Connectors
...
Actions
Get Domain Indicators
6 min
description get domain indicators endpoint url api/v1/indicators/domain/{{domain}}/{{section}} method get inputs path parameters (object) – required domain (string) – required section (string) – required output example \[ { "status code" 200, "response headers" { "content type" "application/json", "content length" "268", "connection" "keep alive", "date" "fri, 06 jan 2023 00 27 24 gmt", "server" "gunicorn", "cache control" "max age=0", "x frame options" "sameorigin", "x remote user name" "swimlane dev", "x otx active" "1", "content encoding" "gzip", "access control allow origin" " ", "vary" "accept encoding", "x cache" "miss from cloudfront", "via" "1 1 e074760d97af50b62db843a4057448cc cloudfront net (cloudfront)", "x amz cf pop" "for50 p3", "x amz cf id" "r bhm yw66 bjwe4d7s c83xvuysflrm9cdpxmzhf2mo0wehwee1a==" }, "reason" "ok", "json body" { "sections" \[ "general", "geo", "url list", "passive dns", "malware", "whois", "http scans" ], "whois" "http //whois domaintools com/swimlane com", "alexa" "http //www alexa com/siteinfo/swimlane com", "indicator" "swimlane com", "type" "domain", "type title" "domain", "validation" \[], "base indicator" {}, "pulse info" { "count" 0, "pulses" \[], "references" \[], "related" { "alienvault" { "adversary" \[], "malware families" \[], "industries" \[] }, "other" { "adversary" \[], "malware families" \[], "industries" \[] } } }, "false positive" \[] } } ] output parameters status code (number) reason (string) json body (object) sections (array) whois (string) alexa (string) indicator (string) type (string) type title (string) validation (array) file name (string) – required file (string) – required base indicator (object) pulse info (object) count (number) pulses (array) file name (string) – required file (string) – required references (array) file name (string) – required file (string) – required related (object) alienvault (object) adversary (array) file name (string) – required file (string) – required malware families (array) file name (string) – required file (string) – required industries (array) file name (string) – required file (string) – required other (object) adversary (array) file name (string) – required file (string) – required malware families (array) file name (string) – required file (string) – required industries (array) file name (string) – required file (string) – required false positive (array) file name (string) – required file (string) – required response headers header type content type string content length string connection string date string server string cache control string x frame options string x remote user name string x otx active string content encoding string access control allow origin string vary string x cache string via string x amz cf pop string x amz cf id string