---
title: "Get global prevalence summary"
method: GET
path: "/global_prevalence/summarize"
tags: ["Global Prevalence"]
---

# Get global prevalence summary

`GET /global_prevalence/summarize`

## Request

- Base URL: `https://www.virustotal.com/api/v3`
- URL: `https://www.virustotal.com/api/v3/global_prevalence/summarize`
- Auth: none required

Retrieve in-the-wild planetary observation and prevalence telemetry for an indicator across Google's enterprise observation mesh.

## Query parameters

- `entity_value` string, required
- `entity_type` 'SHA256' | 'MD5' | 'SHA1' | 'HOSTNAME' | 'IP' | 'NETWORK_DNS' | 'VHASH' | 'SSDEEP' | 'SIGNATURE_NAME', required

## Headers

- `x-apikey` string, required

## Response `200`

Successful response returning global prevalence summary telemetry.

- object
  - `data` object
    - `id` string: Queried entity value identifier.
    - `type` string
    - `links` object
      - `self` string
    - `attributes` object
      - `customer_count` integer: Deduplicated count of distinct enterprise organizations where the indicator was observed.
      - `observation_count` integer: Total raw volume of observation events recorded across Google observation networks.
      - `first_seen_date` integer: UTC timestamp (seconds since Unix epoch) of first in-the-wild observation.
      - `last_seen_date` integer: UTC timestamp (seconds since Unix epoch) of most recent in-the-wild observation.
      - `first_seen_industry` string: Industry vertical where the indicator was first observed.
      - `last_seen_industry` string: Industry vertical of the most recent in-the-wild observation.
      - `first_seen_region` string: Geographic region where the indicator was first observed.
      - `last_seen_region` string: Geographic region of the most recent in-the-wild observation.

## Other responses

- `400`: Bad Request - Missing or invalid required query parameters (entity_value or entity_type).
- `401`: Unauthorized - Missing or invalid API key.
- `403`: Forbidden - Insufficient license privileges. Requires GTI Enterprise or Enterprise Plus subscription.

---

[API](https://skmtc.dev/virustotal/apis/ioc-investigation.md) - [All operations](https://skmtc.dev/virustotal/apis/ioc-investigation/llms.txt) - [OpenAPI document](https://skmtc.dev/virustotal/apis/ioc-investigation/revisions/4d4fadbb8cbc?raw)