--- title: Intel --- [Skip to content](#_top) [API Reference](https://developers.cloudflare.com/api/go) Copy Markdown Open in **Claude**Open in **ChatGPT**Open in **Cursor** --- **Copy Markdown****View as Markdown** # Intel #### IntelASN ##### [Get ASN Overview.](https://developers.cloudflare.com/api/go/resources/intel/subresources/asn/methods/get) client.Intel.ASN.Get(ctx, asn, query) (\*[ASN](), error) GET/accounts/{account\_id}/intel/asn/{asn} #### IntelASNSubnets ##### [Get ASN Subnets](https://developers.cloudflare.com/api/go/resources/intel/subresources/asn/subresources/subnets/methods/get) client.Intel.ASN.Subnets.Get(ctx, asn, query) (\*[ASNSubnetGetResponse](), error) GET/accounts/{account\_id}/intel/asn/{asn}/subnets #### IntelDNS ##### [Get Passive DNS by IP](https://developers.cloudflare.com/api/go/resources/intel/subresources/dns/methods/list) client.Intel.DNS.List(ctx, params) (\*V4PagePagination\[[DNS]()], error) GET/accounts/{account\_id}/intel/dns ##### ModelsExpand Collapse
type DNS struct{…} Count float64Optional Total results returned based on your search parameters. Link to this property Page float64Optional Current page within paginated list of results. Link to this property PerPage float64Optional Number of results per page of results. Link to this property
ReverseRecords \[]DNSReverseRecordOptional Reverse DNS look-ups observed during the time period. FirstSeen TimeOptional First seen date of the DNS record during the time period. formatdate Link to this property Hostname stringOptional Hostname that the IP was observed resolving to. Link to this property LastSeen TimeOptional Last seen date of the DNS record during the time period. formatdate Link to this property
Link to this property
[Link to this property](<#(resource)%20intel.dns%20%3E%20(model)%20dns%20%3E%20(schema)>) #### IntelDomains ##### [Get Domain Details](https://developers.cloudflare.com/api/go/resources/intel/subresources/domains/methods/get) client.Intel.Domains.Get(ctx, params) (\*[Domain](), error) GET/accounts/{account\_id}/intel/domain ##### ModelsExpand Collapse
type Domain struct{…}
AdditionalInformation DomainAdditionalInformationOptional Additional information related to the host name. SuspectedMalwareFamily stringOptional Suspected DGA malware family. Link to this property
Link to this property
Application DomainApplicationOptional Application that the hostname belongs to. ID int64Optional Link to this property Name stringOptional Link to this property
Link to this property
ContentCategories \[]DomainContentCategoryOptional ID int64Optional Link to this property Name stringOptional Link to this property SuperCategoryID int64Optional Link to this property
Link to this property Domain stringOptional Link to this property
InheritedContentCategories \[]DomainInheritedContentCategoryOptional ID int64Optional Link to this property Name stringOptional Link to this property SuperCategoryID int64Optional Link to this property
Link to this property InheritedFrom stringOptional Domain from which inherited_content_categories and inherited_risk_types are inherited, if applicable. Link to this property
InheritedRiskTypes \[]DomainInheritedRiskTypeOptional ID int64Optional Link to this property Name stringOptional Link to this property SuperCategoryID int64Optional Link to this property
Link to this property PopularityRank int64Optional Global Cloudflare 100k ranking for the last 30 days, if available for the hostname. The top ranked domain is 1, the lowest ranked domain is 100,000. Link to this property
ResolvesToRefs \[]DomainResolvesToRefOptional Specifies a list of references to one or more IP addresses or domain names that the domain name currently resolves to. ID stringOptional STIX 2.1 identifier: https://docs.oasis-open.org/cti/stix/v2.1/cs02/stix-v2.1-cs02.html#\_64yvzeku5a5c. Link to this property Value stringOptional IP address or domain name. Link to this property
Link to this property RiskScore float64Optional Hostname risk score, which is a value between 0 (lowest risk) to 1 (highest risk). Link to this property
