Sign in

v1

latestOpenAPI 3.0.0Proprietary - Commercial Use Only2026-08-06172139621.6 KB
Findings

Get a fraudulent application of a company.

Fraudulent or pirate mobile or desktop applications are used to hack or phish employee or customer data. Possible fraudulent or pirate mobile or desktop apps on Google Play, App Store and pirate app stores are provided. This category has 3% effect on total scan score.<br/><br/> For storage optimization, the system <b>permanently</b> deletes all findings that haven't been detected by the Black Kite scanner for over a year. Findings with manually changed statuses or associated tickets are excluded.

get/api/v2/companies/{id}/findings/fraudulentapps/{findingId}

Path parameters

idinteger required

The id of the company that includes finding.

findingIdinteger required

The id of the target finding.

Response

Success

FindingIdinteger

The unique identifier of this finding.

Domainstring

The domain which this finding is related.

Severity'Info' | 'Low' | 'Medium' | 'High' | 'Critical'

The severity of a finding.

Status'Active' | 'FalsePositive' | 'Suppressed' | 'Acknowledged' | 'Deleted' | 'Remediated'

The status of this finding.

  • Active, means the finding is still active with no review as of yet.
  • FalsePositive, means the finding is considered to be false alarm.
  • Suppressed, means the finding is suppressed, similar to FalsePositive.
  • Acknowledged, means the finding is accepted, for example will not be fixed.
  • Deleted, means the finding is deleted, similar to FalsePositive.
  • Remediated, means the finding is mitigated.
ControlIdstring

The unique identifier of the control that this finding relates to.

FindingDatestring date-time

The date that Black Kite first seen the finding.

LastCheckDatestring date-time

The date that Black Kite last checked the finding.

Sourcestring

The source of the possibly fraudulent application.

Packagestring

The package name or identifier of the possibly fraudulent application.

ScreenshotUrlstring nullable

The URL of the possibly fraudulent application screenshot.

FindingTitlestring

A title for the finding. Same with the security control's title referenced by the ControlId.

ApplicationUrlstring

The URL of the possibly fraudulent application.

Detailstring

A short detail specific to the finding. Possibly HTML formatted.

ConfidenceLevel'Low' | 'Medium' | 'High' | 'VeryHigh' nullable

The confidence level of this finding.

UpdateDatestring date-time nullable

The date that the finding was last updated.

Example response

{
  "FindingId": 2590965999,
  "Domain": "acmeinc.com",
  "Severity": "Medium",
  "Status": "Active",
  "ControlId": "FRADOM-001",
  "Ticket": {
    "Status": "Assigned",
    "Owner": "John Doe"
  },
  "FindingDate": "2021-08-09T08:30:30.682Z",
  "LastCheckDate": "2021-08-09T08:30:30.682Z",
  "Source": "Pirate Mobile Apps (iOS)",
  "Package": "promotora medica",
  "ScreenshotUrl": "https://image.normshield.com/api/v1/ss?f=2018_05_31_b64735ed3c444499b779f59a041101a5.png",
  "FindingTitle": "X-Content-Type-Options HTTP Header",
  "ApplicationUrl": "https://acmeinc.en.aptoide.com/",
  "Detail": "X-Content-Type-Options header not found",
  "ConfidenceLevel": "High",
  "UpdateDate": "2021-08-09T08:30:30.682Z"
}