Security Intelligence Services: Blacklist

Blacklist

The blacklist endpoint provides users the ability to search RiskIQ's inventory of known malicious actors.

What It Looks Like

Curl

curl -X GET --header 'Accept: application/json' --header "Authorization: Basic $ENCODED_API_KEY" 'https://api.riskiq.net/v0/blacklist/lookup?url=http://77z4.cvogqcola.download/101636/1396/37lmy6x/luxb06/5077'

Response Body

{
    "url":"http://77z4.cvogqcola.download/101636/1396/37lmy6x/luxb06/5077",
    "hostname":"77z4.cvogqcola.download",
    "rank":2147483647,
    "phishing":true,
    "malware":false,
    "spam":false,
    "scam":true,
    "matchType":"URL",
    "score":100,
    "description":"riq.auto.model SCAM Fake Software (Flash)",
    "entries":[
        {
            "type":"GSBPhishing",
            "matchType":"HOST",
            "url":"cvogqcola.download/",
            "ruleID":0
        },
        {
            "type":"RiskIQScam",
            "matchType":"URL",
            "id":135788646,
            "url":"http://77z4.cvogqcola.download/101636/1396/37lmy6x/luxb06/5077",
            "target":"Fake Software (Flash)",
            "description":"riq.auto.model SCAM Fake Software (Flash)",
            "detectedAt":"2017-05-10T17:29:33.000-0700",
            "source":"RiskIQ",
            "ruleID":0
        }
    ]
}