Malicious pages-acceptors

The SerpstatBacklinksProcedure.getOutThreatsLinks method returns a list of links from malicious sites referring to the analyzed domain. The data set is similar to the Malicious sites report.

A list of links from malicious sites referring to the analyzed domain

Use case: With the SerpstatBacklinksProcedure.getOutThreatsLinks method, check which pages have malicious links from the target site to make sure that your site is not among them.

General request parameters and instructions for using Serpstat API

Request parameters
Parameter	Description	Type	Required	Default value	Value options
id	A request id: the response contains the same id. Enter any number (number) or text (string) value	int/string	yes		Text or number value. For example: 1, test
method	API method name	string	yes		SerpstatBacklinksProcedure.getOutThreatsLinks
params	The object with parameters {...}, it lists all the following parameters and arrays [...]		yes
query	Domain of the analyzed site. Specify the domain without http / https and «/»	string	yes		The text value of the domain being analyzed. For example: serpstat.com
searchType	Search modes for analysis	string	yes	domain_with_subdomains	domain - domain only (site.com) domain_with_subdomains - domain with subdomains (subdomain.site.com)
page	A page number (number value)	int	no	1	any number value
size	A number of results (number value)	int	no	100	number value in the range of 1-1000
sort	Sorting the results	string	no	lastupdate	* lastupdate - date of the first detection * url_from - the URL of the malicious link * url_to - target URL * platform_type - the platform for which the site is a threat: 1 - windows 2 - linux 3 - android 4 - OS X 5 - IOS 6 - any OS 7 - all OS 8 - chrome OS * threat_type - a type of vulnerability: 1 - malware 2 - social engineering 3 - unwanted software 4 - potentially harmful application
order	Order	string	no	desc	* asc - in the ascending order * desc - in the descending order

Filter conditions parameters

Parameter

Description

complexFilter

Data filtering, entered as arrays [...]
* field - filter parameter
Available filtering:
* lastupdate - date of the first detection
* url_from - the URL of the malicious link
* url_to - target URL
* platform_type - the platform for which the site is a threat:
1 - windows
2 - linux
3 - android
4 - OS X
5 - IOS
6 - any OS
7 - all OS
8 - chrome OS

* threat_type - a type of vulnerability:
1 - malware
2 - social engineering
3 - unwanted software
4 - potentially harmful application

* lastupdate - link detection date. Value format: DD.MM.YYYY (01.01.2001)

* compareType - filter parameter:
* gt - greater than (number value)
* lt - less than (number value)
* gte - greater than or equal (number value)
* lte - less than or equal (number value)
* eq - exact match (number or text value)
* neq - does not meet the requirement (number or text value)
* between - between (number value)
* contains - contains (text value)
* notContains - does not contain (text value)
* startsWith - starts with (text value)
* endsWith - ends with (text value)

* value - filter value

The first square brackets list the "OR" conditions. The second within the first are the "AND" conditions

Response parameters
Parameter	Description
id	Response id corresponds the request id
result	Contains the answer
data	Array with data
domain	Malicious domain
link_from	URL of the malicious link
link_to	Target page
platform_type	Platform: windows; Linux; android; OS X; IOS; any OS; all OS; chrome OS.
threat_type	Threat type: malware; social engineering; unwanted software; potentially harmful application.
lastupdate	Date of the last update
summary_info	Object with data
page	Page number
total	Number of results for request
count	Number of results in this answer
left_lines	Left credits of lines for your pricing plan
sort	What data are sorted by
order	Data sorted: * asc - in the ascending order * desc - in the descending order

API credits are spent at 1 credit for each domain. If data are absent, the credits are not charged. Part of the API response for which you spend 1 credit:

{
     "domain": "lexxlight.ru",
     "link_from": "https://www.kinopoisk.ru/article/3047941/",
     "link_to": "http://www.lexxlight.ru/interview/Jeff_Hirschfield_april2001_eng.html",
     "platform_type": [
         "all_platforms"
     ],
     "threat_type": [
         "malware"
     ],
     "lastupdate": "2020-09-29 17:48:34"
}

Example

Request data:

{
 "id": 1,
 "method": "SerpstatBacklinksProcedure.getOutThreatsLinks",
 "params": {
     "query": "kinopoisk.ru",
     "searchType": "domain",
     "sort": "url_from",
     "order": "desc",
     "page": 1,
     "size": 2,
     "linkPerDomain": 1,
     "complexFilter": [
            [
                {
                    "field": "lastupdate",
                    "compareType": "gt",
                    "value": [
                        "29.09.2020"
                    ]
                },
                {
                    "field": "url_from",
                    "compareType": "contains",
                    "value": [
                        ".ru"
                    ]
                },
                {
                    "field": "platform_type",
                    "compareType": "contains",
                    "value": [
                        "1"
                    ]
                },
                {
                    "field": "url_to",
                    "compareType": "contains",
                    "value": [
                        ".ru"
                    ]
                },
                {
                    "field": "threat_type",
                    "compareType": "contains",
                    "value": [
                        "1"
                    ]
                }
            ]   
        ]
  }
}

Response data:

{
    "id": "1",
    "result": {
        "data": [
            {
                "domain": "lexxlight.ru",
                "link_from": "https://www.kinopoisk.ru/article/3047941/",
                "link_to": "http://www.lexxlight.ru/interview/Jeff_Hirschfield_april2001_eng.html",
                "platform_type": [
                    "all_platforms"
                ],
                "threat_type": [
                    "malware"
                ],
                "lastupdate": "2020-09-29 17:48:34"
            }
        ],
        "summary_info": {
            "left_lines": 999816,
            "page": 1,
            "count": 1,
            "total": 1,
            "sort": "url_from",
            "order": "DESC"
        }
    }
}