Sign in

v1

latestOpenAPI 3.1.0Proprietary2026-08-06235779.1 KB
check

Full Threat Analysis

Comprehensive threat intelligence check for IPs and domains.

Enrichment Levels:

  • basic - Malicious status, reputation, geo, whois, certificates, vulnerabilities
  • standard - Basic + risk score, classification, confidence, MITRE mapping
  • full - Standard + detection timeline, related infrastructure, DNS analysis, tech stack
get/check

Path parameters

querystring required

IP address or domain to check

enrichmentstring nullable required

Enrichment level: basic, standard, or full

track_reportsboolean nullable required

Track this check in reports history

Response

Successful threat analysis response

api_versionstring required

API version used

enrichment_levelstring required

Enrichment level applied

maliciousboolean required

Whether the entity is considered malicious

Example response

{
  "api_version": "v2",
  "certificates": {
    "fingerprint": "a1:b2:c3:d4:e5:f6:...",
    "issuer": "DigiCert Inc",
    "serial_number": "00:ab:cd:ef:12:34:56:78",
    "subject": "CN=example.com",
    "valid_from": "2023-01-01T00:00:00Z",
    "valid_to": "2024-01-01T00:00:00Z"
  },
  "classification": {
    "primary": "safe"
  },
  "confidence": {
    "level": "high"
  },
  "geo": {
    "city": "Mountain View",
    "country": "United States",
    "country_code": "US",
    "isp": "Google LLC",
    "lat": 37.386,
    "lon": -122.0838,
    "region": "California"
  },
  "risk_score": {
    "level": "safe"
  },
  "vulnerabilities": {
    "cves": [
      {
        "description": "Buffer overflow vulnerability in...",
        "id": "CVE-2023-1234",
        "score": 7.5,
        "severity": "HIGH"
      }
    ]
  },
  "whois": {
    "created_date": "2020-01-15T00:00:00Z",
    "expires_date": "2025-01-15T00:00:00Z",
    "registrant": "Example Inc.",
    "registrar": "GoDaddy.com, LLC",
    "updated_date": "2023-06-20T00:00:00Z"
  }
}