--- title: Silent Push slug: connectors/silent-push docTags: createdAt: 2026-06-09T16:29:40.850Z --- The Silent Push connector facilitates access to a wide range of cyber threat intelligence data, enabling users to enrich and analyze security-related information. Silent Push is a comprehensive threat intelligence platform that provides real-time data on domain and IP reputations, enrichments, and risk scores. By integrating with Swimlane Turbine, security teams can automate the process of analyzing and monitoring network-related threats, enhancing their ability to detect and respond to malicious activities. This connector allows users to effortlessly incorporate Silent Push's extensive telemetry into their security workflows, ensuring a proactive defense posture against cyber threats. ### Limitations None to date. ### Supported Versions This Silent Push Connector uses the v1 version API. ### Additional Docs - [API Documentation](https://docs.silentpush.com/index.html#) ## Configuration ## Prerequisites Before you can utilize the Silent Push connector within the Swimlane Turbine platform, ensure you have the following prerequisites: - API Key Authentication with the following parameters: - URL: Endpoint for the Silent Push API - API Key: Unique identifier to authenticate requests to Silent Push ## Authentication Methods To utilize the Silent Push connector within the Swimlane Turbine platform, ensure you have the following prerequisites: - API Key Authentication: - URL: The endpoint URL for the Silent Push API. - API Key: Your unique identifier to authenticate with the Silent Push API. ## Capabilities This Silent Push Connector provides the following capabilities: - ASN Takedown Reputation - Bulk Domain Information - Bulk Domain Infratags - Bulk Silent Push Risk Score for a List of Domains - Bulk Silent Push Risk Score for list IPv4 Address - Domain Enrichment - Domain Information - Domain Infratag - Domain Search - Domain Typosquatting Search - IPv4 Enrichment - IPv6 Enrichment - Name Server Changes - Name Server Changes Summary - Silent Push Risk Score for Domain *... and so on* ### ASN Takedown Reputation - Get a takedown reputation for ASN [Click Here](https://help.silentpush.com/docs/asn-takedown-reputation). ### Bulk Domain Information - Get domain information for multiple domains [Click Here](https://docs.silentpush.com/domain.html#bulk-domain-information). ### Bulk Domain Infratags - Get infratags for multiple domains with optional clustering [Click Here](https://docs.silentpush.com/domain.html#bulk-domain-infratags). - Get Silent Push Risk Score for multiple domains [Click Here](https://docs.silentpush.com/domain.html#bulk-silent-push-risk-score-for-a-list-of-domains). - Get the Silent Push Risk Score for multiple IPv4 addresses [Click Here](https://help.silentpush.com/docs/bulk-silent-push-risk-score-for-a-list-of-ipv4-addresses) ### Domain Enrichment - Get domain enrichment information [Click Here](https://docs.silentpush.com/enrich.html#domain-enrichment). ### Domain Information - Get domain information [Click Here](https://docs.silentpush.com/domain.html#domain-information). ### Domain Infratag - Get infratag for domain [Click Here](https://docs.silentpush.com/domain.html#domain-infratag). ### Domain Search - Search for domains that match specific criteria, including optional name servers, WHOIS, network, and domain name patterns [Click Here](https://help.silentpush.com/docs/domain-search) ### Domain Typosquatting Search - Find typosquatted variations of the domain - optionally exclude selected infrastructure [Click Here](https://help.silentpush.com/docs/domain-typosquatting-search). ### IPv4 Enrichment - Get IPv4 enrichment information [Click Here](https://docs.silentpush.com/enrich.html#ipv4-enrichment). ### IPv6 Enrichment - Get IPv6 enrichment information [Click Here](https://docs.silentpush.com/enrich.html#ipv6-enrichment). ### Name Server Changes - Get name server changes for domain [Click Here](https://help.silentpush.com/docs/name-server-changes). ### Name Server Changes Summary - Get a summary of name server changes for the domain [Click Here](https://help.silentpush.com/docs/name-server-changes-summary). - Get Silent Push Risk Score for domain [Click Here](https://docs.silentpush.com/domain.html#silent-push-risk-score-for-domain). - Get the Silent Push Risk Score for the IPv4 address [Click Here](https://help.silentpush.com/docs/silent-push-risk-score-for-ipv4). ### WHOIS Information - Get previously collected WHOIS information for the domain [Click Here](https://help.silentpush.com/docs/whois-information). ### Name Server Reputation - Get reputation score for a specified name server [Click Here](https://docs.silentpush.com/reputation.html#name-server-reputation). ### Name Server Reputation History - Get reputation history for a specified name server [Click Here](https://docs.silentpush.com/reputation.html#name-server-reputation-history). ### Ranked ASN Reputation - Get list of ASNs with highest reputation scores [Click Here](https://docs.silentpush.com/reputation.html#ranked-asn-reputation). ### ASN Reputation - Get reputation score for a specified ASN [Click Here](https://docs.silentpush.com/reputation.html#asn-reputation). ### ASN Reputation History - Get reputation history for a specified ASN [Click Here](https://docs.silentpush.com/reputation.html#asn-reputation-history). ### Ranked Subnet Reputation - Get list of subnets with highest reputation scores [Click Here](https://docs.silentpush.com/reputation.html#ranked-subnet-reputation). ### Subnet Reputation - Get reputation score for a specified subnet [Click Here](https://docs.silentpush.com/reputation.html#subnet-reputation). ### Subnet Reputation History - Get reputation history for a specified subnet [Click Here](https://docs.silentpush.com/reputation.html#subnet-reputation-history). ### IPv4 Reputation - Get reputation score for a specified IPv4 address [Click Here](https://docs.silentpush.com/reputation.html#ipv4-reputation). ### IPv4 Reputation History - Get reputation history for a specified IPv4 address [Click Here](https://docs.silentpush.com/reputation.html#ipv4-reputation-history). # Configurations ## Silent Push API Key Authentication Authenticates using an API Key ### Configuration Parameters | **Parameter** | **Description** | **Type** | **Required** | | ------------- | ---------------------------------- | -------- | ------------ | | url | A URL to the target host. | string | Required | | X-API-KEY | API key | string | Required | | verify\_ssl | Verify SSL certificate | boolean | Optional | | http\_proxy | A proxy to route requests through. | string | Optional | # Actions ## ASN Reputation Retrieve the reputation score for a specified Autonomous System Number (ASN) from Silent Push using path parameter. ### Endpoint - **URL:** `api/v1/merge-api/explore/ipreputation/asn/{{asn}}` - **Method:** `GET` ### Input | **Argument Name** | **Type** | **Required** | **Description** | | --------------------- | -------- | ------------ | ------------------------------------------------------------ | | `path_parameters.asn` | number | Required | Autonomous System Number to get reputation for. | | `parameters.explain` | number | Optional | Show details of data used to calculate the reputation score. | ### Input Example `{"parameters":{"explain":1},"path_parameters":{"asn":211298}}` ### Output | **Parameter** | **Type** | **Description** | | ------------------------------------------------------ | -------- | ----------------------------------------------------------------------- | | `status_code` | number | HTTP status code of the response | | `reason` | string | Response reason phrase | | `asn_reputation` | array | Output field: asn\_reputation | | `asn_reputation.asn` | number | Output field: asn\_reputation.asn | | `asn_reputation.asn_reputation` | number | Output field: asn\_reputation.asn\_reputation | | `asn_reputation.asn_reputation_explain` | object | Output field: asn\_reputation.asn\_reputation\_explain | | `asn_reputation.asn_reputation_explain.ips_in_asn` | number | Output field: asn\_reputation.asn\_reputation\_explain.ips\_in\_asn | | `asn_reputation.asn_reputation_explain.ips_num_active` | number | Output field: asn\_reputation.asn\_reputation\_explain.ips\_num\_active | | `asn_reputation.asn_reputation_explain.ips_num_listed` | number | Output field: asn\_reputation.asn\_reputation\_explain.ips\_num\_listed | | `asn_reputation.asname` | string | Name of the resource | | `asn_reputation.date` | number | Date value | ### Output Example `{"status_code":200,"response_headers":{},"reason":"OK","json_body":{"asn_reputation":[{}]}}` ## ASN Reputation History Retrieve the historical reputation data for a specified Autonomous System Number (ASN) from Silent Push. ### Endpoint - **URL:** `api/v1/merge-api/explore/ipreputation/history/asn/{{asn}}` - **Method:** `GET` ### Input | **Argument Name** | **Type** | **Required** | **Description** | | --------------------- | -------- | ------------ | ------------------------------------------------------------ | | `path_parameters.asn` | number | Required | Autonomous System Number to get reputation history for. | | `parameters.explain` | number | Optional | Show details of data used to calculate the reputation score. | | `parameters.limit` | number | Optional | Number of results to return. | ### Input Example `{"parameters":{"explain":1,"limit":3},"path_parameters":{"asn":211298}}` ### Output | **Parameter** | **Type** | **Description** | | -------------------------------------------------------------- | -------- | -------------------------------------------------------------------------------- | | `status_code` | number | HTTP status code of the response | | `reason` | string | Response reason phrase | | `asn_reputation_history` | array | Output field: asn\_reputation\_history | | `asn_reputation_history.asn` | number | Output field: asn\_reputation\_history.asn | | `asn_reputation_history.asn_reputation` | number | Output field: asn\_reputation\_history.asn\_reputation | | `asn_reputation_history.asn_reputation_explain` | object | Output field: asn\_reputation\_history.asn\_reputation\_explain | | `asn_reputation_history.asn_reputation_explain.ips_in_asn` | number | Output field: asn\_reputation\_history.asn\_reputation\_explain.ips\_in\_asn | | `asn_reputation_history.asn_reputation_explain.ips_num_active` | number | Output field: asn\_reputation\_history.asn\_reputation\_explain.ips\_num\_active | | `asn_reputation_history.asn_reputation_explain.ips_num_listed` | number | Output field: asn\_reputation\_history.asn\_reputation\_explain.ips\_num\_listed | | `asn_reputation_history.asname` | string | Name of the resource | | `asn_reputation_history.date` | number | Date value | ### Output Example `{"asn_reputation_history":[{"asn":211298,"asn_reputation":100,"asn_reputation_explain":{},"asname":"CYBER-CASA","date":20210916}]}` ## ASN Takedown Reputation Retrieve the takedown reputation for a specified Autonomous System Number (ASN) from Silent Push, requiring an ASN path parameter. ### Endpoint - **URL:** `api/v1/merge-api/explore/takedownreputation/asn/{{asn}}` - **Method:** `GET` ### Input | **Argument Name** | **Type** | **Required** | **Description** | | --------------------- | -------- | ------------ | -------------------------------------------------------- | | `parameters.explain` | number | Optional | show information used to calculate the reputation score. | | `path_parameters.asn` | string | Required | ASN to get takedown reputation for. | ### Input Example `{"parameters":{"explain":1},"path_parameters":{"asn":"13614"}}` ### Output | **Parameter** | **Type** | **Description** | | ---------------------------------------------------------------------- | -------- | ---------------------------------------------------------------------------------------- | | `status_code` | number | HTTP status code of the response | | `reason` | string | Response reason phrase | | `takedown_reputation` | object | Output field: takedown\_reputation | | `takedown_reputation.asn` | number | Output field: takedown\_reputation.asn | | `takedown_reputation.asn_allocation_age` | number | Output field: takedown\_reputation.asn\_allocation\_age | | `takedown_reputation.asn_allocation_date` | number | Date value | | `takedown_reputation.asn_takedown_reputation` | number | Output field: takedown\_reputation.asn\_takedown\_reputation | | `takedown_reputation.asn_takedown_reputation_explain` | object | Output field: takedown\_reputation.asn\_takedown\_reputation\_explain | | `takedown_reputation.asn_takedown_reputation_explain.ips_in_asn` | number | Output field: takedown\_reputation.asn\_takedown\_reputation\_explain.ips\_in\_asn | | `takedown_reputation.asn_takedown_reputation_explain.ips_num_listed` | number | Output field: takedown\_reputation.asn\_takedown\_reputation\_explain.ips\_num\_listed | | `takedown_reputation.asn_takedown_reputation_explain.items_num_listed` | number | Output field: takedown\_reputation.asn\_takedown\_reputation\_explain.items\_num\_listed | | `takedown_reputation.asn_takedown_reputation_explain.listings_max_age` | number | Output field: takedown\_reputation.asn\_takedown\_reputation\_explain.listings\_max\_age | | `takedown_reputation.asname` | string | Name of the resource | ### Output Example `{"status_code":200,"response_headers":{},"reason":"OK","json_body":{"takedown_reputation":{"asn":13335,"asn_allocation_age":4014,"asn_allocation_date":20100714,"asn_takedown_reputation":0,"asn_takedown_reputation_explain":{},"asname":"CLOUDFLARENET, US"}}}` ## Bulk Domain Information Retrieve detailed information for multiple domains using the Silent Push connector, requiring a list of domains in the input. ### Endpoint - **URL:** `api/v1/merge-api/explore/bulk/domaininfo` - **Method:** `POST` ### Input | **Argument Name** | **Type** | **Required** | **Description** | | ----------------- | -------- | ------------ | ----------------------------------------- | | `domains` | array | Optional | List of domains to get information about. | ### Input Example `{"json_body":{"domains":["silentpush.com","google.com"]}}` ### Output | **Parameter** | **Type** | **Description** | | ------------------------------- | -------- | ------------------------------------ | | `status_code` | number | HTTP status code of the response | | `reason` | string | Response reason phrase | | `domaininfo` | array | Output field: domaininfo | | `domaininfo.age` | number | Output field: domaininfo.age | | `domaininfo.age_score` | number | Score value | | `domaininfo.domain` | string | Output field: domaininfo.domain | | `domaininfo.first_seen` | number | Output field: domaininfo.first\_seen | | `domaininfo.is_new` | boolean | Output field: domaininfo.is\_new | | `domaininfo.is_new_score` | number | Score value | | `domaininfo.last_seen` | number | Output field: domaininfo.last\_seen | | `domaininfo.query` | string | Output field: domaininfo.query | | `domaininfo.whois_age` | string | Output field: domaininfo.whois\_age | | `domaininfo.whois_created_date` | string | Date value | | `domaininfo.zone` | string | Output field: domaininfo.zone | | `domaininfo.info` | string | Output field: domaininfo.info | ### Output Example `{"status_code":200,"response_headers":{},"reason":"OK","json_body":{"domaininfo":[{},{}]}}` ## Bulk Domain Infratags Retrieves infratags for multiple domains from Silent Push, optionally including clustering data. A list of domains is required. ### Endpoint - **URL:** `api/v1/merge-api/explore/domain/infratags` - **Method:** `POST` ### Input | **Argument Name** | **Type** | **Required** | **Description** | | --------------------- | -------- | ------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------- | | `parameters.mode` | string | Optional | Build infratags from live lookup data or from PADNS data. | | `parameters.match` | string | Optional | Handling of self-hosted infrastructure. | | `parameters.as_of` | string | Optional | Build infratags from padns data where the as\_of timestamp equivalent is between the first\_seen and the last\_seen timestamp - automatically sets mode to padns. | | `parameters.clusters` | number | Optional | Build clusters from infratags. | | `domains` | array | Optional | List of domains to get infratags for. | ### Input Example `{"parameters":{"mode":"live","match":"self","as_of":"date"},"json_body":{"domains":["silawatergim.club","fooldinort.top","elbigiddim.xyz"]}}` ### Output | **Parameter** | **Type** | **Description** | | ---------------------------- | -------- | -------------------------------------- | | `status_code` | number | HTTP status code of the response | | `reason` | string | Response reason phrase | | `infratags` | array | Output field: infratags | | `infratags.domain` | string | Output field: infratags.domain | | `infratags.mode` | string | Output field: infratags.mode | | `infratags.tag` | string | Output field: infratags.tag | | `tag_clusters` | array | Output field: tag\_clusters | | `tag_clusters.25` | array | Output field: tag\_clusters.25 | | `tag_clusters.25.domains` | array | Output field: tag\_clusters.25.domains | | `tag_clusters.25.match` | string | Output field: tag\_clusters.25.match | | `tag_clusters.50` | array | Output field: tag\_clusters.50 | | `tag_clusters.50.file_name` | string | Name of the resource | | `tag_clusters.50.file` | string | Output field: tag\_clusters.50.file | | `tag_clusters.75` | array | Output field: tag\_clusters.75 | | `tag_clusters.75.domains` | array | Output field: tag\_clusters.75.domains | | `tag_clusters.75.match` | string | Output field: tag\_clusters.75.match | | `tag_clusters.100` | array | Output field: tag\_clusters.100 | | `tag_clusters.100.file_name` | string | Name of the resource | | `tag_clusters.100.file` | string | Output field: tag\_clusters.100.file | ### Output Example `{"status_code":200,"response_headers":{},"reason":"OK","json_body":{"infratags":[{},{},{}],"tag_clusters":[{"25":[{"domains":["elbigiddim.xyz","silawatergim.club","fooldinort.top"],"match":"_:cloudflare.com:_:_"}]},{"50":[]},{"75":[{"domains":["elbigiddim.xyz","fooldinort.top"],"match":"_:cloudflare.com:leaseweb:porkbunllc"}]}]}}` ## Bulk Silent Push Risk Score for a List of Domains Retrieve bulk risk scores for a list of domains from Silent Push using the specified JSON body input. ### Endpoint - **URL:** `api/v1/merge-api/explore/bulk/domain/riskscore ` - **Method:** `POST` ### Input | **Argument Name** | **Type** | **Required** | **Description** | | ----------------- | -------- | ------------ | --------------------------------------- | | `domains` | array | Optional | List of domains to get risk scores for. | ### Input Example `{"json_body":{"domains":["2021olympicupdates.live","massgames.space","micros0ft0nline.one"]}}` ### Output | **Parameter** | **Type** | **Description** | | ------------- | -------- | -------------------------------- | | `status_code` | number | HTTP status code of the response | | `reason` | string | Response reason phrase | ### Output Example `{"status_code":200,"response_headers":{},"reason":"OK","json_body":[{"domain":"micros0ft0nline.one","sp_risk_score":100},{"domain":"massgames.space","sp_risk_score":100},{"domain":"2021olympicupdates.live","sp_risk_score":100}]}` ## Bulk Silent Push Risk Score for list IPv4 Address Retrieve bulk risk scores for specified IPv4 addresses from Silent Push, requiring a JSON body with the 'ips' field. ### Endpoint - **URL:** `api/v1/merge-api/explore/bulk/ipv4/riskscore` - **Method:** `POST` ### Input | **Argument Name** | **Type** | **Required** | **Description** | | ----------------- | -------- | ------------ | ---------------------------------------------- | | `ips` | array | Optional | List of IPv4 addresses to get risk scores for. | ### Input Example `{"json_body":{"ips":["87.246.7.245","77.247.110.204","45.153.160.139"]}}` ### Output | **Parameter** | **Type** | **Description** | | ------------- | -------- | -------------------------------- | | `status_code` | number | HTTP status code of the response | | `reason` | string | Response reason phrase | ### Output Example `{"status_code":200,"response_headers":{},"reason":"OK","json_body":[{"ip":"87.246.7.245","sp_risk_score":100},{"ip":"45.153.160.139","sp_risk_score":100},{"ip":"77.247.110.204","sp_risk_score":100}]}` ## Domain Enrichment Retrieve detailed enrichment information for a specified domain from Silent Push, utilizing the 'domain' path parameter. ### Endpoint - **URL:** `api/v1/merge-api/explore/enrich/domain/{{domain}}` - **Method:** `GET` ### Input | **Argument Name** | **Type** | **Required** | **Description** | | ------------------------ | -------- | ------------ | ---------------------------------------------------------------------------- | | `parameters.explain` | number | Optional | Show details of data used to calculate the different scores in the response. | | `parameters.scan_data` | number | Optional | show details of data collected from host scanning. | | `path_parameters.domain` | string | Required | Domain Name. | ### Input Example `{"parameters":{"explain":1,"scan_data":1},"path_parameters":{"domain":"olex.live"}}` ### Output | **Parameter** | **Type** | **Description** | | ---------------------------------------------------------------------- | -------- | ---------------------------------------------------------------------------------------- | | `status_code` | number | HTTP status code of the response | | `reason` | string | Response reason phrase | | `domain_string_frequency_probability` | object | Output field: domain\_string\_frequency\_probability | | `domain_string_frequency_probability.avg_probability` | number | Output field: domain\_string\_frequency\_probability.avg\_probability | | `domain_string_frequency_probability.dga_probability_score` | number | Score value | | `domain_string_frequency_probability.domain` | string | Output field: domain\_string\_frequency\_probability.domain | | `domain_string_frequency_probability.domain_string_freq_probabilities` | array | Output field: domain\_string\_frequency\_probability.domain\_string\_freq\_probabilities | | `domain_string_frequency_probability.query` | string | Output field: domain\_string\_frequency\_probability.query | | `domain_urls` | object | URL endpoint for the request | | `domain_urls.results_summary` | object | URL endpoint for the request | | `domain_urls.results_summary.alexa_rank` | object | URL endpoint for the request | | `domain_urls.results_summary.alexa_top10k` | boolean | URL endpoint for the request | | `domain_urls.results_summary.alexa_top10k_score` | number | URL endpoint for the request | | `domain_urls.results_summary.dynamic_domain_score` | number | URL endpoint for the request | | `domain_urls.results_summary.is_dynamic_domain` | boolean | URL endpoint for the request | | `domain_urls.results_summary.is_url_shortener` | boolean | URL endpoint for the request | | `domain_urls.results_summary.results` | number | URL endpoint for the request | | `domain_urls.results_summary.url_shortener_score` | number | URL endpoint for the request | | `domaininfo` | object | Output field: domaininfo | | `domaininfo.age` | number | Output field: domaininfo.age | | `domaininfo.age_score` | number | Score value | | `domaininfo.domain` | string | Output field: domaininfo.domain | | `domaininfo.first_seen` | number | Output field: domaininfo.first\_seen | | `domaininfo.is_new` | boolean | Output field: domaininfo.is\_new | | `domaininfo.is_new_score` | number | Score value | ### Output Example `{"status_code":200,"response_headers":{},"reason":"OK","json_body":{"domain_string_frequency_probability":{"avg_probability":9.674,"dga_probability_score":0,"domain":"olex.live","domain_string_freq_probabilities":[],"query":"olex.live"},"domain_urls":{"results_summary":{}},"domaininfo":{"age":69,"age_score":0,"domain":"olex.live","first_seen":20220928,"is_new":false,"is_new_score":0,"last_seen":20221206,"query":"olex.live","registrar":"","whois_age":"","whois_created_date":"","zone":"live"},"ip_...` ## Domain Information Retrieve detailed information for a specified domain from Silent Push, including the required path parameter 'domain'. ### Endpoint - **URL:** `api/v1/merge-api/explore/domain/domaininfo/{{domain}}` - **Method:** `GET` ### Input | **Argument Name** | **Type** | **Required** | **Description** | | ------------------------ | -------- | ------------ | -------------------------------- | | `path_parameters.domain` | string | Required | Domain to get information about. | ### Input Example `{"path_parameters":{"domain":"silentpush.com"}}` ### Output | **Parameter** | **Type** | **Description** | | ------------------------------- | -------- | ------------------------------------ | | `status_code` | number | HTTP status code of the response | | `reason` | string | Response reason phrase | | `domaininfo` | object | Output field: domaininfo | | `domaininfo.age` | number | Output field: domaininfo.age | | `domaininfo.age_score` | number | Score value | | `domaininfo.domain` | string | Output field: domaininfo.domain | | `domaininfo.first_seen` | number | Output field: domaininfo.first\_seen | | `domaininfo.is_new` | boolean | Output field: domaininfo.is\_new | | `domaininfo.is_new_score` | number | Score value | | `domaininfo.last_seen` | number | Output field: domaininfo.last\_seen | | `domaininfo.query` | string | Output field: domaininfo.query | | `domaininfo.whois_age` | number | Output field: domaininfo.whois\_age | | `domaininfo.whois_created_date` | string | Date value | | `domaininfo.zone` | string | Output field: domaininfo.zone | ### Output Example `{"status_code":200,"response_headers":{},"reason":"OK","json_body":{"domaininfo":{"age":536,"age_score":0,"domain":"silentpush.com","first_seen":20200121,"is_new":false,"is_new_score":0,"last_seen":20210709,"query":"silentpush.com","whois_age":536,"whois_created_date":"2020-01-20 08:14:27","zone":"com"}}}` ## Domain Infratag Retrieve the infratag associated with a specified domain in Silent Push, requiring the domain as a path parameter. ### Endpoint - **URL:** `api/v1/merge-api/explore/domain/infratag/{{domain}}` - **Method:** `GET` ### Input | **Argument Name** | **Type** | **Required** | **Description** | | ------------------------ | -------- | ------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------- | | `parameters.mode` | string | Optional | Build infratags from live lookup data or from PADNS data. | | `parameters.match` | string | Optional | Handling of self-hosted infrastructure. | | `parameters.as_of` | string | Optional | Build infratags from padns data where the as\_of timestamp equivalent is between the first\_seen and the last\_seen timestamp - automatically sets mode to padns. | | `path_parameters.domain` | string | Required | Domain to get infratag for. | ### Input Example `{"parameters":{"mode":"live","match":"self","as_of":"date"},"path_parameters":{"domain":"silentpush.com"}}` ### Output | **Parameter** | **Type** | **Description** | | ----------------- | -------- | -------------------------------- | | `status_code` | number | HTTP status code of the response | | `reason` | string | Response reason phrase | | `infratag` | object | Output field: infratag | | `infratag.domain` | string | Output field: infratag.domain | | `infratag.mode` | string | Output field: infratag.mode | | `infratag.tag` | string | Output field: infratag.tag | ### Output Example `{"status_code":200,"response_headers":{},"reason":"OK","json_body":{"infratag":{"domain":"silentpush.com","mode":"live","tag":"outlook.com:cloudflare.com:cloudflarenet:enom"}}}` ## Domain Search Performs a comprehensive search for domains using criteria like name servers, WHOIS data, and domain patterns. ### Endpoint - **URL:** `api/v1/merge-api/explore/domain/search` - **Method:** `GET` ### Input | **Argument Name** | **Type** | **Required** | **Description** | | -------------------------------- | -------- | ------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | | `parameters.domain` | string | Optional | Name or wildcard pattern of domain names to search for. | | `parameters.domain_regex` | string | Optional | Re2 regular expression - overrides domain parameter. Pattern must be a valid re2 regular expression. | | `parameters.nsname` | string | Optional | Name server name or wildcard