Enrichment

Enrichment endpoints

These endpoints return comprehensive enrichment information in a single response

Domain enrichment

GET /explore/enrich/domain/{domain}

Get domain enrichment information

Query Parameters
  • domain (string) (required) –

    • domain name

  • explain =<0|1> (int) (optional) –

    • show details of data used to calculate the different scores in the response

      • 0 (default) - do not show details

      • 1 - show underlying data used to calculate scores

  • scan_data =<0|1> (int) (optional) –

    • show details of data collected from host scanning

      • 0 (default) - do not show details

      • 1 - show collected data

Request Headers
  • X-API-KEYapi-key

Example Request

https://api.silentpush.com/api/v1/merge-api/explore/enrich/domain/olex.live?explain=1

Example Response

{
    "status_code": 200,
    "error": null,
    "response": {
        "domain_string_frequency_probability": {
            "avg_probability": 9.674,
            "dga_probability_score": 0,
            "domain": "olex.live",
            "domain_string_freq_probabilities": [
                13.0619,
                6.2861
            ],
            "query": "olex.live"
        },
        "domain_urls": {
        "results_summary": {
            "alexa_rank": null,
            "alexa_top10k": false,
            "alexa_top10k_score": 0,
            "dynamic_domain_score": 0,
            "is_dynamic_domain": false,
            "is_url_shortener": false,
            "results": 0,
            "url_shortener_score": 0
        }
        },
        "domaininfo": {
            "age": 69,
            "age_score": 0,
            "domain": "olex.live",
            "first_seen": 20220928,
            "is_new": false,
            "is_new_score": 0,
            "last_seen": 20221206,
            "query": "olex.live",
            "registrar": "",
            "whois_age": "",
            "whois_created_date": "",
            "zone": "live"
        },
        "ip_diversity": {
            "asn_diversity": "1",
            "host": "olex.live",
            "ip_diversity_all": "1",
            "ip_diversity_groups": "1"
        },
        "listing_score": 0,
        "listing_score_explain": {
            "listed_first": 20210107,
            "listed_first_ago": 698,
            "listed_recent": 20211102,
            "listed_recent_ago": 399,
            "listed_span": 300,
            "listings_all": 119,
            "listings_last_180": 0,
            "listings_last_30": 0,
            "listings_last_365": 0,
            "listings_last_7": 0,
            "listings_last_90": 0
        },
        "ns_reputation": {
            "is_expired": false,
            "is_parked": false,
            "is_sinkholed": false,
            "ns_reputation_max": 30,
            "ns_reputation_score": 30,
            "ns_srv_reputation": [
                {
                    "domain": "olex.live",
                    "ns_server": "ns1.domain-imminent1.com",
                    "ns_server_domain_density": 190,
                    "ns_server_domains_listed": 5,
                    "ns_server_reputation": 30
                },
                {
                    "domain": "olex.live",
                    "ns_server": "ns2.domain-imminent1.com",
                    "ns_server_domain_density": 190,
                    "ns_server_domains_listed": 5,
                    "ns_server_reputation": 30
                }
            ]
        },
        "nschanges": {
        "results_summary": {
            "changes_0_7_days": 0,
            "changes_30_90_days": 1,
            "changes_7_30_days": 0,
            "changes_last_30_days": 0,
            "changes_last_7_days": 0,
            "changes_last_90_days": 1,
            "domain": "olex.live",
            "has_change_circular": true,
            "has_change_expire_from": false,
            "has_change_expire_to": false,
            "has_change_ns_in_domain_from": false,
            "has_change_ns_in_domain_to": false,
            "has_change_ns_srv_domain_density_low_from": false,
            "has_change_ns_srv_domain_density_low_to": false,
            "has_change_parked_from": false,
            "has_change_parked_to": false,
            "has_change_sinkhole_from": false,
            "has_change_sinkhole_to": false,
            "last_change": 20220928,
            "last_change_circular_to": false,
            "last_change_days_ago": 69,
            "last_change_expire_from": false,
            "last_change_expire_to": false,
            "last_change_ns_in_domain_from": false,
            "last_change_ns_in_domain_to": false,
            "last_change_ns_srv_domain_density_low_from": false,
            "last_change_ns_srv_domain_density_low_to": false,
            "last_change_parked_from": false,
            "last_change_parked_to": false,
            "last_change_sinkhole_from": false,
            "last_change_sinkhole_to": false,
            "ns_entropy": 5,
            "ns_entropy_score": 5,
            "num_changes_all": 5,
            "query": "olex.live"
        }
        },
            "sp_risk_score": 30,
            "sp_risk_score_explain": {
                "sp_risk_score_decider": "ns_reputation_score"
        }
    }
}

