> ## Documentation Index > Fetch the complete documentation index at: https://docs.pulsedive.com/llms.txt > Use this file to discover all available pages before exploring further. # Get Indicator Links or Properties > Retrieve links or properties for a specific indicator. ## OpenAPI ````yaml /api/indicator/indicator-get-links-properties.yaml get /api/indicator.php openapi: 3.0.3 info: title: Pulsedive API Reference version: 1.0.0 description: > The Pulsedive API lets you programmatically manage resources within Pulsedive. Users can look up known indicators and threats, enrich and investigate indicators, query Pulsedive data, and automate workflows. Please report any discrepancies in API behavior to Pulsedive Support. license: name: Apache 2.0 url: https://www.apache.org/licenses/LICENSE-2.0.html contact: email: support@pulsedive.com servers: - url: https://pulsedive.com security: [] tags: - name: Indicators description: Look up known indicators. externalDocs: url: https://docs.pulsedive.com paths: /api/indicator.php: get: tags: - Indicators summary: Get Indicator Links or Properties description: | Retrieve links or properties for a specific indicator. operationId: getIndicatorLinksOrProperties parameters: - $ref: '#/components/parameters/APIKey' - $ref: '#/components/parameters/IndicatorID' - $ref: '#/components/parameters/Get' - $ref: '#/components/parameters/Historical' - $ref: '#/components/parameters/Pretty' responses: '200': description: >- Successful request. Returns requested indicator information in JSON format. content: application/json: schema: $ref: '#/components/schemas/GetResponse' examples: Links: $ref: '#/components/examples/LinksExample' Properties: $ref: '#/components/examples/PropertiesExample' '400': $ref: '#/components/responses/BadRequest' '401': $ref: '#/components/responses/Unauthorized' '404': $ref: '#/components/responses/NotFound' '429': $ref: '#/components/responses/TooManyRequests' '500': $ref: '#/components/responses/InternalServerError' x-codeSamples: - lang: curl label: Get Links source: > curl "https://pulsedive.com/api/indicator.php?iid=47936201&get=links" - lang: curl label: Get Properties source: > curl "https://pulsedive.com/api/indicator.php?iid=47936201&get=properties" components: parameters: APIKey: name: key in: query required: false description: > Your Pulsedive API key. API key authentication is optional. However, requests without a key have stricter rate limits. We recommend including an API key for better performance and reliability. schema: type: string IndicatorID: name: iid in: query required: true description: | Unique identifier of the indicator to retrieve. schema: type: string examples: default: summary: Indicator ID value: 47936201 Get: name: get in: query required: true description: > Indicates which data subset to retrieve. Options include: - `links`: Retrieves relationship data showing how the indicator connects to other objects. - `properties`: Retrieves only the properties data, such as classification changes, sightings, timestamps, and related metadata. Use for better performance when you only need current property values or want to control response size. schema: type: string enum: - links - properties nullable: true examples: links: summary: Retrieve links value: links properties: summary: Retrieve properties value: properties Historical: name: historical in: query description: > Indicates whether to return indicator properties as they appeared in previous scans. Use to analyze trends or audit historical threat activity. For historical data, set to 1. For recent data, set to 0. schema: type: integer enum: - 0 - 1 default: 0 examples: recent: summary: Recent data value: 0 historical: summary: Historical data value: 1 Pretty: name: pretty in: query required: false description: | Indicates whether to format returned JSON results. For pretty-printed output, set to `1`. For compact output, set to `0`. schema: type: integer enum: - 0 - 1 default: 0 examples: compact: summary: Compact output value: 0 pretty: summary: Pretty-printed output value: 1 schemas: GetResponse: oneOf: - $ref: '#/components/schemas/LinksResponse' - $ref: '#/components/schemas/PropertiesResponse' LinksResponse: type: object title: Links description: >- Response containing linked indicators grouped by link type. Dynamic keyed object where {key} represents the link type. additionalProperties: type: array items: $ref: '#/components/schemas/LinkedIndicator' PropertiesResponse: type: object title: Properties