Search Keywords

Fuzzy search for similar malicious domains. Useful for finding typosquatting and phishing domains targeting a specific brand. Results are capped at 500 hits (total_hits counts the returned hits, not the corpus-wide matches).

post/search

Path parameters

keywordsstring required

Search keywords (e.g., 'paypal', 'microsoft')

Response

Search results response (capped at 500 hits)

hitsstring[] required

Matching dataset keys (domain:… / ip:…), capped at 500

keywordsstring required

Search keywords used

total_hitsinteger required

Number of hits returned (capped at 500 — not the corpus-wide total)

Example response

{
  "keywords": "paypal"
}

Changes

Changed in 1 of the 14 revisions of this API.7

Aug 31, 20269d9ef31d83e57See the full diff
- ▲
  the response property became nullable for the status
  response-property-became-nullable
- ▲
  the response property became nullable for the status
  response-property-became-nullable
- ▲
  the response property became nullable for the status
  response-property-became-nullable
- ▲
  the response property became optional for the status
  response-property-became-optional
- ▲
  the response property became optional for the status
  response-property-became-optional
- ▲
  the response property became optional for the status
  response-property-became-optional
- ▲
  the response's property format changed from int32 to int64 for status
  response-property-type-changed
This revision also has 17 changes that name no endpoint, such as unreferenced schemas being removed. See the revision's changelog

Full history