RiskTypes \[]DomainRiskTypeOptional ID int64Optional Link to this property Name stringOptional Link to this property SuperCategoryID int64Optional Link to this property
Link to this property
[Link to this property](<#(resource)%20intel.domains%20%3E%20(model)%20domain%20%3E%20(schema)>) #### IntelDomainsBulks ##### [Get Multiple Domain Details](https://developers.cloudflare.com/api/go/resources/intel/subresources/domains/subresources/bulks/methods/get) client.Intel.Domains.Bulks.Get(ctx, params) (\*\[] [DomainBulkGetResponse](), error) GET/accounts/{account\_id}/intel/domain/bulk #### IntelDomain History ##### [Get Domain History](https://developers.cloudflare.com/api/go/resources/intel/subresources/domain_history/methods/get) client.Intel.DomainHistory.Get(ctx, params) (\*\[] [DomainHistory](), error) GET/accounts/{account\_id}/intel/domain-history ##### ModelsExpand Collapse
type DomainHistory struct{…}
Categorizations \[]DomainHistoryCategorizationOptional
Categories \[]DomainHistoryCategorizationsCategoryOptional ID int64Optional Link to this property Name stringOptional Link to this property
Link to this property End TimeOptional formatdate Link to this property Start TimeOptional formatdate Link to this property
Link to this property Domain stringOptional Link to this property
[Link to this property](<#(resource)%20intel.domain_history%20%3E%20(model)%20domain_history%20%3E%20(schema)>) #### IntelIPs ##### [Get IP Overview](https://developers.cloudflare.com/api/go/resources/intel/subresources/ips/methods/get) client.Intel.IPs.Get(ctx, params) (\*\[] [IP](), error) GET/accounts/{account\_id}/intel/ip ##### ModelsExpand Collapse
type IP struct{…}
BelongsToRef IPBelongsToRefOptional Specifies a reference to the autonomous systems (AS) that the IP address belongs to. ID stringOptional Link to this property Country stringOptional Link to this property Description stringOptional Link to this property
Type IPBelongsToRefTypeOptional Infrastructure type of this ASN. One of the following: const IPBelongsToRefTypeHostingProvider IPBelongsToRefType = "hosting\_provider" Link to this property const IPBelongsToRefTypeISP IPBelongsToRefType = "isp" Link to this property const IPBelongsToRefTypeOrganization IPBelongsToRefType = "organization" Link to this property
Link to this property Value stringOptional Link to this property
Link to this property IP stringOptional formatipv4 Link to this property
RiskTypes \[]IPRiskTypeOptional ID float64Optional Link to this property Name stringOptional Link to this property SuperCategoryID float64Optional Link to this property
Link to this property
[Link to this property](<#(resource)%20intel.ips%20%3E%20(model)%20ip%20%3E%20(schema)>) #### IntelIP Lists ##### ModelsExpand Collapse
type IPList struct{…} ID int64Optional Link to this property Description stringOptional Link to this property Name stringOptional Link to this property
[Link to this property](<#(resource)%20intel.ip_lists%20%3E%20(model)%20ip_list%20%3E%20(schema)>) #### IntelMiscategorizations ##### [Create Miscategorization](https://developers.cloudflare.com/api/go/resources/intel/subresources/miscategorizations/methods/create) client.Intel.Miscategorizations.New(ctx, params) (\*[MiscategorizationNewResponse](), error) POST/accounts/{account\_id}/intel/miscategorization #### IntelWhois ##### [Get WHOIS Record](https://developers.cloudflare.com/api/go/resources/intel/subresources/whois/methods/get) client.Intel.Whois.Get(ctx, params) (\*[WhoisGetResponse](), error) GET/accounts/{account\_id}/intel/whois ##### ModelsExpand Collapse
type Whois struct{…} CreatedDate TimeOptional formatdate Link to this property Domain stringOptional Link to this property Nameservers \[]stringOptional Link to this property Registrant stringOptional Link to this property RegistrantCountry stringOptional Link to this property RegistrantEmail stringOptional Link to this property RegistrantOrg stringOptional Link to this property Registrar stringOptional Link to this property UpdatedDate TimeOptional formatdate Link to this property