Tip

Include the latest scan data:

https://api.silentpush.com/api/v1/merge-api/explore/enrich/domain/olex.live?explain=1&scan_data=1
{
    "status_code": 200,
    "error": null,
    "response": {
        "domain_string_frequency_probability": {
            "avg_probability": 2.68955,
            "dga_probability_score": 100,
            "domain": "rblxfox.tk",
            "domain_string_freq_probabilities": [
                3.4828,
                1.8963
            ],
            "query": "rblxfox.tk"
        },
        "domain_urls": {
        "results_summary": {
            "alexa_rank": null,
            "alexa_top10k": false,
            "alexa_top10k_score": 0,
            "dynamic_domain_score": 0,
            "is_dynamic_domain": false,
            "is_url_shortener": false,
            "results": 0,
            "url_shortener_score": 0
        }
        },
        "domaininfo": {
            "domain": "rblxfox.tk",
            "error": "No data for this zone",
            "query": "rblxfox.tk",
            "registrar": "",
            "whois_age": "",
            "whois_created_date": "",
            "zone": "tk"
        },
        "ip_diversity": {
            "asn_diversity": "1",
            "host": "rblxfox.tk",
            "ip_diversity_all": "2",
            "ip_diversity_groups": "1"
        },
        "listing_score": 0,
        "listing_score_explain": {},
        "ns_reputation": {
            "is_expired": false,
            "is_parked": false,
            "is_sinkholed": false,
            "ns_reputation_max": 6,
            "ns_reputation_score": 6,
            "ns_srv_reputation": [
                {
                    "domain": "rblxfox.tk",
                    "ns_server": "selah.ns.cloudflare.com",
                    "ns_server_domain_density": 42297,
                    "ns_server_domains_listed": 1,
                    "ns_server_reputation": 0
                },
                {
                    "domain": "rblxfox.tk",
                    "ns_server": "osmar.ns.cloudflare.com",
                    "ns_server_domain_density": 44223,
                    "ns_server_domains_listed": 2,
                    "ns_server_reputation": 6
                }
            ]
        },
        "nschanges": {
        "results_summary": {
            "changes_0_7_days": 0,
            "changes_30_90_days": 0,
            "changes_7_30_days": 0,
            "changes_last_30_days": 0,
            "changes_last_7_days": 0,
            "changes_last_90_days": 0,
            "domain": "rblxfox.tk",
            "has_change_circular": false,
            "has_change_expire_from": false,
            "has_change_expire_to": false,
            "has_change_ns_in_domain_from": false,
            "has_change_ns_in_domain_to": false,
            "has_change_ns_srv_domain_density_low_from": false,
            "has_change_ns_srv_domain_density_low_to": false,
            "has_change_parked_from": false,
            "has_change_parked_to": false,
            "has_change_sinkhole_from": false,
            "has_change_sinkhole_to": false,
            "last_change": null,
            "last_change_circular_to": false,
            "last_change_days_ago": null,
            "last_change_expire_from": false,
            "last_change_expire_to": false,
            "last_change_ns_in_domain_from": false,
            "last_change_ns_in_domain_to": false,
            "last_change_ns_srv_domain_density_low_from": false,
            "last_change_ns_srv_domain_density_low_to": false,
            "last_change_parked_from": false,
            "last_change_parked_to": false,
            "last_change_sinkhole_from": false,
            "last_change_sinkhole_to": false,
            "ns_entropy": 0,
            "ns_entropy_score": 0,
            "num_changes_all": 0,
            "query": "rblxfox.tk"
        }
        },
        "scan_data": {
        "certificates": [
            {
                "domain": "sni.cloudflaressl.com",
                "domains": [
                    "\*.rblxfox.tk",
                    "sni.cloudflaressl.com",
                    "rblxfox.tk"
                ],
                "fingerprint_sha1": "27f225c21f3b56d85aee10224e82efb0a7748e83",
                "hostname": "rblxfox.tk",
                "ip": "2a06:98c1:3121::2",
                "is_expired": "false",
                "issuer_common_name": "Cloudflare Inc ECC CA-3",
                "issuer_organization": "Cloudflare, Inc.",
                "not_after": "2023-06-22 23:59:59",
                "not_before": "2022-06-22 00:00:00",
                "scan_date": "2022-12-06 21:25:44"
            }
        ],
        "favicon": [
            {
                "favicon2_md5": "",
                "favicon2_mmh3": "",
                "favicon2_path": "",
                "favicon_md5": "1cb899652bb500c815a7260f8410fde1",
                "favicon_mmh3": -699551598,
                "hostname": "rblxfox.tk",
                "ip": "2a06:98c1:3121::2",
                "scan_date": "2022-12-06 21:25:44"
            }
        ],
        "headers": [
            {
                "headers": {
                    "cache-control": "private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0",
                    "content-type": "text/html; charset=UTF-8",
                    "date": "Tue, 06 Dec 2022 21:25:43 GMT",
                    "expires": "Thu, 01 Jan 1970 00:00:01 GMT",
                    "server": "cloudflare"
                },
                "hostname": "rblxfox.tk",
                "ip": "2a06:98c1:3121::2",
                "response": "403 ",
                "scan_date": "2022-12-06 21:25:44"
                }
        ],
        "html": [
            {
                "hostname": "rblxfox.tk",
                "html_body_murmur3": "2051784879",
                "html_body_ssdeep": "192:/JYlYuFs8MKtNQTzSkRJohTHXbdVE9KACoeYgaURcK:hW+8MwQn3ncHXbzE9IYcz",
                "html_title": "Just a moment...",
                "ip": "2a06:98c1:3121::2",
                "scan_date": "2022-12-06 21:25:44"
                }
        ],
        "jarm": [
            {
                "hostname": "rblxfox.tk",
                "ip": "2a06:98c1:3121::2",
                "jarm_hash": "27d3ed3ed0003ed1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c",
                "scan_date": "2022-12-06 21:25:44"
            }
        ]
        },
            "sp_risk_score": 6,
            "sp_risk_score_explain": {
            "sp_risk_score_decider": "ns_reputation_score"
        }
    }
}

