What this endpoint does

This endpoint submits a bulk data request for Magecart merchant-level data from Payment Fraud Intelligence (PFI). Magecart merchant data enriches e-skimmer domain records with merchant account details such as merchant name and MID, providing deeper context about the compromised e-commerce businesses. The queryRange for this data set has a compound filter — records are included if any of these conditions are met: the record was enriched with merchant data within the date range (merchantAdded), the e-skimmer IOCs were last observed within the date range (timeStampLastSeen), or the domain is currently infected (infected is true). Records are scoped to your organization's data. Use the dryRun option at the root level of the request body to preview the record count without creating a task. For domain-level data without merchant enrichment, use the PFI: Magecart Domain Data endpoint. After submission, use the PFI: Task Status endpoint to poll for completion, then the PFI: Pickup Data endpoint to retrieve results.

Response data

A successful response returns the count of matching records and, when records exist and dryRun is not set, a taskId for tracking the asynchronous collection task. If the count is zero, no task is created.