> ## Documentation Index
> Fetch the complete documentation index at: https://docs.blinkops.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Search C2 Domains

Search ZeroFox's CTI feed of command and control (C2) domains for a specified domain.

> [!NOTE]
>
> External Documentation
>
> To learn more, visit the [ZeroFox documentation](https://api.zerofox.com/cti/docs/).

## Basic Parameters

| Parameter | Description |
| - | - |
| Created After | The date and time to return C2 domains created from. |
| Domain | The domain to search for. |
| Return All Pages | Automatically fetch all resources, page by page. |

## Advanced Parameters

| Parameter | Description |
| - | - |
| Cursor | The cursor of the results page to return. You can get it from the `next` URL of a previous response. |

## Example Output

```json theme={"dark"}
{
	"next": null,
	"results": [
		{
			"domain": "www.character-try.xyz",
			"port": 80,
			"tags": [
				"downloader",
				"exploit",
				"injector",
				"spyware",
				"sample_type:rtf_document",
				"family:formbook",
				"family:xloader",
				"family:mal/generic-s"
			],
			"ip_addresses": [
				"203.0.113.10"
			],
			"updated_at": "2023-06-14T10:56:24Z",
			"created_at": "2023-06-14T11:10:48.373715Z"
		}
	]
}
```

## Workflow Library Example

[Search C2 Domains with Zerofox and Send Results Via Email](https://library.blinkops.com/workflows/search-c2-domains-with-zerofox-and-send-results-via-email)

![Workflow Library](https://mintcdn.com/blinkops-2/ojHYuDeYX5FWuN8a/img/Icons/play-box.svg?fit=max\&auto=format\&n=ojHYuDeYX5FWuN8a\&q=85\&s=b8af968e71438a9499c3223c9bd29fb2)

Preview this Workflow on desktop

[https://library.blinkops.com/workflows/search-c2-domains-with-zerofox-and-send-results-via-email/canvas](https://library.blinkops.com/workflows/search-c2-domains-with-zerofox-and-send-results-via-email/canvas)


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.