description: >- Response containing indicator properties grouped by property type. Dynamic keyed object where {key} represents the property type. additionalProperties: type: array items: $ref: '#/components/schemas/PropertyRecord' ErrorResponse: type: object properties: error: type: string description: Message describing the error that occurred, if available. LinkedIndicator: type: object description: An indicator linked to the queried indicator. properties: iid: type: integer description: Unique identifier of the linked indicator. example: 47936201 indicator: type: string description: Value of the linked indicator. example: subdomain.pulsedive.com type: type: string description: Type of the linked indicator. example: domain risk: type: string description: Risk level of the linked indicator. enum: - unknown - very low - low - medium - high - critical - retired - none example: none stamp_linked: type: string format: sql-date-time pattern: ^\d{4}-\d{2}-\d{2} \d{2}:\d{2}:\d{2}$ description: > Timestamp when the indicator was linked. 24-hour format, UTC time zone. nullable: true example: '2024-01-20 15:30:00' summary: type: object description: > Dynamically generated summary data for the linked indicator. Structure varies by indicator type and available data. PropertyRecord: type: object description: A single property record. properties: pid: type: integer description: Unique identifier of the property. example: 331169269 stamp_seen: type: string format: sql-date-time pattern: ^\d{4}-\d{2}-\d{2} \d{2}:\d{2}:\d{2}$ description: | Timestamp when property was seen. 24-hour format, UTC time zone. nullable: true example: '2017-09-27 18:11:39' name: type: string description: Name of the property. example: nslastaa value: type: string description: Value of the property. example: '20170926' latest: type: integer description: >- Indicates whether this is the most recent value (1 = latest, 0 = historical). enum: - 0 - 1 example: 0 clean: type: integer nullable: true description: >- Unique identifier of the property if this property is marked as clean. risky: type: integer nullable: true description: >- Unique identifier of the property if this property is marked as risky. unique: type: integer nullable: true description: >- Unique identifier of the property if this property is marked as unique. examples: LinksExample: summary: Links response value: Related URLs: - iid: 6038591 indicator: https://pulsedive.com/api/facebook.com/recover/code/ type: url risk: retired stamp_linked: '2019-10-14 19:51:08' summary: properties: whois: ++privacy: '1' geo: country: Canada city: Toronto region: 'ON' countrycode: CA Redirects: - iid: 642010 indicator: https://pulsedive.com/ type: url risk: none stamp_linked: '2026-02-26 17:00:13' summary: domainiid: 53929 properties: whois: ++gdpr: '1' ++privacy: '' geo: city: REDACTED FOR PRIVACY region: NJ country: United States of America countrycode: US http: ++content-type: text/html ++code: '200' domain: pulsedive.com attributes: [] Active DNS: - iid: 169108 indicator: ns3.digitalocean.com type: domain risk: none stamp_linked: '2020-09-01 03:13:21' summary: domainiid: 169109 properties: http: ++code: '200' ++content-type: text/html geo: countrycode: US city: NEW YORK region: NY country: United States of America whois: ++privacy: '' ++gdpr: '' attributes: [] domain: digitalocean.com PropertiesExample: summary: Properties response value: whois: - pid: 1 stamp_seen: '2017-09-27 18:11:39' name: nslastaa value: '20170926' latest: 0 - pid: 2 stamp_seen: '2017-09-27 18:11:39' name: nsstat value: 20170926 AA latest: 0 - pid: 4650 stamp_seen: '2017-10-01 03:01:51' name: nslastaa value: '20170928' latest: 0 responses: BadRequest: description: | Bad request. The request was malformed or missing required parameters. content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' Unauthorized: description: | Unauthorized. Your API key is missing or invalid. content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' NotFound: description: | Not found. The requested indicator could not be located. content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' TooManyRequests: description: > Rate limit exceeded. Too many requests have been made in a short period of time. content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' InternalServerError: description: | Server error. An unexpected problem occurred on our end. These errors are automatically reported to our team. content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' ````