Get Feed by Name and Organization

Get by Name and Organization

curl "https://pulsedive.com/api/feed.php?feed=Zeus%20Bad%20Domains&organization=abuse.ch"

{
  "fid": 123,
  "feed": "<string>",
  "organization": "<string>",
  "category": "malware",
  "pricing": "free",
  "contact": {
    "name": "abuse.ch team",
    "email": "contact@abuse.ch",
    "phone": "212-555-0123"
  },
  "website": "https://abuse.ch",
  "schedule": "daily",
  "stamp_added": "2025-05-19 14:23:45",
  "stamp_updated": "2025-05-19 14:23:45",
  "stamp_pulled": "2025-05-19 14:23:45",
  "stamp_modified": "2025-05-19 14:23:45",
  "description": "List of domains used by Zeus.",
  "accesslink": "https://abuse.ch",
  "indicators": {
    "unknown": 0,
    "low": 2,
    "medium": 2,
    "high": 2,
    "critical": 1,
    "retired": 100,
    "total": 108,
    "none": 1
  },
  "summary": {
    "properties": {},
    "attributes": {
      "technology": {},
      "protocol": {},
      "port": {}
    },
    "threats": [
      {
        "indicators": 123,
        "tid": 123,
        "category": "malware",
        "stamp_updated": "2025-05-19 14:23:45",
        "risk": "unknown",
        "name": "Zeus"
      }
    ],
    "risk": {
      "unknown": 0,
      "low": 2,
      "medium": 2,
      "high": 2,
      "critical": 1,
      "retired": 100,
      "total": 108,
      "none": 1
    }
  }
}

{
  "error": "<string>"
}

{
  "error": "<string>"
}

{
  "error": "<string>"
}

{
  "error": "<string>"
}

{
  "error": "<string>"
}

GET

api

feed.php

Get by Name and Organization

curl "https://pulsedive.com/api/feed.php?feed=Zeus%20Bad%20Domains&organization=abuse.ch"

{
  "fid": 123,
  "feed": "<string>",
  "organization": "<string>",
  "category": "malware",
  "pricing": "free",
  "contact": {
    "name": "abuse.ch team",
    "email": "contact@abuse.ch",
    "phone": "212-555-0123"
  },
  "website": "https://abuse.ch",
  "schedule": "daily",
  "stamp_added": "2025-05-19 14:23:45",
  "stamp_updated": "2025-05-19 14:23:45",
  "stamp_pulled": "2025-05-19 14:23:45",
  "stamp_modified": "2025-05-19 14:23:45",
  "description": "List of domains used by Zeus.",
  "accesslink": "https://abuse.ch",
  "indicators": {
    "unknown": 0,
    "low": 2,
    "medium": 2,
    "high": 2,
    "critical": 1,
    "retired": 100,
    "total": 108,
    "none": 1
  },
  "summary": {
    "properties": {},
    "attributes": {
      "technology": {},
      "protocol": {},
      "port": {}
    },
    "threats": [
      {
        "indicators": 123,
        "tid": 123,
        "category": "malware",
        "stamp_updated": "2025-05-19 14:23:45",
        "risk": "unknown",
        "name": "Zeus"
      }
    ],
    "risk": {
      "unknown": 0,
      "low": 2,
      "medium": 2,
      "high": 2,
      "critical": 1,
      "retired": 100,
      "total": 108,
      "none": 1
    }
  }
}

{
  "error": "<string>"
}

{
  "error": "<string>"
}

{
  "error": "<string>"
}

{
  "error": "<string>"
}

{
  "error": "<string>"
}

Query Parameters

key

string

Your Pulsedive API key.

API key authentication is optional. However, requests without a key have stricter rate limits. We recommend including an API key for better performance and reliability.

feed

string

required

Name of the feed to retrieve.

Example:

"Zeus Bad Domains"

organization

string

required

Organization associated with the feed to retrieve.

Example:

"abuse.ch"

pretty

enum<integer>

default:0

Indicates whether to format returned JSON results.

For pretty-printed output, set to 1. For compact output, set to 0.

Available options:

0,

1

Response

Successful request. Returns feed information in JSON format.

fid

integer

Unique identifier of the feed.

feed

string

Name of the feed being retrieved.

organization

string

Organization associated with the feed being retrieved.

category

string

Category assigned to the feed.

Example:

"malware"

pricing

string

Pricing tier of the feed.

Example:

"free"

contact

object

Contact information for the feed.

Show child attributes

website

string

URL of the feed.

Example:

"https://abuse.ch"

schedule

string

Update schedule of the feed.

Example:

"daily"

stamp_added

string<sql-date-time> | null

Timestamp when the feed was first added to Pulsedive. 24-hour format, UTC time zone.

Pattern: ^\d{4}-\d{2}-\d{2} \d{2}:\d{2}:\d{2}$

Example:

"2025-05-19 14:23:45"

stamp_updated

string<sql-date-time> | null

Timestamp when the feed record was last updated in Pulsedive. 24-hour format, UTC time zone.

Pattern: ^\d{4}-\d{2}-\d{2} \d{2}:\d{2}:\d{2}$

Example:

"2025-05-19 14:23:45"

stamp_pulled

string<sql-date-time> | null

Timestamp when the feed record was last pulled in Pulsedive. 24-hour format, UTC time zone.

Pattern: ^\d{4}-\d{2}-\d{2} \d{2}:\d{2}:\d{2}$

Example:

"2025-05-19 14:23:45"

stamp_modified

string<sql-date-time> | null

Timestamp when the feed record was last modified in Pulsedive. 24-hour format, UTC time zone.

Pattern: ^\d{4}-\d{2}-\d{2} \d{2}:\d{2}:\d{2}$

Example:

"2025-05-19 14:23:45"

description

string

Description of the feed.

Example:

"List of domains used by Zeus."

accesslink

string

Link to access the feed.

Example:

"https://abuse.ch"

indicators

object

Keyed object representing the count of each type of indicator in the feed.

Each {key} matches an indicator risk level and its value contains the corresponding count.

Example:

{
  "unknown": 0,
  "low": 2,
  "medium": 2,
  "high": 2,
  "critical": 1,
  "retired": 100,
  "total": 108,
  "none": 1
}

summary

object

Summary information about the feed.

Show child attributes

Getting Started

Indicators

Scan an Indicator

Explore

Threats

Feeds

Get Feed by Name and Organization

Query Parameters

Response