Get simulated Squid proxy logs with risky URLs for testing SIEM integrations, refreshed every four hours.
What this endpoint does
Generates simulated Squid proxy log entries containing URLs from the Recorded Future URL risk list — useful for testing SIEM or proxy log integrations without live network data. Refreshed every four hours. Similar demo endpoints exist for IPs (Juniper NetScreen), domains (Cisco ASA), hashes (Symantec EP), and vulnerabilities.
Response data
Returns text/plain — one Squid proxy log entry per line (not JSON). Each line has space-delimited fields: Unix timestamp, elapsed ms, client IP, cache result with HTTP status (e.g., TCP_MISS/304), response bytes, HTTP method, the risky URL (real indicator from the RF risk list), routing hierarchy, peer IP in DIRECT/x.x.x.x format, and content type. All fields except the URL are simulated. Use limit (max 1000) to control output size.