API Reference

Intel

Copy Markdown

Open in Claude

Open in ChatGPT

Open in Cursor

---

Copy Markdown

View as Markdown

Domains

Get Domain Details

GET/accounts/{account_id}/intel/domain

ModelsExpand Collapse

Domain { additional_information, application, content_categories, 8 more }

additional_information: optional { suspected_malware_family }

Additional information related to the host name.

suspected_malware_family: optional string

Suspected DGA malware family.

application: optional { id, name }

Application that the hostname belongs to.

id: optional number

name: optional string

content_categories: optional array of { id, name, super_category_id }

id: optional number

name: optional string

super_category_id: optional number

domain: optional string

inherited_content_categories: optional array of { id, name, super_category_id }

id: optional number

name: optional string

super_category_id: optional number

inherited_from: optional string

Domain from which inherited_content_categories and inherited_risk_types are inherited, if applicable.

inherited_risk_types: optional array of { id, name, super_category_id }

id: optional number

name: optional string

super_category_id: optional number

popularity_rank: optional number

Global Cloudflare 100k ranking for the last 30 days, if available for the hostname. The top ranked domain is 1, the lowest ranked domain is 100,000.

resolves_to_refs: optional array of { id, value }

Specifies a list of references to one or more IP addresses or domain names that the domain name currently resolves to.

id: optional string

STIX 2.1 identifier: https://docs.oasis-open.org/cti/stix/v2.1/cs02/stix-v2.1-cs02.html#_64yvzeku5a5c.

value: optional string

IP address or domain name.

risk_score: optional number

Hostname risk score, which is a value between 0 (lowest risk) to 1 (highest risk).

risk_types: optional array of { id, name, super_category_id }

id: optional number

name: optional string

super_category_id: optional number

DomainsBulks

Get Multiple Domain Details

GET/accounts/{account_id}/intel/domain/bulk

ModelsExpand Collapse

BulkGetResponse = array of { additional_information, application, content_categories, 7 more }

additional_information: optional { suspected_malware_family }

Additional information related to the host name.

suspected_malware_family: optional string

Suspected DGA malware family.

application: optional { id, name }

Application that the hostname belongs to.

id: optional number

name: optional string

content_categories: optional array of { id, name, super_category_id }

id: optional number

name: optional string

super_category_id: optional number

domain: optional string

inherited_content_categories: optional array of { id, name, super_category_id }

id: optional number

name: optional string

super_category_id: optional number

inherited_from: optional string

Domain from which inherited_content_categories and inherited_risk_types are inherited, if applicable.

inherited_risk_types: optional array of { id, name, super_category_id }

id: optional number

name: optional string

super_category_id: optional number

popularity_rank: optional number

Global Cloudflare 100k ranking for the last 30 days, if available for the hostname. The top ranked domain is 1, the lowest ranked domain is 100,000.

risk_score: optional number

Hostname risk score, which is a value between 0 (lowest risk) to 1 (highest risk).

risk_types: optional array of { id, name, super_category_id }

id: optional number

name: optional string

super_category_id: optional number