Email Threat Removal API

Email Threat Removal API

The Impressionwise Threats (Hygiene) API enables high-speed, real-time email hygiene processing for signup, onboarding, and transactional workflows. With a single request, the API evaluates individual email addresses to help reduce risk, improve list quality, and protect sender reputation.

This API is designed for continuous data cleansing and supports standard HTTP POST requests with optional JSON-formatted responses.


API Endpoint

The API is available via a secure HTTPS endpoint:

https://post.impressionwise.com/fastfeed.aspx

For compatibility, HTTP access may also be supported; however, HTTPS is strongly recommended to ensure data encryption in transit and alignment with industry-standard security best practices.


Performance & Reliability

The API is hosted on a robust, load-balanced, redundant infrastructure designed for high availability and consistent performance. Automated monitoring and failover mechanisms minimize downtime and ensure reliable handling of variable traffic volumes.


Configurable Processing Level

The Threat Removal API allows you to balance processing speed and verification depth using the configurable TIMEOUT parameter. This flexibility enables optimization based on your use case—whether prioritizing low-latency responses during real-time signups or deeper analysis for higher-risk or batch data processing.

Lower timeout values return results more quickly but may rely on partial signals, while higher timeout values allow for more comprehensive validation when mail hosts require additional response time.

For guidance on selecting the optimal balance between speed and accuracy, refer to:
https://impressionwise.com/blog/API-Speed-vs-Accuracy.html


Authentication & Request Structure

All API requests require authentication using a unique account code and password. To obtain your assigned API credentials, please contact Impressionwise support. Once you have your credentials, each request must follow the standard structure shown below:

Base Request Structure

https://post.impressionwise.com/fastfeed.aspx?CODE=000001&PWD=password1&<paramlist>


Required Parameters

The following parameters are required for each API request and must be included in the query string, separated by the & character.

Parameter Description
CODE 6-digit alpha-numeric account code (case sensitive)
PWD Alpha-numeric security password
EMAIL Email address to be verified

The required authentication and request parameters (such as CODE or PWD) may be submitted either in the URL query string or, optionally, in the request header. The system will first inspect the URL for all required fields; if any parameter is not found, it will then check the request header. For example, PWD=XXXXX can be included in the URL or in a header to support secure processing.


Optional System Parameters

In addition to required parameters, the API supports optional system parameters that can provide extra information or modify the request behavior.

Parameter Description
JSONRESPONSE=1 Returns JSON data structure results for the email address
TIMEOUT Maximum processing time in seconds (range: 2–15, default: 6)

Optional Client Pass-Through Fields

Client-defined parameters may be passed through the request and returned in the response for correlation purposes.

Sample supported fields include:

fname, lname, addr1, addr2, city, state, zip, country,
phone, gender, optinsite, optindate, optinip,
other1 – other20

Note: A maximum of 20 other fields is supported.


Sample Request

Below is an example of a complete API request along with a sample JSON response illustrating the returned data structure.

https://post.impressionwise.com/fastfeed.aspx?CODE=000001&PWD=password1&EMAIL=noexist@testme.com&JSONRESPONSE=1&TIMEOUT=10

Sample JSON Response

{
"EMAIL": "noexist@testmelink.com",
"JSONRESPONSE": "1",
"RESULT": "CERTDOM",
"NPD": "NA",
"CC": "US",
"TTP": 2.41
}


Response Fields

Each API response includes the following fields, which describe the verification result, threat classification, and processing time associated with the submitted email address.

Field Description
RESULT High-level disposition of the email address
TTP Time to process, in seconds
NPD Net Protect Detail classification
CC Country code

Error Handling & Timeouts

The API provides explicit error codes and timeout responses to indicate invalid credentials or delayed server replies, along with recommended steps for handling and retrying affected requests.

