Search Domain - BlinkOps Documentation

Get threat intelligence details for a domain from Kaspersky Threat Intelligence Portal. The response includes a Zone verdict: Green (safe), Yellow (adware or suspicious), Orange (not trusted, may host malicious objects), Red (malicious), or Grey (not enough data).

External DocumentationTo learn more, visit the Kaspersky Threat Intelligence Portal documentation.

Parameters

Parameter	Description
Domain	The domain name to investigate.

Example Output

{
	"Zone": "Green",
	"DomainGeneralInfo": {
		"Domain": "<string>",
		"FilesCount": 0,
		"UrlsCount": 0,
		"HitsCount": 5,
		"Ipv4Count": 2,
		"Categories": [
			"Business"
		],
		"CategoriesWithZone": [
			{
				"Name": "Business",
				"Zone": "Green"
			}
		]
	},
	"DomainWhoIsInfo": {
		"DomainName": "<string>",
		"Created": "1995-08-15T00:00:00Z",
		"Updated": "2023-01-01T00:00:00Z",
		"Expires": "2024-08-14T00:00:00Z",
		"NameServers": [
			"ns1.example.com",
			"ns2.example.com"
		],
		"Registrar": {
			"Info": "<string>",
			"IanaId": "<string>"
		}
	}
}

Workflow Library Example

Search Domain with Kaspersky Threat Intelligence Portal and Send Results Via Email

Preview this Workflow on desktop