pattern of name server used by domains. Use nsname=self to find domains hosting their own nameservers. | | `parameters.mxname` | string | Optional | MX server name or wildcard pattern of mx server used by domains. Use mxname=self to find domains hosting their own mailservers. | | `parameters.first_seen_min` | string | Optional | Only domains that have A records seen for the first time after the given date. | | `parameters.first_seen_max` | string | Optional | Only domains that have A records seen for the first time before the given date. | | `parameters.first_seen_min_mode` | string | Optional | Match mode for first\_seen\_min parameter. strict (default) - select A records that do not have any timestamps before first\_seen\_min. any - select A records that have at least one timestamp after first\_seen\_min. | | `parameters.first_seen_max_mode` | string | Optional | Match mode for first\_seen\_max parameter. strict (default) - select A records that do not have any timestamps after first\_seen\_max. any - select A records that have at least one timestamp before first\_seen\_max. | | `parameters.last_seen_min` | string | Optional | Only domains that have A records last seen more recently than the given date. | | `parameters.last_seen_max` | string | Optional | Only domains that have A records last seen earlier than the given date. | | `parameters.last_seen_min_mode` | string | Optional | Match mode for last\_seen\_min parameter. strict - select A records that do not have any timestamps before last\_seen\_min. any (default) - select A records that have at least one timestamp after first\_seen\_min. | | `parameters.last_seen_max_mode` | string | Optional | Match mode for last\_seen\_max parameter. strict (default) - select A records that do not have any timestamps after last\_seen\_max. any - select A records that have at least one timestamp before last\_seen\_max. | | `parameters.asnum` | number | Optional | AS number to search, may be repeated multiple time for additional AS numbers. | | `parameters.asn` | number | Optional | Search for IP addresses in or not in the given AS numbers. default = in. | | `parameters.asname` | string | Optional | Search all AS numbers where the AS Name begins with. | | `parameters.asname_starts_with` | string | Optional | Search all AS numbers where the AS Name begins with. | | `parameters.asname_contains` | string | Optional | Search all AS numbers where the AS Name contains. | | `parameters.asn_match` | string | Optional | How to match AS numbers. any (default) - match on any asnum given or derived from asname. all - asn diversity timeline must contain all asnums given as asnum parameter or derived from asname. limit - apply min and/or max limits as specified by optional asn\_match\_min and asn\_match\_max parameters. | | `parameters.asn_match_max` | number | Optional | Maximum of the asnums given as asnum or derived from asname must appear in asn diversity timeline. | | `parameters.asn_match_min` | number | Optional | Minimum of the asnums given as asnum or derived from asname must appear in asn diversity timeline. | | `parameters.network` | string | Optional | Additional network and net mask. Give option as 1.1.1.1/24. Network parameter may be given multiple times and the search will be performed as an 'or' condition. | | `parameters.timeline` | number | Optional | Include details of IPs, ASNs, first\_seen and last\_seen for each domain. 0 (default) = do not include. 1 = include timeline. | | `parameters.first_seen_after` | string | Optional | Only domains that have been seen using the NS server in the "nsname=" parameter for the first time after the given date. | | `parameters.first_seen_before` | string | Optional | Only domains that have been seen using the NS server in the "nsname=" parameter for the first time before the given date. | | `parameters.registrar` | string | Optional | Name or partial name of registrar used to register domains - no wildcards, the given string is used in partial match - this is a slow search option and should only be used in combination with the domain match option. | ### Input Example `{"parameters":{"domain":"example.com","domain_regex":".*\\.com$","nsname":"ns1.example.com","mxname":"mail.example.com","first_seen_min":"2024-01-01","first_seen_max":"2024-12-31","first_seen_min_mode":"strict","first_seen_max_mode":"strict","last_seen_min":"2024-01-01","last_seen_max":"2024-12-31","last_seen_min_mode":"any","last_seen_max_mode":"strict","asnum":12345,"asn":12345,"asname":"Example AS","asname_starts_with":"Example","asname_contains":"AS","asn_match":"any","asn_match_max":10,"asn_match_min":1,"network":"1.1.1.1/24","timeline":1,"first_seen_after":"2024-01-01","first_seen_before":"2024-12-31","registrar":"Example Registrar","email":"admin@example.com","whois_date_after":"2024-01-01","nschange_from_ns":"old-ns.example.com","nschange_to_ns":"new-ns.example.com","nschange_date_after":"2024-01-01","nschange_date_before":"2024-12-31","cert_date_min":"2024-01-01","cert_date_max":"2024-12-31","cert_issuer":"Example CA","infratag":"mx:mail.example.com","asn_diversity":5,"asn_diversity_min":1,"asn_diversity_max":10,"ip_diversity_all":5,"ip_diversity_all_min":1,"ip_diversity_all_max":10,"ip_diversity_groups":3,"ip_diversity_groups_min":1,"ip_diversity_groups_max":10,"limit":100,"skip":0,"prefer":"result","max_wait":25,"with_metadata":1}}` ### Output | **Parameter** | **Type** | **Description** | | ----------------------------- | -------- | ------------------------------------------- | | `status_code` | number | HTTP status code of the response | | `reason` | string | Response reason phrase | | `records` | array | Output field: records | | `records.asn_diversity` | number | Output field: records.asn\_diversity | | `records.host` | string | Output field: records.host | | `records.ip_diversity_all` | number | Output field: records.ip\_diversity\_all | | `records.ip_diversity_groups` | number | Output field: records.ip\_diversity\_groups | | `records.timeline` | array | Output field: records.timeline | | `records.timeline.asn` | number | Output field: records.timeline.asn | | `records.timeline.first_seen` | string | Output field: records.timeline.first\_seen | | `records.timeline.ip` | string | Output field: records.timeline.ip | | `records.timeline.last_seen` | string | Output field: records.timeline.last\_seen | ### Output Example `{"status_code":200,"response_headers":{},"reason":"OK","json_body":{"records":[{},{},{}]}}` ## Domain Typosquatting Search Identify potential typosquatted domain variations and filter results by excluding specified infrastructures using Silent Push. ### Endpoint - **URL:** `api/v1/merge-api/explore/padns/search/typosquat` - **Method:** `GET` ### Input | **Argument Name** | **Type** | **Required** | **Description** | | ------------------------------- | -------- | ------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | `parameters.autospoof` | string | Optional | Domain name for which to find spoofed variations. Automatically generates a regex used in search. Is overridden by the regex parameter, if given. | | `parameters.regex` | string | Optional | Re2 regular expression. Pattern must be a valid re2 regular expression. Regex overrides any autospoof domain given. | | `parameters.nsname` | string | Optional | Parameters for the Domain Typosquatting Search action | | `parameters.match` | string | Optional | Finds domains not on (neq) or on (eq) name servers given as nsname parameters. eq - domains on name servers. neq (default) - domains not on name servers. | | `parameters.net` | string | Optional | Find records where ip not in (default) or in subnet defined by netmask and additional network parameters. in - find records in subnet. notin (default) - find records not in subnet. | | `parameters.network` | string | Optional | Additional network and net mask. Give option as 1.1.1.1/24. Up to 5 additional networks may be given. | | `parameters.asnum` | number | Optional | AS number to search, may be repeated multiple time for additional AS numbers. Parameter may be used with qtype=a or qtype=ptr4. Use to find records in the same AS number. | | `parameters.asn` | string | Optional | Find ptr4 or a records where ipv4 in or not in ASN defined by asnum. in - find records in ASN. notin (default) - find records not in ASN. | | `parameters.asname` | string | Optional | Search all AS numbers where the AS Name begins with. | | `parameters.asname_starts_with` | string | Optional | Search all AS numbers where the AS Name begins with. | | `parameters.asname_contains` | string | Optional | Search all AS numbers where the AS Name contains. | | `parameters.reduce` | string | Optional | Aggregate timestamps for qname only (host) or for each qname=>qanswer observation (full). full (default) - show timestamps for qname=>qanswer observations. host - show timestamps for distinct qname only. | | `parameters.first_seen_after` | string | Optional | first\_seen timestamp must be on or after this time. default=-2592000 - look back 30 days. date: yyyy-mm-dd (2021-07-09) - fixed date. epoch: number (1625834953) - fixed time in epoch format. sec: negative number (-172800) - relative time seconds ago. time period: negative number with time period (-36h / -5d / -3w / -6m) - relative time ago. h - hours, d - days, w - weeks, m - months. | | `parameters.first_seen_before` | string | Optional | first\_seen timestamp must be on or before this time. date: yyyy-mm-dd (2021-07-09) - fixed date. epoch: number (1625834953) - fixed time in epoch format. sec: negative number (-172800) - relative time seconds ago. time period: negative number with time period (-36h / -5d / -3w / -6m) - relative time ago. h - hours, d - days, w - weeks, m - months. | | `parameters.last_seen_after` | string | Optional | last\_seen timestamp must be on or after this time. date: yyyy-mm-dd (2021-07-09) - fixed date. epoch: number (1625834953) - fixed time in epoch format. sec: negative number (-172800) - relative time seconds ago. time period: negative number with time period (-36h / -5d / -3w / -6m) - relative time ago. h - hours, d - days, w - weeks, m - months. | | `parameters.last_seen_before` | string | Optional | last\_seen timestamp must be on or before this time. date: yyyy-mm-dd (2021-07-09) - fixed date. epoch: number (1625834953) - fixed time in epoch format. sec: negative number (-172800) - relative time seconds ago. time period: negative number with time period (-36h / -5d / -3w / -6m) - relative time ago. h - hours, d - days, w - weeks, m - months. | | `parameters.as_of` | string | Optional | Only return records where the as\_of timestamp equivalent is between the first\_seen and the last\_seen timestamp. date: yyyy-mm-dd (2021-07-09) - fixed date. epoch: number (1625834953) - fixed time in epoch format. sec: negative number (-172800) - relative time seconds ago. time period: negative number with time period (-36h / -5d / -3w / -6m) - relative time ago. h - hours, d - days, w - weeks, m - months. | | `parameters.sort` | string | Optional | Order results in specified order - parameter may be repeated with different column names to produce a nested sorting effect. sort: last\_seen/last/time\_last - synonyms for last\_seen column. first\_seen/first/time\_first - synonyms for first\_seen column. query/rrname - synonyms for query column. answer/rdata - synonyms for answer\_seen column. order: asc/+/up - synonyms for ascending order. desc/-/down - synonyms for descending order. | | `parameters.output_format` | string | Optional | padns (default) - Silent Push padns output format. cof - common output format. | | `parameters.limit` | number | Optional | Number of results to return. default = 100. | | `parameters.skip` | number | Optional | Number of results to skip. | | `parameters.prefer` | string | Optional | result (default) - return results if available before max\_wait timeout, otherwise return job\_id. job\_id - return job\_id immediately. | | `parameters.max_wait` | number | Optional | Number of seconds to wait for results before returning job\_id. default = 25. value in the range from 0 to 25. | | `parameters.with_metadata` | number | Optional | Include metadata object in response - returned results, total results, job\_id. 0 (default) = do not include. 1 = include metadata. | ### Input Example `{"parameters":{"autospoof":"example.com","regex":".*\\.com$","nsname":"ns1.example.com","match":"neq","net":"notin","network":"1.1.1.1/24","asnum":12345,"asn":"notin","asname":"Example AS","asname_starts_with":"Example","asname_contains":"AS","reduce":"full","first_seen_after":"-2592000","first_seen_before":"2024-12-31","last_seen_after":"-2592000","last_seen_before":"2024-12-31","as_of":"2024-01-01","sort":"last_seen desc","output_format":"padns","limit":100,"skip":0,"prefer":"result","max_wait":25,"with_metadata":0}}` ### Output | **Parameter** | **Type** | **Description** | | -------------------- | -------- | --------------------------------- | | `status_code` | number | HTTP status code of the response | | `reason` | string | Response reason phrase | | `records` | array | Output field: records | | `records.answer` | string | Output field: records.answer | | `records.asn` | number | Output field: records.asn | | `records.asname` | string | Name of the resource | | `records.count` | number | Count value | | `records.domain` | string | Output field: records.domain | | `records.first_seen` | string | Output field: records.first\_seen | | `records.last_seen` | string | Output field: records.last\_seen | | `records.query` | string | Output field: records.query | | `records.type` | string | Type of the resource | ### Output Example `{"status_code":200,"response_headers":{},"reason":"OK","json_body":{"records":[{},{}]}}` ## IPv4 Enrichment Retrieve detailed enrichment information for a specified IPv4 address from Silent Push, with 'ipv4' as a required path parameter. ### Endpoint - **URL:** `api/v1/merge-api/explore/enrich/ipv4/{{ipv4}}` - **Method:** `GET` ### Input | **Argument Name** | **Type** | **Required** | **Description** | | ---------------------- | -------- | ------------ | ---------------------------------------------------------------------------- | | `parameters.explain` | number | Optional | Show details of data used to calculate the different scores in the response. | | `parameters.scan_data` | number | Optional | Show details of data collected from IPv4 scanning. | | `path_parameters.ipv4` | string | Required | An IPv4 address. | ### Input Example `{"parameters":{"explain":1,"scan_data":1},"path_parameters":{"ipv4":"96.43.250.251"}}` ### Output | **Parameter** | **Type** | **Description** | | ---------------------------------------------- | -------- | -------------------------------------------------------------- | | `status_code` | number | HTTP status code of the response | | `reason` | string | Response reason phrase | | `ip2asn` | array | Output field: ip2asn | | `ip2asn.asn` | number | Output field: ip2asn.asn | | `ip2asn.asn_allocation_age` | number | Output field: ip2asn.asn\_allocation\_age | | `ip2asn.asn_allocation_date` | number | Date value | | `ip2asn.asn_rank` | number | Output field: ip2asn.asn\_rank | | `ip2asn.asn_rank_score` | number | Score value | | `ip2asn.asn_reputation` | number | Output field: ip2asn.asn\_reputation | | `ip2asn.asn_reputation_explain` | object | Output field: ip2asn.asn\_reputation\_explain | | `ip2asn.asn_reputation_explain.ips_in_asn` | number | Output field: ip2asn.asn\_reputation\_explain.ips\_in\_asn | | `ip2asn.asn_reputation_explain.ips_num_active` | number | Output field: ip2asn.asn\_reputation\_explain.ips\_num\_active | | `ip2asn.asn_reputation_explain.ips_num_listed` | number | Output field: ip2asn.asn\_reputation\_explain.ips\_num\_listed | | `ip2asn.asn_reputation_score` | number | Score value | | `ip2asn.asn_takedown_reputation` | number | Output field: ip2asn.asn\_takedown\_reputation | | `ip2asn.asn_takedown_reputation_explain` | object | Output field: ip2asn.asn\_takedown\_reputation\_explain | | `ip2asn.asn_takedown_reputation_score` | number | Score value | | `ip2asn.asname` | string | Name of the resource | | `ip2asn.benign_info` | object | Output field: ip2asn.benign\_info | | `ip2asn.benign_info.actor` | string | Output field: ip2asn.benign\_info.actor | | `ip2asn.benign_info.known_benign` | boolean | Output field: ip2asn.benign\_info.known\_benign | | `ip2asn.benign_info.tags` | array | Output field: ip2asn.benign\_info.tags | | `ip2asn.benign_info.tags.file_name` | string | Name of the resource | | `ip2asn.benign_info.tags.file` | string | Output field: ip2asn.benign\_info.tags.file | | `ip2asn.date` | number | Date value | ### Output Example `{"status_code":200,"response_headers":{},"reason":"OK","json_body":{"ip2asn":[{}]}}` ## IPv4 Reputation Retrieve the reputation score for a specified IPv4 address from Silent Push using path parameters. ### Endpoint - **URL:** `api/v1/merge-api/explore/ipreputation/ipv4/{{ipv4}}` - **Method:** `GET` ### Input | **Argument Name** | **Type** | **Required** | **Description** | | ---------------------- | -------- | ------------ | ------------------------------------------------------------ | | `path_parameters.ipv4` | string | Required | IPv4 address to get reputation for. | | `parameters.explain` | number | Optional | Show details of data used to calculate the reputation score. | ### Input Example `{"parameters":{"explain":1},"path_parameters":{"ipv4":"192.168.1.1"}}` ### Output | **Parameter** | **Type** | **Description** | | ----------------------------------------------------------- | -------- | --------------------------------------------------------------------------- | | `status_code` | number | HTTP status code of the response | | `reason` | string | Response reason phrase | | `ipv4_reputation` | array | Output field: ipv4\_reputation | | `ipv4_reputation.ipv4` | string | Output field: ipv4\_reputation.ipv4 | | `ipv4_reputation.ipv4_reputation` | number | Output field: ipv4\_reputation.ipv4\_reputation | | `ipv4_reputation.ipv4_reputation_explain` | object | Output field: ipv4\_reputation.ipv4\_reputation\_explain | | `ipv4_reputation.ipv4_reputation_explain.listing_score` | number | Score value | | `ipv4_reputation.ipv4_reputation_explain.asn_reputation` | number | Output field: ipv4\_reputation.ipv4\_reputation\_explain.asn\_reputation | | `ipv4_reputation.ipv4_reputation_explain.subnet_reputation` | number | Output field: ipv4\_reputation.ipv4\_reputation\_explain.subnet\_reputation | | `ipv4_reputation.date` | number | Date value | ### Output Example `{"status_code":200,"response_headers":{},"reason":"OK","json_body":{"ipv4_reputation":[{}]}}` ## IPv4 Reputation History Retrieve the historical reputation data for a specified IPv4 address using Silent Push, requiring the ipv4 path parameter. ### Endpoint - **URL:** `api/v1/merge-api/explore/ipreputation/history/ipv4/{{ipv4}}` - **Method:** `GET` ### Input | **Argument Name** | **Type** | **Required** | **Description** | | ---------------------- | -------- | ------------ | ------------------------------------------------------------ | | `path_parameters.ipv4` | string | Required | IPv4 address to get reputation history for. | | `parameters.explain` | number | Optional | Show details of data used to calculate the reputation score. | | `parameters.limit` | number | Optional | Number of results to return. | ### Input Example `{"parameters":{"explain":1,"limit":3},"path_parameters":{"ipv4":"192.168.1.1"}}` ### Output | **Parameter** | **Type** | **Description** | | ------------------------------------------------------------------- | -------- | ------------------------------------------------------------------------------------ | | `status_code` | number | HTTP status code of the response | | `reason` | string | Response reason phrase | | `ipv4_reputation_history` | array | Output field: ipv4\_reputation\_history | | `ipv4_reputation_history.ipv4` | string | Output field: ipv4\_reputation\_history.ipv4 | | `ipv4_reputation_history.ipv4_reputation` | number | Output field: ipv4\_reputation\_history.ipv4\_reputation | | `ipv4_reputation_history.ipv4_reputation_explain` | object | Output field: ipv4\_reputation\_history.ipv4\_reputation\_explain | | `ipv4_reputation_history.ipv4_reputation_explain.listing_score` | number | Score value | | `ipv4_reputation_history.ipv4_reputation_explain.asn_reputation` | number | Output field: ipv4\_reputation\_history.ipv4\_reputation\_explain.asn\_reputation | | `ipv4_reputation_history.ipv4_reputation_explain.subnet_reputation` | number | Output field: ipv4\_reputation\_history.ipv4\_reputation\_explain.subnet\_reputation | | `ipv4_reputation_history.date` | number | Date value | ### Output Example `{"status_code":200,"response_headers":{},"reason":"OK","json_body":{"ipv4_reputation_history":[{}]}}` ## IPv6 Enrichment Retrieve detailed enrichment information for a specified IPv6 address from Silent Push, requiring an 'ipv6' path parameter. ### Endpoint - **URL:** `api/v1/merge-api/explore/enrich/ipv6/{{ipv6}}` - **Method:** `GET` ### Input | **Argument Name** | **Type** | **Required** | **Description** | | ---------------------- | -------- | ------------ | ---------------------------------------------------------------------------- | | `parameters.explain` | number | Optional | Show details of data used to calculate the different scores in the response. | | `parameters.scan_data` | number | Optional | Show details of data collected from host scanning. | | `path_parameters.ipv6` | string | Required | IPv6 address to enrich. | ### Input Example `{"parameters":{"explain":1,"scan_data":1},"path_parameters":{"ipv6":"2606:4700:4700::1111"}}` ### Output | **Parameter** | **Type** | **Description** | | ---------------------------------------------------- | -------- | ------------------------------------------------------- | | `status_code` | number | HTTP status code of the response | | `reason` | string | Response reason phrase | | `ip2asn` | array | Output field: ip2asn | | `ip2asn.asn` | number | Output field: ip2asn.asn | | `ip2asn.asn_allocation_age` | number | Output field: ip2asn.asn\_allocation\_age | | `ip2asn.asn_allocation_date` | number | Date value | | `ip2asn.asn_rank` | number | Output field: ip2asn.asn\_rank | | `ip2asn.asn_rank_score` | number | Score value | | `ip2asn.asn_reputation` | number | Output field: ip2asn.asn\_reputation | | `ip2asn.asn_reputation_explain` | object | Output field: ip2asn.asn\_reputation\_explain | | `ip2asn.asn_reputation_score` | number | Score value | | `ip2asn.asn_takedown_reputation` | number | Output field: ip2asn.asn\_takedown\_reputation | | `ip2asn.asn_takedown_reputation_explain` | object | Output field: ip2asn.asn\_takedown\_reputation\_explain | | `ip2asn.asn_takedown_reputation_score` | number | Score value | | `ip2asn.asname` | string | Name of the resource | | `ip2asn.date` | number | Date value | | `ip2asn.density` | number | Output field: ip2asn.density | | `ip2asn.ip` | string | Output field: ip2asn.ip | | `ip2asn.sp_risk_score` | number | Score value | | `ip2asn.sp_risk_score_explain` | object | Output field: ip2asn.sp\_risk\_score\_explain | | `ip2asn.sp_risk_score_explain.sp_risk_score_decider` | string | Unique identifier | | `ip2asn.subnet` | string | Output field: ip2asn.subnet | ### Output Example `{"status_code":200,"response_headers":{},"reason":"OK","json_body":{"ip2asn":[{}]}}` ## Name Server Changes Retrieve the history of name server changes for a specified domain via Silent Push, requiring the 'domain' as a path parameter. ### Endpoint - **URL:** `api/v1/merge-api/explore/domain/nschanges/{{domain}}` - **Method:** `GET` ### Input | **Argument Name** | **Type** | **Required** | **Description** | | ------------------------ | -------- | ------------ | -------------------------------------- | | `parameters.summary` | number | Optional | Return results summary only. | | `path_parameters.domain` | string | Required | Domain to get name server changes for. | ### Input Example `{"parameters":{"summary":1},"path_parameters":{"domain":"silentpush.com"}}` ### Output | **Parameter** | **Type** | **Description** | | ---------------------------------------------------------------------- | -------- | -------------------------------------------------------------------------------------- | | `status_code` | number | HTTP status code of the response | | `reason` | string | Response reason phrase | | `nschanges` | object | Output field: nschanges | | `nschanges.nschanges` | array | Output field: nschanges.nschanges | | `nschanges.nschanges.circular_change_to` | boolean | Output field: nschanges.nschanges.circular\_change\_to | | `nschanges.nschanges.date` | number | Date value | | `nschanges.nschanges.days_ago` | number | Output field: nschanges.nschanges.days\_ago | | `nschanges.nschanges.domain` | string | Output field: nschanges.nschanges.domain | | `nschanges.nschanges.from_expire` | boolean | Output field: nschanges.nschanges.from\_expire | | `nschanges.nschanges.from_nameservers` | array | Name of the resource | | `nschanges.nschanges.from_ns_in_domain` | boolean | Output field: nschanges.nschanges.from\_ns\_in\_domain | | `nschanges.nschanges.from_ns_srv_domain_density` | object | Output field: nschanges.nschanges.from\_ns\_srv\_domain\_density | | `nschanges.nschanges.from_ns_srv_domain_density.ns1.myhostns.com` | number | Output field: nschanges.nschanges.from\_ns\_srv\_domain\_density.ns1.myhostns.com | | `nschanges.nschanges.from_ns_srv_domain_density.ns2.myhostns.com` | number | Output field: nschanges.nschanges.from\_ns\_srv\_domain\_density.ns2.myhostns.com | | `nschanges.nschanges.from_ns_srv_domain_density.ns3.myhostns.com` | number | Output field: nschanges.nschanges.from\_ns\_srv\_domain\_density.ns3.myhostns.com | | `nschanges.nschanges.from_ns_srv_domain_density_low` | boolean | Output field: nschanges.nschanges.from\_ns\_srv\_domain\_density\_low | | `nschanges.nschanges.from_parked` | boolean | Output field: nschanges.nschanges.from\_parked | | `nschanges.nschanges.from_sinkhole` | boolean | Output field: nschanges.nschanges.from\_sinkhole | | `nschanges.nschanges.query` | string | Output field: nschanges.nschanges.query | | `nschanges.nschanges.to_expire` | boolean | Output field: nschanges.nschanges.to\_expire | | `nschanges.nschanges.to_nameservers` | array | Name of the resource | | `nschanges.nschanges.to_ns_in_domain` | boolean | Output field: nschanges.nschanges.to\_ns\_in\_domain | | `nschanges.nschanges.to_ns_srv_domain_density` | object | Output field: nschanges.nschanges.to\_ns\_srv\_domain\_density | | `nschanges.nschanges.to_ns_srv_domain_density.henry.ns.cloudflare.com` | number | Output field: nschanges.nschanges.to\_ns\_srv\_domain\_density.henry.ns.cloudflare.com | | `nschanges.nschanges.to_ns_srv_domain_density.vida.ns.cloudflare.com` | number | Unique identifier | ### Output Example `{"status_code":200,"response_headers":{},"reason":"OK","json_body":{"nschanges":{"nschanges":[],"results_summary":{}}}}` ## Name Server Changes Summary Retrieve a summary of name server changes for a specified domain, requiring the 'domain' as a path parameter. ### Endpoint - **URL:** `api/v1/merge-api/explore/domain/nschangessummary/{{domain}}` - **Method:** `GET` ### Input | **Argument Name** | **Type** | **Required** | **Description** | | ------------------------ | -------- | ------------ | ---------------------------------------------- | | `path_parameters.domain` | string | Required | Domain to get name server changes summary for. | ### Input Example `{"path_parameters":{"domain":"silentpush.com"}}` ### Output | **Parameter** | **Type** | **Description** | | --------------------------------------------------------------------- | -------- | -------------------------------- | | `status_code` | number | HTTP status code of the response | | `reason` | string | Response reason phrase | | `nschanges` | object | Output field: nschanges | | `nschanges.results_summary` | object | Result of the operation | | `nschanges.results_summary.changes_0_7_days` | number | Result of the operation | | `nschanges.results_summary.changes_30_90_days` | number | Result of the operation | | `nschanges.results_summary.changes_7_30_days` | number | Result of the operation | | `nschanges.results_summary.changes_last_30_days` | number | Result of the operation | | `nschanges.results_summary.changes_last_7_days` | number | Result of the operation | | `nschanges.results_summary.changes_last_90_days` | number | Result of the operation | | `nschanges.results_summary.domain` | string | Result of the operation | | `nschanges.results_summary.has_change_circular` | boolean | Result of the operation | | `nschanges.results_summary.has_change_expire_from` | boolean | Result of the operation | | `nschanges.results_summary.has_change_expire_to` | boolean | Result of the operation | | `nschanges.results_summary.has_change_ns_in_domain_from` | boolean | Result of the operation | | `nschanges.results_summary.has_change_ns_in_domain_to` | boolean | Result of the operation | | `nschanges.results_summary.has_change_ns_srv_domain_density_low_from` | boolean | Result of the operation | | `nschanges.results_summary.has_change_ns_srv_domain_density_low_to` | boolean | Result of the operation | | `nschanges.results_summary.has_change_parked_from` | boolean | Result of the operation | | `nschanges.results_summary.has_change_parked_to` | boolean | Result of the operation | | `nschanges.results_summary.has_change_sinkhole_from` | boolean | Result of the operation | | `nschanges.results_summary.has_change_sinkhole_to` | boolean | Result of the operation | | `nschanges.results_summary.last_change` | number | Result of the operation | | `nschanges.results_summary.last_change_circular_to` | boolean | Result of the operation | | `nschanges.results_summary.last_change_days_ago` | number | Result of the operation | ### Output Example `{"status_code":200,"response_headers":{},"reason":"OK","json_body":{"nschanges":{"results_summary":{}}}}` ## Name Server Reputation Retrieve the reputation score for a specified name server from Silent Push, using the 'nameserver' path parameter. ### Endpoint - **URL:** `api/v1/merge-api/explore/nsreputation/nameserver/{{nameserver}}` - **Method:** `GET` ### Input | **Argument Name** | **Type** | **Required** | **Description** | | ---------------------------- | -------- | ------------ | ------------------------------------------------------------ | | `path_parameters.nameserver` | string | Required | Name server to get reputation for. | | `parameters.explain` | number | Optional | Show details of data used to calculate the reputation score. | ### Input Example `{"parameters":{"explain":1},"path_parameters":{"nameserver":"a.dns-servers.net.ru"}}` ### Output | **Parameter** | **Type** | **Description** | | ---------------------------------------------------------------------------- | -------- | ------------------------------------------------------------------------------------------------ | | `status_code` | number | HTTP status code of the response | | `reason` | string | Response reason phrase | | `ns_server_reputation` | array | Output field: ns\_server\_reputation | | `ns_server_reputation.date` | number | Date value | | `ns_server_reputation.ns_server` | string | Output field: ns\_server\_reputation.ns\_server | | `ns_server_reputation.ns_server_reputation` | number | Output field: ns\_server\_reputation.ns\_server\_reputation | | `ns_server_reputation.ns_server_reputation_explain` | object | Output field: ns\_server\_reputation.ns\_server\_reputation\_explain | | `ns_server_reputation.ns_server_reputation_explain.ns_server_domain_density` | number | Output field: ns\_server\_reputation.ns\_server\_reputation\_explain.ns\_server\_domain\_density | | `ns_server_reputation.ns_server_reputation_explain.ns_server_domains_listed` | number | Output field: ns\_server\_reputation.ns\_server\_reputation\_explain.ns\_server\_domains\_listed | ### Output Example `{"status_code":200,"response_headers":{},"reason":"OK","json_body":{"ns_server_reputation":[{}]}}` ## Name Server Reputation History Retrieve the reputation history of a specified name server from Silent Push, requiring the 'nameserver' path parameter. ### Endpoint - **URL:** `api/v1/merge-api/explore/nsreputation/history/nameserver/{{nameserver}}` - **Method:** `GET` ### Input | **Argument Name** | **Type** | **Required** | **Description** | | ---------------------------- | -------- | ------------ | ------------------------------------------------------------ | | `path_parameters.nameserver` | string | Required | Name server to get reputation history for. | | `parameters.explain` | number | Optional | Show details of data used to calculate the reputation score. | | `parameters.limit` | number | Optional | Number of results to return. | ### Input Example `{"parameters":{"explain":1,"limit":3},"path_parameters":{"nameserver":"a.dns-servers.net.ru"}}` ### Output | **Parameter** | **Type** | **Description** | | ------------------------------------------------------------------------------------ | -------- | --------------------------------------------------------------------------------------------------------- | | `status_code` | number | HTTP status code of the response | | `reason` | string | Response reason phrase | | `ns_server_reputation_history` | array | Output field: ns\_server\_reputation\_history | | `ns_server_reputation_history.date` | number | Date value | | `ns_server_reputation_history.ns_server` | string | Output field: ns\_server\_reputation\_history.ns\_server | | `ns_server_reputation_history.ns_server_reputation` | number | Output field: ns\_server\_reputation\_history.ns\_server\_reputation | | `ns_server_reputation_history.ns_server_reputation_explain` | object | Output field: ns\_server\_reputation\_history.ns\_server\_reputation\_explain | | `ns_server_reputation_history.ns_server_reputation_explain.ns_server_domain_density` | number | Output field: ns\_server\_reputation\_history.ns\_server\_reputation\_explain.ns\_server\_domain\_density | | `ns_server_reputation_history.ns_server_reputation_explain.ns_server_domains_listed` | number | Output field: ns\_server\_reputation\_history.ns\_server\_reputation\_explain.ns\_server\_domains\_listed | ### Output Example `{"status_code":200,"response_headers":{},"reason":"OK","json_body":{"ns_server_reputation_history":[{}]}}` ## Ranked ASN Reputation Retrieve a list of Autonomous System Numbers (ASNs) with the highest reputation scores from Silent Push. ### Endpoint - **URL:** `api/v1/merge-api/explore/ipreputation/rank/asn` - **Method:** `GET` ### Input | **Argument Name** | **Type** | **Required** | **Description** | | -------------------- | -------- | ------------ | ------------------------------------------------------------ | | `parameters.explain` | number | Optional | Show details of data used to calculate the reputation score. | | `parameters.limit` | number | Optional | Number of results to return. | ### Input Example `{"parameters":{"explain":1,"limit":3}}` ### Output | **Parameter** | **Type** | **Description** | | ----------------------------------------------------------- | -------- | ----------------------------------------------------------------------------- | | `status_code` | number | HTTP status code of the response | | `reason` | string | Response reason phrase | | `asn_reputation_rank` | array | Output field: asn\_reputation\_rank | | `asn_reputation_rank.asn` | number | Output field: asn\_reputation\_rank.asn | | `asn_reputation_rank.asn_allocation_age` | number | Output field: asn\_reputation\_rank.asn\_allocation\_age | | `asn_reputation_rank.asn_allocation_date` | number | Date value | | `asn_reputation_rank.asn_reputation` | number | Output field: asn\_reputation\_rank.asn\_reputation | | `asn_reputation_rank.asn_reputation_explain` | object | Output field: asn\_reputation\_rank.asn\_reputation\_explain | | `asn_reputation_rank.asn_reputation_explain.ips_in_asn` | number | Output field: asn\_reputation\_rank.asn\_reputation\_explain.ips\_in\_asn | | `asn_reputation_rank.asn_reputation_explain.ips_num_active` | number | Output field: asn\_reputation\_rank.asn\_reputation\_explain.ips\_num\_active | | `asn_reputation_rank.asn_reputation_explain.ips_num_listed` | number | Output field: asn\_reputation\_rank.asn\_reputation\_explain.ips\_num\_listed | | `asn_reputation_rank.asname` | string | Name of the resource | ### Output Example `{"status_code":200,"response_headers":{},"reason":"OK","json_body":{"asn_reputation_rank":[{}]}}` ## Ranked Subnet Reputation Retrieve a list of subnets with the highest reputation scores from Silent Push, ranked by their security reliability. ### Endpoint - **URL:** `api/v1/merge-api/explore/ipreputation/rank/subnet` - **Method:** `GET` ### Input | **Argument Name** | **Type** | **Required** | **Description** | | -------------------- | -------- | ------------ | ------------------------------------------------------------ | | `parameters.explain` | number | Optional | Show details of data used to calculate the reputation score. | | `parameters.limit` | number | Optional | Number of results to return. | ### Input Example `{"parameters":{"explain":1,"limit":3}}` ### Output | **Parameter** | **Type** | **Description** | | ----------------------------------------------------------------- | -------- | ----------------------------------------------------------------------------------- | | `status_code` | number | HTTP status code of the response | | `reason` | string | Response reason phrase | | `subnet_reputation_rank` | array | Output field: subnet\_reputation\_rank | | `subnet_reputation_rank.subnet` | string | Output field: subnet\_reputation\_rank.subnet | | `subnet_reputation_rank.subnet_reputation` | number | Output field: subnet\_reputation\_rank.subnet\_reputation | | `subnet_reputation_rank.subnet_reputation_explain` | object | Output field: subnet\_reputation\_rank.subnet\_reputation\_explain | | `subnet_reputation_rank.subnet_reputation_explain.ips_in_subnet` | number | Output field: subnet\_reputation\_rank.subnet\_reputation\_explain.ips\_in\_subnet | | `subnet_reputation_rank.subnet_reputation_explain.ips_num_active` | number | Output field: subnet\_reputation\_rank.subnet\_reputation\_explain.ips\_num\_active | | `subnet_reputation_rank.subnet_reputation_explain.ips_num_listed` | number | Output field: subnet\_reputation\_rank.subnet\_reputation\_explain.ips\_num\_listed | ### Output Example `{"status_code":200,"response_headers":{},"reason":"OK","json_body":{"subnet_reputation_rank":[{}]}}` ## Silent Push Risk Score for Domain Retrieve the risk score for a specified domain from Silent Push, using the domain as a path parameter. ### Endpoint - **URL:** `api/v1/merge-api/explore/domain/riskscore/{{domain}}` - **Method:** `GET` ### Input | **Argument Name** | **Type** | **Required** | **Description** | | ------------------------ | -------- | ------------ | ----------------------------- | | `path_parameters.domain` | string | Required | Domain to get risk score for. | ### Input Example `{"path_parameters":{"domain":"regardlessnotice.top"}}` ### Output | **Parameter** | **Type** | **Description** | | --------------- | -------- | -------------------------------- | | `status_code` | number | HTTP status code of the response | | `reason` | string | Response reason phrase | | `domain` | string | Output field: domain | | `sp_risk_score` | number | Score value | ### Output Example `{"status_code":200,"response_headers":{},"reason":"OK","json_body":{"domain":"regardlessnotice.top","sp_risk_score":95}}` ## Silent Push Risk Score for IPv4 Retrieve the risk score for a specified IPv4 address from Silent Push using the provided path parameter. ### Endpoint - **URL:** `api/v1/merge-api/explore/ipv4/riskscore/{{ipv4}}` - **Method:** `GET` ### Input | **Argument Name** | **Type** | **Required** | **Description** | | ---------------------- | -------- | ------------ | --------------------------------------------------------- | | `path_parameters.ipv4` | string | Required | Parameters for the Silent Push Risk Score for IPv4 action | ### Input Example `{"path_parameters":{"ipv4":"1.1.1.1"}}` ### Output | **Parameter** | **Type** | **Description** | | ---------------------- | -------- | -------------------------------- | | `status_code` | number | HTTP status code of the response | | `reason` | string | Response reason phrase | | `ip2asn` | array | Output field: ip2asn | | `ip2asn.ip` | string | Output field: ip2asn.ip | | `ip2asn.sp_risk_score` | number | Score value | ### Output Example `{"status_code":200,"response_headers":{},"reason":"OK","json_body":{"ip2asn":[{}]}}` ## Subnet Reputation Retrieve the reputation score for a specified subnet from Silent Push using the provided path parameter. ### Endpoint - **URL:** `api/v1/merge-api/explore/ipreputation/subnet/{{subnet}}` - **Method:** `GET` ### Input | **Argument Name** | **Type** | **Required** | **Description** | | ------------------------ | -------- | ------------ | ------------------------------------------------------------ | | `path_parameters.subnet` | string | Required | Subnet in CIDR notation to get reputation for. | | `parameters.explain` | number | Optional | Show details of data used to calculate the reputation score. | ### Input Example `{"parameters":{"explain":1},"path_parameters":{"subnet":"192.168.1.0/24"}}` ### Output | **Parameter** | **Type** | **Description** | | ------------------------------------------------------------ | -------- | ----------------------------------------------------------------------------- | | `status_code` | number | HTTP status code of the response | | `reason` | string | Response reason phrase | | `subnet_reputation` | array | Output field: subnet\_reputation | | `subnet_reputation.subnet` | string | Output field: subnet\_reputation.subnet | | `subnet_reputation.subnet_reputation` | number | Output field: subnet\_reputation.subnet\_reputation | | `subnet_reputation.subnet_reputation_explain` | object | Output field: subnet\_reputation.subnet\_reputation\_explain | | `subnet_reputation.subnet_reputation_explain.ips_in_subnet` | number | Output field: subnet\_reputation.subnet\_reputation\_explain.ips\_in\_subnet | | `subnet_reputation.subnet_reputation_explain.ips_num_active` | number | Output field: subnet\_reputation.subnet\_reputation\_explain.ips\_num\_active | | `subnet_reputation.subnet_reputation_explain.ips_num_listed` | number | Output field: subnet\_reputation.subnet\_reputation\_explain.ips\_num\_listed | ### Output Example `{"status_code":200,"response_headers":{},"reason":"OK","json_body":{"subnet_reputation":[{}]}}` ## Subnet Reputation History Retrieve the historical reputation data for a specified subnet from Silent Push, requiring the 'subnet' path parameter. ### Endpoint - **URL:** `api/v1/merge-api/explore/ipreputation/history/subnet/{{subnet}}` - **Method:** `GET` ### Input | **Argument Name** | **Type** | **Required** | **Description** | | ------------------------ | -------- | ------------ | ------------------------------------------------------------ | | `path_parameters.subnet` | string | Required | Subnet in CIDR notation to get reputation history for. | | `parameters.explain` | number | Optional | Show details of data used to calculate the reputation score. | | `parameters.limit` | number | Optional | Number of results to return. | ### Input Example `{"parameters":{"explain":1,"limit":3},"path_parameters":{"subnet":"192.168.1.0/24"}}` ### Output | **Parameter** | **Type** | **Description** | | -------------------------------------------------------------------- | -------- | -------------------------------------------------------------------------------------- | | `status_code` | number | HTTP status code of the response | | `reason` | string | Response reason phrase | | `subnet_reputation_history` | array | Output field: subnet\_reputation\_history | | `subnet_reputation_history.subnet` | string | Output field: subnet\_reputation\_history.subnet | | `subnet_reputation_history.subnet_reputation` | number | Output field: subnet\_reputation\_history.subnet\_reputation | | `subnet_reputation_history.subnet_reputation_explain` | object | Output field: subnet\_reputation\_history.subnet\_reputation\_explain | | `subnet_reputation_history.subnet_reputation_explain.ips_in_subnet` | number | Output field: subnet\_reputation\_history.subnet\_reputation\_explain.ips\_in\_subnet | | `subnet_reputation_history.subnet_reputation_explain.ips_num_active` | number | Output field: subnet\_reputation\_history.subnet\_reputation\_explain.ips\_num\_active | | `subnet_reputation_history.subnet_reputation_explain.ips_num_listed` | number | Output field: subnet\_reputation\_history.subnet\_reputation\_explain.ips\_num\_listed | | `subnet_reputation_history.date` | number | Date value | ### Output Example `{"status_code":200,"response_headers":{},"reason":"OK","json_body":{"subnet_reputation_history":[{}]}}` ## WHOIS Information Retrieve WHOIS data for a domain from Silent Push, requiring the domain as a path parameter. ### Endpoint - **URL:** `api/v1/merge-api/explore/domain/whois/{{domain}}` - **Method:** `GET` ### Input | **Argument Name** | **Type** | **Required** | **Description** | | ------------------------ | -------- | ------------ | -------------------------------------- | | `path_parameters.domain` | string | Required | Domain to get WHOIS information about. | ### Input Example `{"path_parameters":{"domain":"silentpush.com"}}` ### Output | **Parameter** | **Type** | **Description** | | -------------------- | -------- | --------------------------------- | | `status_code` | number | HTTP status code of the response | | `reason` | string | Response reason phrase | | `whois` | array | Output field: whois | | `whois.address` | string | Output field: whois.address | | `whois.city` | string | Output field: whois.city | | `whois.country` | string | Output field: whois.country | | `whois.created` | string | Output field: whois.created | | `whois.date` | number | Date value | | `whois.domain` | string | Output field: whois.domain | | `whois.emails` | array | Output field: whois.emails | | `whois.expires` | string | Output field: whois.expires | | `whois.name` | string | Name of the resource | | `whois.nameservers` | array | Name of the resource | | `whois.org` | string | Output field: whois.org | | `whois.query` | string | Output field: whois.query | | `whois.registrar` | string | Output field: whois.registrar | | `whois.state` | string | Output field: whois.state | | `whois.updated` | string | Output field: whois.updated | | `whois.whois_server` | string | Output field: whois.whois\_server | | `whois.zipcode` | string | Output field: whois.zipcode | ### Output Example `{"status_code":200,"response_headers":{},"reason":"OK","json_body":{"whois":[{}]}}` # Response Headers | **Header** | **Description** | **Example** | | ------------ | ----------------------------------------------------- | ----------------------------- | | Content-Type | The media type of the resource | application/json | | Date | The date and time at which the message was originated | Thu, 01 Jan 2024 00:00:00 GMT |