> ## Documentation Index
> Fetch the complete documentation index at: https://docs.blinkops.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Search Phishing

Search ZeroFox's CTI feed of phishing sites for a specified domain or host IP address.

To search for a specific site, provide `Domain` or `Host IP`.

> [!NOTE]
>
> External Documentation
>
> To learn more, visit the [ZeroFox documentation](https://api.zerofox.com/cti/docs/).

## Basic Parameters

| Parameter | Description |
| - | - |
| Domain | The domain of the phishing site to search for. |
| Host IP | The IP address hosting the phishing site to search for. |
| Return All Pages | Automatically fetch all resources, page by page. |
| Scanned After | The date and time to return phishing sites scanned from. |

## Advanced Parameters

| Parameter | Description |
| - | - |
| Cursor | The cursor of the results page to return. You can get it from the `next` URL of a previous response. |

## Example Output

```json theme={"dark"}
{
	"next": "https://api.zerofox.com/cti/phishing/?cursor=c2E9MTYyNjQ2NzU0NjAwMCZzYT04MTM4MQ%3D%3D&domain=www.character-try.xyz",
	"results": [
		{
			"scanned": "1970-01-19T19:41:27.989000Z",
			"domain": "www.purfan.com",
			"url": "https://www.purfan.com/modules/pr/-/canada/manage/Canada_en",
			"cert": {
				"authority": "Cloudflare, Inc.",
				"fingerprint": "1900D261A30FBB6930021D9B47C7757FACABF8B0",
				"issued": "1970-01-19T15:18:43.200000Z"
			},
			"host": {
				"ip": "203.0.113.10",
				"asn": 13335,
				"geo": "US"
			}
		}
	]
}
```

## Workflow Library Example

[Search Phishing with Zerofox and Send Results Via Email](https://library.blinkops.com/workflows/search-phishing-with-zerofox-and-send-results-via-email)

![Workflow Library](https://mintcdn.com/blinkops-2/ojHYuDeYX5FWuN8a/img/Icons/play-box.svg?fit=max\&auto=format\&n=ojHYuDeYX5FWuN8a\&q=85\&s=b8af968e71438a9499c3223c9bd29fb2)

Preview this Workflow on desktop

[https://library.blinkops.com/workflows/search-phishing-with-zerofox-and-send-results-via-email/canvas](https://library.blinkops.com/workflows/search-phishing-with-zerofox-and-send-results-via-email/canvas)


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.