Output format | Documentation | Threat Intelligence API | WhoisXML API

Output format

{
    "total": 100,
    "results": [
        {
            "firstSeen": "2023-04-05T00:00:00Z",
            "lastSeen": "2023-10-02T00:00:00Z",
            "threatType": "generic",
            "iocType": "domain",
            "value": "apple.varifidogioeat.com"
        },
        {
            "firstSeen": "2023-07-22T00:00:00Z",
            "lastSeen": "2023-10-02T00:00:00Z",
            "threatType": "phishing",
            "iocType": "domain",
            "value": "apple.appleidil.com"
        },
        ...
    ]
}

Output parameters

total
Total number of results for the given IoC query. This parameter reflects the total number of results found in our database and doesn't depend on the passed size parameter.
firstSeen
Date when the IoC was first seen by our scanners. 9 March 2023 is the earliest date available, as we started collecting data on that date.
lastSeen
Date when the IoC was last seen by our scanners.
threatType
Threat type: attack, botnet, C&C, malware, phishing, spam, suspicious, tor, generic.
iocType
IoC type: IPv4, IPv6, URL, domain, hash, CIDR.
value
Found IoC value.