Cloudflare API | Intel › Domains › Get Domain Details

curl https://api.cloudflare.com/client/v4/accounts/$ACCOUNT_ID/intel/domain \
    -H "X-Auth-Email: $CLOUDFLARE_EMAIL" \
    -H "X-Auth-Key: $CLOUDFLARE_API_KEY"

200Example

{
  "errors": [
    {
      "code": 1000,
      "message": "message"
    }
  ],
  "messages": [
    {
      "code": 1000,
      "message": "message"
    }
  ],
  "success": true,
  "result": {
    "additional_information": {
      "suspected_malware_family": ""
    },
    "application": {
      "id": 0,
      "name": "CLOUDFLARE"
    },
    "content_categories": [
      {
        "id": 155,
        "name": "Technology",
        "super_category_id": 26
      }
    ],
    "domain": "cloudflare.com",
    "inherited_content_categories": [
      {
        "id": 0,
        "name": "name",
        "super_category_id": 0
      }
    ],
    "inherited_from": "inherited_from",
    "inherited_risk_types": [
      {
        "id": 0,
        "name": "name",
        "super_category_id": 0
      }
    ],
    "popularity_rank": 0,
    "resolves_to_refs": [
      {
        "id": "ipv4-addr--baa568ec-6efe-5902-be55-0663833db537",
        "value": "192.0.2.0"
      }
    ],
    "risk_score": 0,
    "risk_types": [
      {
        "id": 0,
        "name": "name",
        "super_category_id": 0
      }
    ]
  }
}

Domain types

Domain = { additional_information, application, content_categories, 8 more... }

Intel Domains

Bulks

intel.domains.bulks

Methods

Get Multiple Domain Details -> Envelope<Array<{ additional_information, application, content_categories, 7 more... }>>

get/accounts/{account_id}/intel/domain/bulk

Same as summary

Intel

Indicator Feeds

intel.indicator_feeds

Methods

Create New Indicator Feed -> Envelope<{ id, created_on, description, 5 more... }>

post/accounts/{account_id}/intel/indicator-feeds

Create new indicator feed

Get Indicator Feed Data -> string

get/accounts/{account_id}/intel/indicator-feeds/{feed_id}/data

Get indicator feed data

Get Indicator Feed Metadata -> Envelope<{ id, created_on, description, 8 more... }>

get/accounts/{account_id}/intel/indicator-feeds/{feed_id}

Get indicator feed metadata

Get Indicator Feeds Owned By This Account -> SinglePage<{ id, created_on, description, 5 more... }>

get/accounts/{account_id}/intel/indicator-feeds

Get indicator feeds owned by this account

Update Indicator Feed Metadata -> Envelope<{ id, created_on, description, 5 more... }>

put/accounts/{account_id}/intel/indicator-feeds/{feed_id}

Update indicator feed metadata

Intel Indicator Feeds

Downloads

intel.indicator_feeds.downloads

Methods

Download Indicator Feed Data -> Envelope<{ file_id, filename, status }>

get/accounts/{account_id}/intel/indicator_feeds/{feed_id}/download

Download indicator feed data

Intel Indicator Feeds

Permissions

intel.indicator_feeds.permissions

Methods

Grant Permission To Indicator Feed -> Envelope<{ success }>

put/accounts/{account_id}/intel/indicator-feeds/permissions/add

Grant permission to indicator feed

Revoke Permission To Indicator Feed -> Envelope<{ success }>

put/accounts/{account_id}/intel/indicator-feeds/permissions/remove

Revoke permission to indicator feed

List Indicator Feed Permissions -> Envelope<Array<{ id, description, is_attributable, 3 more... }>>

get/accounts/{account_id}/intel/indicator-feeds/permissions/view

List indicator feed permissions

Intel Indicator Feeds

Snapshots

intel.indicator_feeds.snapshots

Methods

Update Indicator Feed Data -> Envelope<{ file_id, filename, status }>

put/accounts/{account_id}/intel/indicator-feeds/{feed_id}/snapshot

Update indicator feed data

Intel

IP Lists

intel.ip_lists

Methods

Get IP Lists -> Envelope<Array<

IPList

get/accounts/{account_id}/intel/ip-list

Get IP Lists

Domain types

IPList = { id, description, name }

Intel

IPs

intel.ips

Methods

Get IP Overview -> Envelope<Array<

get/accounts/{account_id}/intel/ip

Gets the geolocation, ASN, infrastructure type of the ASN, and any security threat categories of an IP address.

Domain types

IP = { belongs_to_ref, ip, risk_types }

Intel

Miscategorizations

intel.miscategorizations

Methods

Create Miscategorization -> { errors, messages, success }

post/accounts/{account_id}/intel/miscategorization

Allows you to submit requests to change a domain’s category.

Intel

Sinkholes

intel.sinkholes

Methods

List Sinkholes Owned By This Account -> SinglePage<

Sinkhole

get/accounts/{account_id}/intel/sinkholes

List sinkholes owned by this account

Domain types

Sinkhole = { id, account_tag, created_on, 4 more... }

Intel

Whois

intel.whois

Methods

Get Whois Record -> Envelope<{ domain, extension, found, 84 more... }>

get/accounts/{account_id}/intel/whois

Get WHOIS Record

Domain types

Whois = { created_date, domain, nameservers, 6 more... }