Fetch info for a domain GET

Returns information we have about a phishing domain. Responses are in JSON format.

🔒 Auth Token: Required
🔑 API Permission Required: API.READ

The URL for this endpoint is:

https://api.phisherman.gg/v1/domains/info/<domain>

Required Parameters

NameTypeDescription
domainstringThe fully qualified domain name you wish to query

Example Request

curl -L -X GET "https://api.phisherman.gg/v1/domains/info/internetbadguys.com" \
-H "Authorization: Bearer <API-KEY>"
1
2
var request = require('request');
var options = {
  'method': 'GET',
  'url': 'https://api.phisherman.gg/v1/domains/info/internetbadguys.com',
  'headers': {
    'Authorization': 'Bearer <API-KEY>'
  }
};
request(options, function (error, response) {
  if (error) throw new Error(error);
  console.log(response.body);
});
1
2
3
4
5
6
7
8
9
10
11
12
import http.client

conn = http.client.HTTPSConnection("api.phisherman.gg")
payload = ''
headers = {
  'Authorization': 'Bearer <API-KEY>'
}
conn.request("GET", "/v1/domains/info/internetbadguys.com", payload, headers)
res = conn.getresponse()
data = res.read()
print(data.decode("utf-8"))
1
2
3
4
5
6
7
8
9
10
11

Example Response

{
    "internetbadguys.com": {
        "status": "ONLINE",
        "created": "2021-10-31T14:39:24.000Z",
        "lastChecked": "2021-10-31T14:39:29.000Z",
        "verifiedPhish": false,
        "classification": "suspicious",
        "firstSeen": "2021-11-26T01:14:42.000Z",
        "lastSeen": "2021-12-27T16:40:15.000Z",
        "targetedBrand": "Other",
        "phishCaught": 6,
        "details": {
            "phishTankId": "",
            "urlScanId": "50c3429b-ee4d-452c-bad9-b4d5faaaffac",
            "websiteScreenshot": "https://urlscan.io/screenshots/50c3429b-ee4d-452c-bad9-b4d5faaaffac.png",
            "ip_address": "146.112.255.155",
            "asn": {
                "asn": "AS36692",
                "asn_name": "OPENDNS",
                "route": "146.112.255.0/24"
            },
            "registry": "arin",
            "country": {
                "code": "US",
                "name": "United States"
            }
        }
    }
}
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29

Response Details

NameTypeDescription
statusstringThe status of this website. (mostly for future use)
lastCheckedtimestampThe timestamp (in UTC) when this domain was last checked as being online
verifiedPhishbooleanWether this domain is verified as a phishing website
classificationstringThe classification for this domain
createdtimestampThe timestamp (in UTC) when this was added to our database
firstSeentimestampThe timestamp (in UTC) when this domain was first reported as seen
lastSeentimestampThe timestamp (in UTC) when this domain was last reported as seen
targetedBrandstringWhat brand or company this phish is aimed at
phishCaughtintegerThe number of times this phish has been reported back to Phisherman as being caught
phishTankIdintegerThe PhishTankopen in new window ID for this domain, if applicable
urlScanIdstringThe URLScan.ioopen in new window UUID for this domain, if applicable
websiteScreenshotstringURL to a screenshot of this website, provided by either PhishTankopen in new window or URLScan.ioopen in new window
ip_addressstringThe IP address of this website
asn: asnstringThe ASN (Autonomous System Numbers) for this domain
asn: namestringThe human readable name for this ASN (Autonomous System Number)
asn: routestringThe CIDR block for this domain
routestringThe CIDR Block for this website
registrystringThe regional internet registry for this domain
country: codestringThe ISO code for the country this domain is hosted in
country: namestringThe country this domain is hosted in
Last Updated: