Skip to main content
POST
/
v2
/
domain
/
query
Domain Intelligence (V2)
curl --request POST \
  --url https://api.threatbook.io/v2/domain/query
{
  "msg": "<string>",
  "response_code": 123,
  "data": {
    "threat_types": [
      "<string>"
    ],
    "verdict": "<string>",
    "intel_lables": [
      "<string>"
    ],
    "intelligences": [
      {}
    ],
    "samples": [
      {}
    ],
    "pdns": [
      {}
    ],
    "whois": {},
    "ssl_certs": [
      {}
    ],
    "umbrella_rank": {},
    "categories": {},
    "sub_domains_count": "<string>",
    "pdns_count": "<string>"
  }
}

Query Parameters

​
apikey
string
required

Unique identifier for API request.

You are able to get the key on "My API" page of i.threatbook.io.

Kindly note:

Please check if you have bound your access IP to the key and have the authority quotas to access this API before you interact with it.

​
resource
string
required

Single domain to query.

​
exclude
string

You can exclude the following parameters from the response based on actual usage scenarios. When specifying multiple parameters, separate them with commas (note: do not include spaces).

  • pdns: Resolved IP address information of the domain
  • whois: Current WHOIS information of the domain
  • ssl_certs: SSL certificate and related information
  • intelligences: Threat intelligence
  • judgments: Comprehensively determined threat type, analyzed from threat intelligence
  • tags_classes: Tags related to attack groups or security incidents
  • samples: Related samples
  • categories: Domain classification
  • sub_domains_count: Number of subdomains
  • pdns_count: Number of currently resolved IPs

If you don’t specify this parameter, we will return all data by default.

Response

​
msg
string
required
​
response_code
integer
required
​
data
object
required
⌘I