{
  "opencollection": "1.0.0",
  "info": {
    "name": "VirusTotal API v3 - Access Control Access Control - Group Management IoC Investigation - Domains & Resolutions API",
    "version": "3.0"
  },
  "request": {
    "auth": {
      "type": "apikey",
      "key": "x-apikey",
      "value": "{{x-apikey}}",
      "placement": "header"
    }
  },
  "items": [
    {
      "info": {
        "name": "IoC Investigation - Domains & Resolutions",
        "type": "folder"
      },
      "items": [
        {
          "info": {
            "name": "VirusTotal Get a Domain Report",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://www.virustotal.com/api/v3/domains/:domain",
            "headers": [
              {
                "name": "x-tool",
                "value": ""
              }
            ],
            "params": [
              {
                "name": "domain",
                "value": "",
                "type": "path",
                "description": "Domain name"
              }
            ],
            "auth": {
              "type": "apikey",
              "key": "x-apikey",
              "value": "{{x-apikey}}",
              "placement": "header"
            }
          },
          "docs": "Returns a [Domain](https://gtidocs.virustotal.com/reference/domains-object) object.\n"
        },
        {
          "info": {
            "name": "VirusTotal Get Comments on a Domain",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://www.virustotal.com/api/v3/domains/:domain/comments",
            "params": [
              {
                "name": "domain",
                "value": "",
                "type": "path",
                "description": "Domain name"
              },
              {
                "name": "limit",
                "value": "",
                "type": "query",
                "description": "Maximum number of comments to retrieve"
              },
              {
                "name": "cursor",
                "value": "",
                "type": "query",
                "description": "Continuation cursor"
              }
            ],
            "auth": {
              "type": "apikey",
              "key": "x-apikey",
              "value": "{{x-apikey}}",
              "placement": "header"
            }
          },
          "docs": "Returns a list of [Comment](https://gtidocs.virustotal.com/reference/comment-object) objects.\n"
        },
        {
          "info": {
            "name": "VirusTotal Add a Comment to a Domain",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://www.virustotal.com/api/v3/domains/:domain/comments",
            "params": [
              {
                "name": "domain",
                "value": "",
                "type": "path",
                "description": "Domain name"
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "apikey",
              "key": "x-apikey",
              "value": "{{x-apikey}}",
              "placement": "header"
            }
          },
          "docs": "With this endpoint you can post a comment for a given domain. The body for the POST request must be the JSON representation of a comment object. Notice however that you don't need to provide an ID for the object, as they are automatically generated for new comments.\n\nAny word starting with # in your comment's text will be considered a tag, and added to the comment's tag attribute.\n\n```json Example request\n{\n  \"data\": {\n    \"type\": \"comment\",\n    \"attributes\": {\n    \t\"text\": \"Lorem #ipsum dolor s"
        },
        {
          "info": {
            "name": "VirusTotal Get Object Descriptors Related to a Domain",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://www.virustotal.com/api/v3/domains/:domain/relationships/:relationship",
            "params": [
              {
                "name": "domain",
                "value": "",
                "type": "path",
                "description": "Domain name"
              },
              {
                "name": "relationship",
                "value": "",
                "type": "path",
                "description": "Relationship name (see [table](ref:domains-object#relationships))"
              },
              {
                "name": "limit",
                "value": "",
                "type": "query",
                "description": "Maximum number of related objects to retrieve"
              },
              {
                "name": "cursor",
                "value": "",
                "type": "query",
                "description": "Continuation cursor"
              }
            ],
            "auth": {
              "type": "apikey",
              "key": "x-apikey",
              "value": "{{x-apikey}}",
              "placement": "header"
            }
          },
          "docs": "This endpoint is the same as [/domains/{domain}/{relationship}](https://gtidocs.virustotal.com/reference/domains-relationships) except it returns just the related object's IDs (and context attributes, if any) instead of returning all attributes.\n"
        },
        {
          "info": {
            "name": "VirusTotal Get Votes on a Domain",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://www.virustotal.com/api/v3/domains/:domain/votes",
            "params": [
              {
                "name": "domain",
                "value": "",
                "type": "path",
                "description": "domain parameter"
              }
            ],
            "auth": {
              "type": "apikey",
              "key": "x-apikey",
              "value": "{{x-apikey}}",
              "placement": "header"
            }
          },
          "docs": "Returns a list of [Vote](https://gtidocs.virustotal.com/reference/vote-object) objects.\n"
        },
        {
          "info": {
            "name": "VirusTotal Add a Vote to a Domain",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://www.virustotal.com/api/v3/domains/:domain/votes",
            "params": [
              {
                "name": "domain",
                "value": "",
                "type": "path",
                "description": "hostname or domain name"
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "apikey",
              "key": "x-apikey",
              "value": "{{x-apikey}}",
              "placement": "header"
            }
          },
          "docs": "With this endpoint you can post a vote for a given domain. The body for the POST request must be the JSON representation of a [vote object](https://gtidocs.virustotal.com/reference/vote-object). Note however that you don't need to provide an ID for the object, as they are automatically generated for new votes.\n\nThe verdict attribute must have be either harmless or malicious.\n\n```json Example request\n{\n  \"data\": {\n    \"type\": \"vote\",\n    \"attributes\": {\n    \t\"verdict\": \"harmless\"\n    }\n  }\n}\n```\n"
        },
        {
          "info": {
            "name": "VirusTotal Get Objects Related to a Domain",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://www.virustotal.com/api/v3/domains/:domain/:relationship",
            "params": [
              {
                "name": "domain",
                "value": "",
                "type": "path",
                "description": "Domain name"
              },
              {
                "name": "relationship",
                "value": "",
                "type": "path",
                "description": "Relationship name (see [table](ref:domains-object#relationships))"
              },
              {
                "name": "limit",
                "value": "",
                "type": "query",
                "description": "Maximum number of related objects to retrieve"
              },
              {
                "name": "cursor",
                "value": "",
                "type": "query",
                "description": "Continuation cursor"
              }
            ],
            "auth": {
              "type": "apikey",
              "key": "x-apikey",
              "value": "{{x-apikey}}",
              "placement": "header"
            }
          },
          "docs": "Domain objects have number of relationships to other Domains and objects. As mentioned in the [Relationships](https://gtidocs.virustotal.com/reference/relationships) section, those related objects can be retrieved by sending `GET` requests to the relationship URL. \n\nAll available relationships are documented in the [domain](https://gtidocs.virustotal.com/reference/domains-object) API object page.\n"
        },
        {
          "info": {
            "name": "VirusTotal Get a DNS Resolution Object",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://www.virustotal.com/api/v3/resolutions/:id",
            "params": [
              {
                "name": "id",
                "value": "",
                "type": "path",
                "description": "Resolution object ID."
              }
            ],
            "auth": {
              "type": "apikey",
              "key": "x-apikey",
              "value": "{{x-apikey}}",
              "placement": "header"
            }
          },
          "docs": "This endpoint retrieves a [Resolution](https://gtidocs.virustotal.com/reference/resolution-object) object by its ID. A resolution object ID is made by appending the IP and the domain it resolves to together.\n"
        }
      ]
    }
  ],
  "bundled": true
}