PrecisionSec REST API Documentation (1.0.0)

Download OpenAPI specification:

API for querying PrecisionSec threat intelligence including malware samples, malicious URLs, domains, and IP addresses. Provides access to threat feeds and IOC (Indicator of Compromise) lookups.

To request an API key, please contact info@precisionsec.com.

Get IP feed

Serves a static feed of malicious IP addresses from the last 60 days

Authorizations:

ApiKeyAuth

Responses

Response samples

200
401

Content type

application/json

["192.168.1.1"
]

Get URL feed

Serves a static feed of malicious URLs from the last 60 days

Authorizations:

ApiKeyAuth

Responses

Response samples

200
401

Content type

application/json

{ }

Get sample by MD5

Retrieve sample information by MD5 hash

Authorizations:

ApiKeyAuth

path Parameters

md5

required

string

Example: a1b2c3d4e5f6g7h8i9j0k1l2m3n4o5p6

MD5 hash of the sample

Responses

Response samples

200
401

Content type

application/json

{"first_seen": 1633046400,
"md5": "a1b2c3d4e5f6g7h8i9j0k1l2m3n4o5p6",
"sha256": "a1b2c3d4e5f6g7h8i9j0k1l2m3n4o5p6q7r8s9t0u1v2w3x4y5z6",
"tag": "ransomware",
"magic": "PE32 executable for MS Windows",
"campaign_id": "campaign123",
"botnet_id": "botnet456",
"distribution_urls": [{"url": "http://malicious.example.com/malware.exe",
"detection_date": 1633046400
}
],
"c2_urls": [{"url": "http://c2.example.com/endpoint",
"detection_date": 1633046400
}
]
}

Get sample by SHA256

Retrieve sample information by SHA256 hash

Authorizations:

ApiKeyAuth

path Parameters

sha256

required

string

Example: a1b2c3d4e5f6g7h8i9j0k1l2m3n4o5p6q7r8s9t0u1v2w3x4y5z6

SHA256 hash of the sample

Responses

Response samples

200
401

Content type

application/json

{"first_seen": 1633046400,
"md5": "a1b2c3d4e5f6g7h8i9j0k1l2m3n4o5p6",
"sha256": "a1b2c3d4e5f6g7h8i9j0k1l2m3n4o5p6q7r8s9t0u1v2w3x4y5z6",
"tag": "ransomware",
"magic": "PE32 executable for MS Windows",
"campaign_id": "campaign123",
"botnet_id": "botnet456",
"distribution_urls": [{"url": "http://malicious.example.com/malware.exe",
"detection_date": 1633046400
}
],
"c2_urls": [{"url": "http://c2.example.com/endpoint",
"detection_date": 1633046400
}
]
}

Get domain information

Retrieve information about a domain, including associated samples and resolutions

Authorizations:

ApiKeyAuth

path Parameters

domain

required

string

Example: malicious.example.com

Domain name to lookup

Responses

Response samples

200
401

Content type

application/json

{"domain": "malicious.example.com",
"first_seen": 1633046400,
"tag": "phishing",
"communicating_samples": [{"detection_date": 1633046400,
"md5": "a1b2c3d4e5f6g7h8i9j0k1l2m3n4o5p6",
"sha256": "a1b2c3d4e5f6g7h8i9j0k1l2m3n4o5p6q7r8s9t0u1v2w3x4y5z6",
"tag": "trojan"
}
],
"resolutions": [{"ip": "192.168.1.1",
"last_seen": 1633046400,
"first_seen": 1632960000
}
]
}

Check if URL is malicious

Check if a URL is known to be malicious

Authorizations:

ApiKeyAuth

path Parameters

url

required

string

Example: http://malicious.example.com/page

URL to check

Responses

Response samples

200
401
403

Content type

application/json

{"result": "Malicious"
}

Check if domain is malicious

Check if a domain is known to be malicious

Authorizations:

ApiKeyAuth

path Parameters

domain

required

string

Example: malicious.example.com

Domain to check

Responses

Response samples

200
401

Content type

application/json

{"result": "Malicious"
}

Get IPv4 information

Retrieve information about an IPv4 address, including associated samples, passive DNS, and detected URLs

Authorizations:

ApiKeyAuth

path Parameters

ip

required

string

Example: 192.168.1.1

IPv4 address to lookup

Responses

Response samples

200
401

Content type

application/json

{"ip": "192.168.1.1",
"first_seen": 1633046400,
"tag": "c2",
"confidence": "high",
"communicating_samples": [{"detection_date": 1633046400,
"md5": "a1b2c3d4e5f6g7h8i9j0k1l2m3n4o5p6",
"sha256": "a1b2c3d4e5f6g7h8i9j0k1l2m3n4o5p6q7r8s9t0u1v2w3x4y5z6",
"tag": "trojan"
}
],
"passive_dns": [{"last_seen": 1633046400,
"first_seen": 1632960000,
"domain": "malicious.example.com"
}
],
"detected_urls": [{"url": "http://malicious.example.com/page",
"detection_date": 1633046400,
"tag": "phishing"
}
]
}

Check if IPv4 addresses exist

Check if a list of IPv4 addresses exist in the database

Authorizations:

ApiKeyAuth

Request Body schema: application/json
required

Array

string

Responses

Request samples

Payload

Content type

application/json

["192.168.1.1"
]

Response samples

200
400
401

Content type

application/json

{"results": {"192.168.1.1": 1,
"192.168.1.2": 0
}
}

Get IOCs for tag

Get all Indicators of Compromise (IOCs) associated with a specific tag

Authorizations:

ApiKeyAuth

path Parameters

tag

required

string

Example: ransomware

Tag to lookup

Responses

Response samples

200
401

Content type

application/json

{"ips": ["192.168.1.1"
],
"domains": ["malicious.example.com"
],
"urls": ["http://malicious.example.com/page"
],
"samples": [{"md5": "a1b2c3d4e5f6g7h8i9j0k1l2m3n4o5p6",
"sha256": "a1b2c3d4e5f6g7h8i9j0k1l2m3n4o5p6q7r8s9t0u1v2w3x4y5z6"
}
]
}

PrecisionSec REST API Documentation (1.0.0)

Get IP feed

Authorizations:

Responses

Response samples

Get URL feed

Authorizations:

Responses

Response samples

Get sample by MD5

Authorizations:

path Parameters

Responses

Response samples

Get sample by SHA256

Authorizations:

path Parameters

Responses

Response samples

Get domain information

Authorizations:

path Parameters

Responses

Response samples

Check if URL is malicious

Authorizations:

path Parameters

Responses

Response samples

Check if domain is malicious

Authorizations:

path Parameters

Responses

Response samples

Get IPv4 information

Authorizations:

path Parameters

Responses

Response samples

Check if IPv4 addresses exist

Authorizations:

Request Body schema: application/jsonrequired

Responses

Request samples

Response samples

List available tags

Authorizations:

Responses

Response samples

Get IOCs for tag

Authorizations:

path Parameters

Responses

Response samples

Request Body schema: application/json
required