IPv4 enrichment

GET /explore/enrich/ipv4/{ipv4}

Get IPv4 enrichment information

Query Parameters
  • ipv4 (string) (required) –

    • IPv4 address

  • explain =<0|1> (int) (optional) –

    • show details of data used to calculate the different scores in the response

      • 0 (default) - do not show details

      • 1 - show underlying data used to calculate scores

  • scan_data =<0|1> (int) (optional) –

    • show details of data collected from IPv4 scanning

      • 0 (default) - do not show details

      • 1 - show collected data

Request Headers
  • X-API-KEYapi-key

Example Request

https://api.silentpush.com/api/v1/merge-api/explore/enrich/ipv4/96.43.250.251?explain=1

Example Response

{
    "status_code": 200,
    "error": null,
    "response": {
        "ip2asn": [
            {
                "asn": 13614,
                "asn_allocation_age": 8546,
                "asn_allocation_date": 19990714,
                "asn_rank": 0,
                "asn_rank_score": 0,
                "asn_reputation": 12,
                "asn_reputation_explain": {
                    "ips_in_asn": 78080,
                    "ips_num_active": 2743,
                    "ips_num_listed": 1
                },
                "asn_reputation_score": 12,
                "asn_takedown_reputation": 0,
                "asn_takedown_reputation_explain": {},
                "asn_takedown_reputation_score": 0,
                "asname": "ALLWEST, US",
                "benign_info": {
                    "actor": "",
                    "known_benign": false,
                    "tags": []
                },
                "date": 20221206,
                "density": 0,
                "ip": "96.43.250.251",
                "ip_has_expired_certificate": false,
                "ip_has_open_directory": false,
                "ip_is_dsl_dynamic": false,
                "ip_is_dsl_dynamic_score": 0,
                "ip_is_ipfs_node": false,
                "ip_is_tor_exit_node": false,
                "ip_location": {
                    "continent_code": "NA",
                    "continent_name": "North America",
                    "country_code": "US",
                    "country_is_in_european_union": false,
                    "country_name": "United States"
                },
                "ip_ptr": "",
                "listing_score": 0,
                "listing_score_explain": {},
                "malscore": 0,
                "sinkhole_info": {
                    "known_sinkhole_ip": false,
                    "tags": []
                },
                "sp_risk_score": 12,
                "sp_risk_score_explain": {
                    "sp_risk_score_decider": "asn_reputation"
                },
                "subnet": "96.43.248.0/21",
                "subnet_allocation_age": "UNKNOWN",
                "subnet_allocation_date": "UNKNOWN",
                "subnet_reputation": 0,
                "subnet_reputation_explain": {},
                "subnet_reputation_score": 0
            }
        ]
    }
}

