Domain: Search

get

https://api.recordedfuture.com/v2/domain/search

Find domains by risk score, risk rules, dates, or list membership with paginated enrichment results.

Query Params

fields

string

The enrichment fields requested for the entities returned. Several fields can be given as a comma separated string.

See https://docs.recordedfuture.com/reference/enrichment-field-attributes for a list of values.

metadata

enum

Annotates the response with additional metadata explaining the response data elements.

Allowed:

limit

int32

≤ 1000

Maximum number of records returned,

from

int32

Defaults to 0

Offsets the pagination of the request. Note that there is a limit of returning only the top 10000 results from a search, meaning if limit plus from exceeds 10000, this will result in an Bad Request message.

riskScore

string

Filters entities based on risk score, e.g. on the form [20, 80] (20 <= risk score <= 80), [20,) (20 <= risk score), or [,90) (risk score < 90). '[' and ']' are inclusive while '(' and ')' are exclusive.

firstSeen

string

Filters entities based on the download of the first reference which is taken into account during risk scoring of the entity. All Elasticsearch compatible date formats are valid.

lastSeen

string

Filters entities based on the download of the latest reference which is taken into account during risk scoring of the entity. All Elasticsearch compatible date formats are valid.

list

string

Filters entities based on presence in a single list. Requires the list ID, which can be found using the List API

riskRule

enum

Filters for domains based on a single risk rule.

parent

string

Filters for companies based on parent company. The expected value is a Company ID.

orderBy

enum

Sorts the search according to the chosen parameter. Results are sorted before pagination.

direction

enum

The direction of the sorting by the orderBy parameter, ascending or descending.

Allowed:

comment

string

deprecated

Response

Language

Credentials

Header

Loading…

Response

Click Try It! to start a request and see the response here! Or choose an example:

application/json

200Result of operation