meta pixel, Yandex Metrica, and one first-party id of our own. Nothing is stored until you answer, and declining changes nothing about the site.