submit

Submit Sources

Submit new threat intelligence sources (max 50 per request) to the community database. Requires an organization-linked account. Each URL is probed for reachability before acceptance; already-known URLs are skipped and counted in duplicatesSkipped. Daily submission caps are per plan.

Categories: malware, phishing, spam, scam, fraud, botnet, ransomware, c2

post/submit

Request body

Example request

{
  "sources": [
    {
      "name": "Example Threat Feed",
      "url": "https://example.com/threats-ips.txt"
    }
  ]
}

Response

Submission accepted (also returned when every source was already known — inserted: 0)

duplicatesSkippedinteger required

Number of sources skipped because they already exist

insertedinteger required

Number of sources inserted for review

messagestring required

Success message

Example response

{
  "message": "Submitted successfully! 2 source(s) are pending admin review."
}

Changes

Changed in 1 of the 15 revisions of this API.46

Aug 31, 20269d9ef31d83e546See the full diff
- ▲
  the response property became nullable for the status
  response-property-became-nullable
- ▲
  the response property became nullable for the status
  response-property-became-nullable
- ▲
  the response property became optional for the status
  response-property-became-optional
- ▲
  the response property became optional for the status
  response-property-became-optional
- ○
  the request property // became nullable
  request-property-became-nullable
- ○
  the request property // became optional
  request-property-became-optional
- ○
  added the optional property to the response with the status
  response-optional-property-added
- ○
  added the required property to the response with the status
  response-required-property-added
- ○
  added the required property to the response with the status
  response-required-property-added
- ○
  added the required property to the response with the status
  response-required-property-added
This revision also has 17 changes that name no endpoint, such as unreferenced schemas being removed. See the revision's changelog

Full history