VirusTotal · Schema
DomainObject
A domain analysed by VirusTotal.
Anti-MalwareThreat IntelligenceSecurityFile AnalysisURL AnalysisYARAIoCSandboxMITRE ATT&CKGoogle Cloud
Properties
| Name | Type | Description |
|---|---|---|
| id | string | Object identifier. |
| type | string | Object type discriminator. |
| links | object | Hypermedia links. |
| attributes | object | Type-specific attributes for DomainObject. |
| relationships | object | Pre-expanded relationships, keyed by relationship name. |
JSON Schema
{
"$schema": "https://json-schema.org/draft/2020-12/schema",
"$id": "https://raw.githubusercontent.com/api-evangelist/virustotal/refs/heads/main/json-schema/DomainObject-schema.json",
"title": "DomainObject",
"description": "A domain analysed by VirusTotal.",
"type": "object",
"properties": {
"id": {
"type": "string",
"description": "Object identifier."
},
"type": {
"type": "string",
"description": "Object type discriminator."
},
"links": {
"type": "object",
"description": "Hypermedia links.",
"properties": {
"self": {
"type": "string",
"format": "uri"
}
}
},
"attributes": {
"type": "object",
"description": "Type-specific attributes for DomainObject.",
"properties": {
"creation_date": {
"type": "integer",
"description": "Unix epoch of WHOIS creation date."
},
"expiration_date": {
"type": "integer",
"description": "Unix epoch of WHOIS expiration date."
},
"last_update_date": {
"type": "integer",
"description": "Unix epoch of last WHOIS update."
},
"last_dns_records": {
"type": "array",
"items": {
"type": "object",
"properties": {
"type": {
"type": "string",
"example": "A"
},
"value": {
"type": "string",
"example": "10.0.0.1"
},
"ttl": {
"type": "integer"
}
}
}
},
"last_dns_records_date": {
"type": "integer"
},
"last_https_certificate": {
"type": "object",
"description": "Last observed TLS certificate.",
"properties": {
"thumbprint": {
"type": "string"
},
"thumbprint_sha256": {
"type": "string"
},
"issuer": {
"type": "object",
"additionalProperties": {
"type": "string"
}
},
"subject": {
"type": "object",
"additionalProperties": {
"type": "string"
}
},
"validity": {
"type": "object",
"properties": {
"not_after": {
"type": "string"
},
"not_before": {
"type": "string"
}
}
}
}
},
"last_analysis_stats": {
"type": "object",
"properties": {
"harmless": {
"type": "integer"
},
"malicious": {
"type": "integer"
},
"suspicious": {
"type": "integer"
},
"undetected": {
"type": "integer"
},
"timeout": {
"type": "integer"
}
}
},
"categories": {
"type": "object",
"additionalProperties": {
"type": "string"
}
},
"registrar": {
"type": "string",
"example": "GoDaddy"
},
"popularity_ranks": {
"type": "object",
"description": "Popularity ranks across multiple rankers (Cisco Umbrella, Majestic, etc.).",
"additionalProperties": {
"type": "object",
"properties": {
"rank": {
"type": "integer"
},
"timestamp": {
"type": "integer"
}
}
}
},
"reputation": {
"type": "integer"
},
"total_votes": {
"type": "object",
"properties": {
"harmless": {
"type": "integer"
},
"malicious": {
"type": "integer"
}
}
},
"tags": {
"type": "array",
"items": {
"type": "string"
}
},
"whois": {
"type": "string",
"description": "Raw WHOIS record."
}
}
},
"relationships": {
"type": "object",
"description": "Pre-expanded relationships, keyed by relationship name.",
"additionalProperties": true
}
},
"required": [
"id",
"type",
"attributes"
]
}