Search C2 Domains

Search ZeroFox’s CTI feed of command and control (C2) domains for a specified domain.

External Documentation

To learn more, visit the ZeroFox documentation.

​

Basic Parameters

Parameter	Description
Created After	The date and time to return C2 domains created from.
Domain	The domain to search for.
Return All Pages	Automatically fetch all resources, page by page.

​

Advanced Parameters

Parameter	Description
Cursor	The cursor of the results page to return. You can get it from the next URL of a previous response.

​

Example Output

{
	"next": null,
	"results": [
		{
			"domain": "www.character-try.xyz",
			"port": 80,
			"tags": [
				"downloader",
				"exploit",
				"injector",
				"spyware",
				"sample_type:rtf_document",
				"family:formbook",
				"family:xloader",
				"family:mal/generic-s"
			],
			"ip_addresses": [
				"203.0.113.10"
			],
			"updated_at": "2023-06-14T10:56:24Z",
			"created_at": "2023-06-14T11:10:48.373715Z"
		}
	]
}