---
title: "Get Collection IoCs Deltas"
method: GET
path: "/collections/sync/ioc-deltas/{time}"
---

# Get Collection IoCs Deltas

`GET /collections/sync/ioc-deltas/{time}`

## Request

- Base URL: `https://www.virustotal.com/api/v3`
- URL: `https://www.virustotal.com/api/v3/collections/sync/ioc-deltas/{time}`
- Auth: none required
- TypeScript: <https://skmtc.dev/virustotal/apis/threat-landscape/docs/collections/sync/ioc-deltas/:time/get.ts> (a function with typed inputs; its response is checked against the schema)

## Path parameters

- `time` string, required

## Query parameters

- `ioc_type` 'file' | 'url' | 'domain' | 'ip', required

## Headers

- `x-apikey` string, required
- `x-tool` string

## Response `200`

200

- object

## Other responses

- `400`: 400

## Changes

- **2026-11-03** `a15abb3e8389`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/virustotal/apis/threat-landscape/changes/collections/sync/ioc-deltas/:time/get.md)

---

[API](https://skmtc.dev/virustotal/apis/threat-landscape.md) - [All operations](https://skmtc.dev/virustotal/apis/threat-landscape/llms.txt) - [OpenAPI document](https://skmtc.dev/virustotal/apis/threat-landscape/revisions/a15abb3e8389?raw)