Overview
API Concepts Manage API Key
Internet Data
DNSIQ® WHOISIQ™ SSL Certificates Blacklist Lookup Host Attributes
Attack Analytics
Newly Observed Domains Newly Observed Hosts Malware Phishing Scam Content
Coming Soon
Enrich Global Inventory
Additional Resources
PassiveTotal API
RiskIQ.com

Blacklist

The blacklist endpoint provides users the ability to search RiskIQ's inventory of known malicious actors.

 

What It Looks Like

Curl

curl -X GET --header 'Accept: application/json' --header "Authorization: Basic $ENCODED_API_KEY" 'https://api.riskiq.net/v0/blacklist/lookup?url=http://77z4.cvogqcola.download/101636/1396/37lmy6x/luxb06/5077'

Response Body

{
    "url":"http://77z4.cvogqcola.download/101636/1396/37lmy6x/luxb06/5077",
    "hostname":"77z4.cvogqcola.download",
    "rank":2147483647,
    "phishing":true,
    "malware":false,
    "spam":false,
    "scam":true,
    "matchType":"URL",
    "score":100,
    "description":"riq.auto.model SCAM Fake Software (Flash)",
    "entries":[
        {
            "type":"GSBPhishing",
            "matchType":"HOST",
            "url":"cvogqcola.download/",
            "ruleID":0
        },
        {
            "type":"RiskIQScam",
            "matchType":"URL",
            "id":135788646,
            "url":"http://77z4.cvogqcola.download/101636/1396/37lmy6x/luxb06/5077",
            "target":"Fake Software (Flash)",
            "description":"riq.auto.model SCAM Fake Software (Flash)",
            "detectedAt":"2017-05-10T17:29:33.000-0700",
            "source":"RiskIQ",
            "ruleID":0
        }
    ]
}