If invalid credentials are supplied, the API returns:

RESULT = ACCT_INVALID_CREDENTIALS

If account credential supplied are correct yet the account is set to inactive, the API returns:

RESULT = ACCT_INACTIVE

If missing required fields for processing, the API returns:

RESULT = MISSING_REQD_FIELDS

In cases where a mail server does not respond within the specified timeout, the following response is returned:

EMAIL=noexist@testmelink.com&RESULT=RETRY&TTP=1.33

Rate Limiting Controls

This API employ’s connection-level rate limiting controls to mitigate abuse and protect backend resources. Specifically, our system restricts the number of simultaneous open connections per client IP address to a maximum of 50 concurrent connections. If a client attempts to open a connection beyond this threshold (for example, the 51st simultaneous connection), the additional connection is rejected, and returns a 503 Service Temporarily Unavailable response.

This mechanism helps prevent denial-of-service conditions, safeguards backend infrastructure, and ensures fair resource usage across all clients. It operates transparently and does not impact normal traffic within the defined limits.

Retry Guidance

  • Continue processing the full dataset
  • Retry any records returning RETRY after completion
  • No changes to credentials are required

Timeout Handling Guidance

  • Continue submitting remaining records to completion
  • Retry affected records after processing completes
  • If timeouts persist, increase the TIMEOUT value for subsequent retries

If you receive any unexpected responses beyond those documented here, please contact Impressionwise Support.


Result Code Guidance

Following the guidelines below will help ensure your email practices align with industry best practices, increasing inbox placement and engagement. Proper adherence reduces the risk of sending to invalid or harmful addresses, improves opens and click-through rates, drives conversions, enhances revenue, and protects your sender reputation.

Result Specifications

Description Response Guidance
Certified or
CertDom or
CertInt
All domestic and/ or international email addresses in this file(s) have been verified as safe from a delivery reputation perspective, though recipient-level bounce status may not yet be confirmed. Send: You may safely upload this list to your ESP and send to each address with confidence.
Key High-risk traffic sources identified using digital forensics analytics. Includes complex, non-human, machine-generated email accounts historically associated with non-converting impressions. Send only if the recipient was organically acquired with verified user-based submission evidence or has shown purchase activity in the last 90 days. Open/click activity alone is insufficient.
Quarantine Addresses that were once active traps may become dormant but could reactivate within 90 days, though currently considered certified. Quarantine: Monitor and review before sending.
Parked Domains that are unused or parked and not configured for email or web services. Emails sent to these domains are invalid, often auto-forwarded to catch-all accounts, or blacklisted. Do Not Send
Seed Third-party oversight email addresses used for monitoring company networks. Often used historically by litigators or anti-spam activists. Monitor: Do not include in active campaigns.
Bot/Proxy High-risk, non-human, machine-generated email accounts identified by digital forensics analytics. Avoid sending to these addresses.
Invalid Addresses where delivery is impossible due to domain or recipient-level issues, as defined by RFC standards. Do Not Send
Mole Domains or recipients historically associated with anti-spam or DNSBL activity, with no direct ownership of resources. Do Not Send
Trap Purpose-built spam traps or honeypot addresses. Any emails sent here are automatically considered unsolicited. Do Not Send

General Disclaimer. Every reasonable effort is made to identify known threat and delivery classifications. However, due to the constantly evolving nature of the online ecosystem, Impressionwise cannot guarantee results will be entirely free of all potential threats or delivery risks. While care has been taken to ensure accuracy, Impressionwise assumes no responsibility for losses arising from reliance on this information.


Support & Customization

For questions, interpretation guidance, or custom implementation strategies, Impressionwise Support is available to help ensure optimal results from your data cleansing workflows.

The recognized authority in email verification and threat removal services

Impressionwise empowers prospective clients to experience the value of our advanced list cleaning services firsthand. We offer a complimentary scan and detailed report on a sample of your data, allowing you to evaluate the impact our solutions can have on your email performance and data quality.

This website uses cookies and other tracking technologies to enhance user experience, display targeted ads, and to analyze performance, user activity, and traffic on our website according to the Privacy Policy.
Accept
x

Before you head out…

Stop wondering and start knowing if your emails are safe and deliverable.

Experience Impressionwise's industry leading

Try for Free

No credit card required.  |  Zero obligations.