EmailRep

EmailRep is an email address reputation and threat-intelligence API operated by Sublime Security, Inc. It crawls and enriches data across social media profiles, professional networking sites, dark-web credential leaks, data breaches, phishing kits, phishing emails, spam lists, open mail relays, spam traps, domain age and reputation, and email-deliverability signals to predict the risk associated with any email address. The free, JSON-over-HTTP REST API returns a `reputation`, a `suspicious` flag, a `references` count, and a detailed signal block (blacklisted, malicious_activity, credentials_leaked, data_breach, domain_reputation, deliverable, spoofable, profiles, and more). A POST `/report` endpoint lets analysts contribute observations of malicious email behavior back into the reputation graph.

1 APIs 0 Features

SecurityEmailEmail ReputationThreat IntelligencePhishingFraud PreventionAnti-AbuseDeliverabilityRisk ScoringPublic APIs

APIs

EmailRep API

Email reputation and threat-intelligence REST API. `GET /{email}` returns a reputation verdict (high/medium/low/none), a `suspicious` flag, a `references` count, and a detailed ...

Collections

EmailRep API

POSTMAN

EmailRep API

OPEN

Arazzo Workflows

EmailRep Screen and Report Malicious Sender

Query an email's reputation and, when the signals show it is malicious, report it back into the reputation graph.

ARAZZO

EmailRep Triage Inbound Sender

Pull a human-readable reputation summary for an inbound sender and escalate low-reputation, spoofable senders by reporting them.

ARAZZO

EmailRep Verify Before Report

Confirm an email's domain resolves and is deliverable before reporting it, so junk addresses never pollute the reputation graph.

ARAZZO

Pricing Plans

Emailrep Plans Pricing

3 plans

PLANS

Rate Limits

Emailrep Rate Limits

5 limits

RATE LIMITS

FinOps

Emailrep Finops

FINOPS

Semantic Vocabularies

Emailrep Api Context

4 classes · 35 properties

JSON-LD

API Governance Rules

EmailRep API Rules

43 rules · 17 errors 23 warnings 3 info

SPECTRAL

JSON Structure

Api Email Reputation Details Structure

23 properties

JSON STRUCTURE

Api Email Reputation Structure

6 properties

JSON STRUCTURE

Api Report Request Structure

5 properties

JSON STRUCTURE

Api Report Response Structure

2 properties

JSON STRUCTURE

Example Payloads

Api Email Reputation Details Example

23 fields

EXAMPLE

Api Email Reputation Example

6 fields

EXAMPLE

Api Report Request Example

5 fields

EXAMPLE

Api Report Response Example

2 fields

EXAMPLE

Resources

PostmanWorkspace

PostmanWorkspace

Documentation

APIReference

GettingStarted

TermsOfService

PrivacyPolicy

GitHubOrganization

GitHubOrganization

PublicAPIsListing

PublicAPIsListing

Sublime Platform

Sublime Rules

Sublime CLI

OpenCTI Connectors

MQL VS Code Extension

ICS Phishing Toolkit

Strelka File Scanning

Detection Engineering Workshop

SpectralRuleset

SpectralRuleset

JSONStructure

JSONStructure

JSONStructure

JSONStructure

Sources

opencollection: 1.0.0
info:
  name: EmailRep API
  version: '1.0'
request:
  auth:
    type: apikey
    key: Key
    value: '{{Key}}'
    placement: header
items:
- info:
    name: Reputation
    type: folder
  items:
  - info:
      name: EmailRep Query Email Reputation
      type: http
    http:
      method: GET
      url: https://emailrep.io/:email
      params:
      - name: email
        value: bill@microsoft.com
        type: path
        description: The email address to query.
      - name: summary
        value: 'true'
        type: query
        description: When `true`, include a human-readable `summary` field in the response.
    docs: Look up reputation, suspiciousness, references, and detailed intelligence signals for an email address. Returns
      a `reputation` of `high`, `medium`, `low`, or `none`, a boolean `suspicious` flag, a `references` count, and a `details`
      block covering blacklisting, malicious activity, credential leaks, data breaches, domain reputation, deliverability,
      MX validity, SPF/DMARC posture, spoofability, free-provider/disposable classification, and online profile observations.
      Use `summary=true` to addition
- info:
    name: Reports
    type: folder
  items:
  - info:
      name: EmailRep Report Email
      type: http
    http:
      method: POST
      url: https://emailrep.io/report
      body:
        type: json
        data: '{}'
    docs: Report an email address as exhibiting malicious behavior so the EmailRep reputation graph picks up the signal. Requires
      an API key. Submit one or more `tags` (such as `bec`, `maldoc`, `phishing`, `account_takeover`, `spam`), an optional
      human-readable `description`, the `timestamp` when the activity was observed (Unix epoch seconds, defaults to now),
      and an optional `expires` window in hours during which the address should be treated as risky.
bundled: true