Skip to main content

Cyware Orchestrate

API Void

App Vendor: APIVoid

Connector Category: Data Enrichment & Threat Intelligence

Connector Version: 1.0.0

API Version: 1.0.0

Product Version: 1.0.0

About App

APIVoid reduces the manual work of security analysts by providing JSON APIs useful for cyber threat analysis, threat detection, and threat prevention. With this integration, Orchestrate can identify malicious IP addresses, obtain SSL certificate details, perform DNS record lookups, and much more.

The APIVoid app is configured with the Orchestrate application to perform the below-listed actions:

Action

Description

Check Parked Domain

This action can be used to check if a domain is parked or for sale.

Fetch Certificate Information

This action can be used to obtain information about a certificate.

Fetch Domain Age Info

This action can be used to obtain the domain age information.

Fetch Domain Reputation

This action can be used to obtain a domain reputation.

Fetch Domain Threat Log

This action can be used to fetch the domain threat log.

Fetch IP Address Reputation

This action can be used to check the IP address's reputation.

Query DNS Lookup

This action can be used to get common DNS records for a domain.

Query Email Domain Lookup

This action can be used to query an email domain lookup in APIVoid.

Configuration parameters

The following configuration parameters are required for the APIVoid app to communicate with the APIVoid enterprise application. The parameters can be configured by creating instances in the app.

Parameter

Description

Field Type

Required/Optional

Comments

API Key

Enter the API Key.

Text

Required

Action: Check Parked Domain

This action can be used to check if a domain is parked or for sale.

Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Domain

Enter the domain. For example,abc.com

Text

Required

Example Request
[
    {
        "domain": "google.com"
    }
]
Action: Fetch Certificate Information

This action can be used to obtain information about a certificate.

Input Parameters

Parameter

Description

Field Type

Required/Comments

Comments

Domain

Enter the domain. For example,abc.com

Text

Required

Example Request
[
    {
        "domain": "google.com"
    }
]
Action: Fetch Domain Age Info

This action can be used to obtain the domain age information.

Input Parameters

Parameters

Description

Field Type

Required/Optional

Comments

Domain

Enter the domain. For example,abc.com

Text

Required

Example Request
[
    {
        "domain": "google.com"
    }
]
Action: Fetch Domain Reputation

This action can be used to obtain a domain reputation.

Input Parameters

Parameters

Description

Field Type

Required/Optional

Comments

Domain

Enter the domain. For example,abc.com

Text

Required

Example Request
[
    {
        "domain": "google.com"
    }
]
Action: Fetch Domain Threat Log

This action can be used to fetch the domain threat log.

Input Parameters

Parameters

Description

Field Type

Required/Optional

Comments

Domain

Enter the domain. For example,abc.com

Text

Required

Example Request
[
    {
        "domain": "google.com"
    }
]
Action: Fetch IP Address Reputation

This action can be used to check the IP address's reputation.

Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

IP Address

Enter the IP address. For example, 1.2.3.4

Any

Required

Example Request
[
    {
        "ip_address": "8.8.8.8"
    }
]
Action: Query DNS Lookup

This action can be used to get common DNS records for a domain.

Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Domain

Enter the domain. For example,abc.com

Text

Required

Report Type

Enter the DNS report/record type i.e, a, aaaa, ns, mx, txt, soa

For example, AAAA refers to a function that returns a 128-bit IPv6 address, most commonly used to map hostnames to an IP address of the host. To know more on record types, refer here.

Example Request
[
    {
        "report_type": "ns"
        "ip_address": "8.8.8.8"
    }
]
Action: Query Email Domain Lookup

This action can be used to query an email domain lookup in APIVoid.

Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Domain

Enter the domain. For example,abc.com

Text

Required

Example Request
[
    {
        "ip_address": "8.8.8.8"
    }
]