Feeds

Technical domain intel feeds

Silent Push technical domain intel lists for security service providers

Feeds

GET /explore/files/feeds/{feed_filename}

Download intel feeds

  • Feeds are updated once every 24 hours with the most recent data

Query Parameters
  • feed_filename (string) (required) –

    • available feeds:
      • sp_newdomains.txt.gz - new domains from the daily ICANN zone files

      • sp_newcctlddomains.txt.gz - new ccTLD domains we have been able to resolve for the first time within the last 24 hours

      • sp_newnameservers.txt.gz - name servers seen in NS records for the first time within the last 24 hours

      • sp_newselfnamednameservers.txt.gz - self-named name servers seen in NS records for the first time within the last 24 hours

      • sp_nschanges_all.json.gz - domains with any change of NS records within the last 24 hours, includes current and previous NS records, from zone file analysis

      • sp_nschanges_to_self.json.gz - domains changing their NS records to point to a self-named NS server within the last 24 hours, includes current and previous NS records, from zone file analysis

      • sp_newmailservers.txt.gz - mail servers seen in MX records for the first time within the last 24 hours

      • sp_redirect_vulnerable_domains.txt.gz - domains vulnerable to open redirects

      • sp_ipfs_nodes_ipv4.txt.gz - IPv4 addresses participating in the IPFS network within the last 7 days

      • sp_ipfs_nodes_ipv6.txt.gz - IPv6 addresses participating in the IPFS network within the last 7 days

      • sp_merlinc2_ip.txt.gz - suspected Merlin C2 IPs

      • sp_ranked_as_takedown_ipv4.txt.gz - IPv4 addresses from the ASs with the worst Silent Push Takedown score

      • sp_ranked_subnet_ipv4.txt.gz - IPv4 addresses from the subnets with the worst Silent Push subnet reputation

Request Headers
  • X-API-KEYapi-key

Example Request

https://api.silentpush.com/api/v1/merge-api/explore/files/feeds/sp_newdomains.txt.gz