External malicious domains (getOutThreats)

The getOutThreats method returns a list of malicious domains referring to the analyzed domain and information on them. The data set is similar to the Malicious sites report.

General request parameters and instructions for using Serpstat API

Request parameters
Parameter		Description	Default
id	required	A request id. Any number or string value is allowed.
method	required	API method name: SerpstatBacklinksProcedure.getOutThreats
params	required	The array with parameters {...}, it lists all the following parameters and arrays.
query	required	A domain of the analyzed site. Specify the domain without http/ https и "/".
page	optional	A page number. Numbers are allowed.	1
size	optional	A number of results. Numbers are allowed.	100
sort	optional	Sort: * lastupdate - date of the first detection * domain_link - number of links to the domain * links_count - number of links from the domain * platform_type - the platform for which the site is a threat * threat_type - a type of vulnerability	lastupdate
order	optional	Order: * asc - in the ascending order * desc - in the descending order	desc
complexFilter	optional	Data filtering, entered as arrays. Available columns: * lastupdate - date of the first detection * domain_link - number of links to the domain * links_count - number of links from the domain * platform_type - the platform for which the site is a threat: 1 - windows 2 - linux 3 - android 4 - OS X 5 - IOS 6 - any OS 7 - all OS 8 - chrome OS * threat_type - a type of vulnerability: 1 - malware 2 - social engineering 3 - unwanted software 4 - potentially harmful application * lastupdate - link detection date. Value format: DD.MM.YYYY (01.01.2001) Compare type: * gt - greater than. Numbers are allowed * lt - less than. Numbers are allowed * gte - greater than or equal. Numbers are allowed * lte - less than or equal. Numbers are allowed * eq - exact match. Numbers and strings are allowed * neq - does not meet the requirement. Numbers and strings are allowed * between - between. Numbers are allowed * contains - contains. String values are allowed * notContains - does not contain. String values are allowed * startsWith - starts with. String values are allowed * endsWith - ends with. String values are allowed The first square brackets list the "OR" conditions. The second within the first are the "AND" conditions.
linkPerDomain	optional	Data acquisition mode: * 0 - one link from the page * 1 - one link from the domain	1

Response parameters
Parameter	Description
id	Request id
result	Contains the answer
data	Array with data
domain	Malicious domain
domain_link	Number of links to the domain
links_count	Number of links from the domain
platform_type	Platform: windows; Linux; android; OS X; IOS; any OS; all OS; chrome OS.
threat_type	Threat type: malware; social engineering; unwanted software; potentially harmful application.
last_update	Date of the last update
summary_info	Array with data
page	Page number
total	Number of results for request
count	Number of results in this answer
left_lines	Left limit of lines for your pricing plan
sort	What data is sorted by
order	Data sorted in ascending / descending order

API credits are spent at 1 credit for each domain. If data are absent, the credits are not charged.

Part of the API response for which you spend 1 credit:
{
                "domain": "lexxlight.ru",
                "domain_link": "http://lexxlight.ru",
                "links_count": 1,
                "platform_type": [
                    "all_platforms"
                ],
                "threat_type": [
                    "malware"
                ],
                "lastupdate": "2020-09-29 17:48:34"
            }

Example PHP Python

Request data:

{
 "id": 1,
 "method": "SerpstatBacklinksProcedure.getOutThreats",
 "params": {
     "query": "kinopoisk.ru",
     "searchType": "domain",
     "sort": "lastupdate",
     "order": "desc",
     "page": 1,
     "size": 2,
     "linkPerDomain": 1,
     "complexFilter": [
            [
                {
                    "field": "lastupdate",
                    "compareType": "gt",
                    "value": [
                        "29.09.2020"
                    ]
                },
                {
                    "field": "domain_link",
                    "compareType": "contains",
                    "value": [
                        ".ru"
                    ]
                },
                {
                    "field": "links_count",
                    "compareType": "gte",
                    "value": [
                        "1"
                    ]
                },
                {
                    "field": "platform_type",
                    "compareType": "contains",
                    "value": [
                        "1"
                    ]
                },
                {
                    "field": "threat_type",
                    "compareType": "contains",
                    "value": [
                        "1"
                    ]
                }
            ]   
        ]
  }
}

Response data:

{
    "id": "1",
    "result": {
        "data": [
            {
                "domain": "lexxlight.ru",
                "domain_link": "http://lexxlight.ru",
                "links_count": 1,
                "platform_type": [
                    "all_platforms"
                ],
                "threat_type": [
                    "malware"
                ],
                "lastupdate": "2020-09-29 17:48:34"
            }
        ],
        "summary_info": {
            "left_lines": 999817,
            "page": 1,
            "count": 1,
            "total": 1,
            "sort": "lastupdate",
            "order": "DESC"
        }
    }
}