Tip

Include the latest scan data:

https://api.silentpush.com/api/v1/merge-api/explore/enrich/ipv4/167.82.75.63?explain=1&scan_data=1
{
    "status_code": 200,
    "error": null,
    "response": {
        "ip2asn": [
            {
                "asn": 54113,
                "asn_allocation_age": 4081,
                "asn_allocation_date": 20111004,
                "asn_rank": 0,
                "asn_rank_score": 0,
                "asn_reputation": 0,
                "asn_reputation_explain": {},
                "asn_reputation_score": 0,
                "asn_takedown_reputation": 1,
                "asn_takedown_reputation_explain": {
                    "ips_in_asn": 530688,
                    "ips_num_listed": 47,
                    "items_num_listed": 3244,
                    "listings_max_age": 1715
                },
                "asn_takedown_reputation_score": 1,
                "asname": "FASTLY, US",
                "benign_info": {
                    "actor": "",
                    "known_benign": false,
                    "tags": []
                },
                "date": 20221206,
                "density": 0,
                "ip": "167.82.75.63",
                "ip_has_expired_certificate": false,
                "ip_has_open_directory": false,
                "ip_is_dsl_dynamic": false,
                "ip_is_dsl_dynamic_score": 0,
                "ip_is_ipfs_node": false,
                "ip_is_tor_exit_node": false,
                "ip_location": {
                    "continent_code": "NA",
                    "continent_name": "North America",
                    "country_code": "US",
                    "country_is_in_european_union": false,
                    "country_name": "United States"
                },
                "ip_ptr": "",
                "listing_score": 0,
                "listing_score_explain": {},
                "malscore": 1,
                "scan_data": {
                "certificates": [
                    {
                        "domain": "default.ssl.fastly.net",
                        "domains": [
                            "default.ssl.fastly.net",
                            "fastly.com",
                            "\*.a.ssl.fastly.net",
                            "\*.hosts.fastly.net",
                            "\*.global.ssl.fastly.net",
                            "\*.fastly.com",
                            "a.ssl.fastly.net",
                            "purge.fastly.net",
                            "mirrors.fastly.net",
                            "control.fastly.net",
                            "tools.fastly.net"
                        ],
                        "fingerprint_sha1": "b56dc72b95590464e37c531fea474b8d6d9eb9b5",
                        "is_expired": "false",
                        "issuer_common_name": "GlobalSign RSA OV SSL CA 2018",
                        "issuer_organization": "GlobalSign nv-sa",
                        "not_after": "2023-01-18 17:21:08",
                        "not_before": "2021-12-17 17:21:08",
                        "scan_date": "2022-12-06 21:38:06"
                    }
                ],
                "favicon": [
                    {
                        "favicon2_md5": "",
                        "favicon2_mmh3": "",
                        "favicon2_path": "",
                        "favicon_md5": "c2822b265b2b66bcde655ce064b1f5ad",
                        "favicon_mmh3": -1590570123,
                        "scan_date": "2022-12-06 21:38:06"
                    }
                ],
                "headers": [
                    {
                    "headers": {
                        "cache-control": "private, no-cache",
                        "content-length": "245",
                        "content-type": "text/html",
                        "date": "Tue, 06 Dec 2022 21:38:05 GMT",
                        "server": "Varnish"
                    },
                        "response": "500 ",
                        "scan_date": "2022-12-06 21:38:06"
                    }
                ],
                "html": [
                    {
                        "html_body_murmur3": "-603480098",
                        "html_body_ssdeep": "6:qFzLME+noiLEdxb4/nXwDRwLZckFDWWEobuVCImhe:Xok4xbKgSZckRVpQ",
                        "html_title": "Fastly error: unknown domain 167.82.75.63",
                        "scan_date": "2022-12-06 21:38:06"
                    }
                ],
                "jarm": [
                    {
                        "jarm_hash": "29d29d00029d29d00042d43d00041d2aa5ce6a70de7ba95aef77a77b00a0af",
                        "scan_date": "2022-12-06 21:38:06"
                    }
                ]
                },
                "sinkhole_info": {
                    "known_sinkhole_ip": false,
                    "tags": []
                },
                "sp_risk_score": 1,
                "sp_risk_score_explain": {
                    "sp_risk_score_decider": "asn_takedown_reputation"
                },
                "subnet": "167.82.0.0/17",
                "subnet_allocation_age": 1246,
                "subnet_allocation_date": 20190709,
                "subnet_reputation": 0,
                "subnet_reputation_explain": {},
                "subnet_reputation_score": 0
            }
        ]
    }
}

IPv6 enrichment

GET /explore/enrich/ipv6/{ipv6}

Get IPv6 enrichment information

Query Parameters
  • ipv6 (string) (required) –

    • IPv6 address

  • explain =<0|1> (int) (optional) –

    • show details of data used to calculate the different scores in the response

      • 0 (default) - do not show details

      • 1 - show underlying data used to calculate scores

  • scan_data =<0|1> (int) (optional) –

    • show details of data collected from host scanning

      • 0 (default) - do not show details

      • 1 - show collected data

Request Headers
  • X-API-KEYapi-key

Example Request

https://api.silentpush.com/api/v1/merge-api/explore/enrich/ipv6/2606:4700:4700::1111?explain=1

Example Response

{
    "status_code": 200,
    "error": null,
    "response": {
        "ip2asn": [
            {
                "asn": 13335,
                "asn_allocation_age": 4141,
                "asn_allocation_date": 20100714,
                "asn_rank": 0,
                "asn_rank_score": 0,
                "asn_reputation": 0,
                "asn_reputation_explain": {},
                "asn_reputation_score": 0,
                "asn_takedown_reputation": 0,
                "asn_takedown_reputation_explain": {},
                "asn_takedown_reputation_score": 0,
                "asname": "CLOUDFLARENET, US",
                "date": 20211114,
                "density": 147,
                "ip": "2606:4700:4700::1111",
                "sp_risk_score": 0,
                "sp_risk_score_explain": {
                    "sp_risk_score_decider": "asn_reputation"
                },
                "subnet": "2606:4700:4700::/48"
            }
        ]
    }
}

Tip

Include the latest scan data:

https://api.silentpush.com/api/v1/merge-api/explore/enrich/ipv6/2600:1f16:389:3120:96e6:3c0a:86bc:e768?explain=1&scan_data=1
{
    "status_code": 200,
    "error": null,
    "response": {
        "ip2asn": [
            {
                "asn": 16509,
                "asn_allocation_age": 8251,
                "asn_allocation_date": 20000504,
                "asn_rank": 0,
                "asn_rank_score": 0,
                "asn_reputation": 63,
                "asn_reputation_explain": {
                    "ips_in_asn": 44160512,
                    "ips_num_active": 32538059,
                    "ips_num_listed": 55206
                },
                "asn_reputation_score": 63,
                "asn_takedown_reputation": 0,
                "asn_takedown_reputation_explain": {},
                "asn_takedown_reputation_score": 0,
                "asname": "AMAZON-02, US",
                "date": 20221206,
                "density": 0,
                "ip": "2600:1f16:389:3120:96e6:3c0a:86bc:e768",
                "ip_is_ipfs_node": false,
                "scan_data": {
                    "certificates": [
                        {
                            "domain": "",
                            "domains": [],
                            "fingerprint_sha1": "",
                            "hostname": "preprod.pastillas.co",
                            "is_expired": false,
                            "issuer_common_name": "",
                            "issuer_organization": "",
                            "not_after": "",
                            "not_before": "",
                            "scan_date": "2022-12-06 21:46:46"
                        }
                    ],
                    "favicon": [
                        {
                            "favicon2_md5": "20d56854971fc262b6183350ce756d80",
                            "favicon2_mmh3": 1772961480,
                            "favicon2_path": "/favicon-32x32.png",
                            "favicon_md5": "8493ff8460da9a308fdf65bf2b253259",
                            "favicon_mmh3": -121862361,
                            "hostname": "preprod.pastillas.co",
                            "scan_date": "2022-12-06 21:46:46"
                        }
                    ],
                    "headers": [
                        {
                        "headers": {
                            "connection": "keep-alive",
                            "content-type": "text/html; charset=UTF-8",
                            "date": "Tue, 06 Dec 2022 21:46:46 GMT",
                            "server": "nginx/1.20.1"
                        },
                            "hostname": "preprod.pastillas.co",
                            "response": "200 OK",
                            "scan_date": "2022-12-06 21:46:46"
                        }
                    ],
                    "html": [
                        {
                            "hostname": "preprod.pastillas.co",
                            "html_body_murmur3": "1953465311",
                            "html_body_ssdeep": "192:LIeCbkL8xSG2jU2SwLDxrxWxDcf819FWl/Yjk06Wmut:LIeCAIxSG2jU2SwXtYddFWlN06WZ",
                            "html_title": "pastillas.co Is for Sale",
                            "scan_date": "2022-12-06 21:46:46"
                        }
                    ],
                    "jarm": [
                        {
                            "hostname": "preprod.pastillas.co",
                            "jarm_hash": "",
                            "scan_date": "2022-12-06 21:46:46"
                        }
                    ]
                },
                "sp_risk_score": 63,
                "sp_risk_score_explain": {
                    "sp_risk_score_decider": "asn_reputation"
                },
                "subnet": "2600:1f16::/38"
            }
        ]
    }
}