[Link to this property](<#(resource)%20intel.whois%20%3E%20(model)%20whois%20%3E%20(schema)>) #### IntelURLs ##### [Get URL Intelligence](https://developers.cloudflare.com/api/go/resources/intel/subresources/urls/methods/get) client.Intel.URLs.Get(ctx, params) (\*[URL](), error) GET/accounts/{account\_id}/intel/url ##### ModelsExpand Collapse
type URL struct{…}
ContentCategories \[]URLContentCategory Content categories associated with this URL. ID int64Optional Link to this property Name stringOptional Link to this property SourceID int64Optional Link to this property SuperCategoryID int64Optional Link to this property
Link to this property FullURL string The full URL that was looked up. Link to this property Hostname string The hostname of the URL. Link to this property
RiskType \[]URLRiskType Security risk types associated with this URL. ID int64Optional Link to this property Name stringOptional Link to this property SourceID int64Optional Link to this property SuperCategoryID int64Optional Link to this property
Link to this property URLPath string The path component of the URL. Link to this property
[Link to this property](<#(resource)%20intel.urls%20%3E%20(model)%20url%20%3E%20(schema)>) #### IntelIndicator Feeds ##### [Get indicator feeds owned by this account](https://developers.cloudflare.com/api/go/resources/intel/subresources/indicator_feeds/methods/list) client.Intel.IndicatorFeeds.List(ctx, query) (\*SinglePage\[[IndicatorFeedListResponse]()], error) GET/accounts/{account\_id}/intel/indicator-feeds ##### [Get indicator feed metadata](https://developers.cloudflare.com/api/go/resources/intel/subresources/indicator_feeds/methods/get) client.Intel.IndicatorFeeds.Get(ctx, feedID, query) (\*[IndicatorFeedGetResponse](), error) GET/accounts/{account\_id}/intel/indicator-feeds/{feed\_id} ##### [Create new indicator feed](https://developers.cloudflare.com/api/go/resources/intel/subresources/indicator_feeds/methods/create) client.Intel.IndicatorFeeds.New(ctx, params) (\*[IndicatorFeedNewResponse](), error) POST/accounts/{account\_id}/intel/indicator-feeds ##### [Update indicator feed metadata](https://developers.cloudflare.com/api/go/resources/intel/subresources/indicator_feeds/methods/update) client.Intel.IndicatorFeeds.Update(ctx, feedID, params) (\*[IndicatorFeedUpdateResponse](), error) PUT/accounts/{account\_id}/intel/indicator-feeds/{feed\_id} ##### [Get indicator feed data](https://developers.cloudflare.com/api/go/resources/intel/subresources/indicator_feeds/methods/data) client.Intel.IndicatorFeeds.Data(ctx, feedID, query) (\*string, error) GET/accounts/{account\_id}/intel/indicator-feeds/{feed\_id}/data #### IntelIndicator FeedsSnapshots ##### [Update indicator feed data](https://developers.cloudflare.com/api/go/resources/intel/subresources/indicator_feeds/subresources/snapshots/methods/update) client.Intel.IndicatorFeeds.Snapshots.Update(ctx, feedID, params) (\*[IndicatorFeedSnapshotUpdateResponse](), error) PUT/accounts/{account\_id}/intel/indicator-feeds/{feed\_id}/snapshot #### IntelIndicator FeedsPermissions ##### [List indicator feed permissions](https://developers.cloudflare.com/api/go/resources/intel/subresources/indicator_feeds/subresources/permissions/methods/list) client.Intel.IndicatorFeeds.Permissions.List(ctx, query) (\*\[] [IndicatorFeedPermissionListResponse](), error) GET/accounts/{account\_id}/intel/indicator-feeds/permissions/view ##### [Grant permission to indicator feed](https://developers.cloudflare.com/api/go/resources/intel/subresources/indicator_feeds/subresources/permissions/methods/create) client.Intel.IndicatorFeeds.Permissions.New(ctx, params) (\*[IndicatorFeedPermissionNewResponse](), error) PUT/accounts/{account\_id}/intel/indicator-feeds/permissions/add ##### [Revoke permission to indicator feed](https://developers.cloudflare.com/api/go/resources/intel/subresources/indicator_feeds/subresources/permissions/methods/delete) client.Intel.IndicatorFeeds.Permissions.Delete(ctx, params) (\*[IndicatorFeedPermissionDeleteResponse](), error) PUT/accounts/{account\_id}/intel/indicator-feeds/permissions/remove #### IntelIndicator FeedsDownloads #### IntelSinkholes ##### [List sinkholes owned by this account](https://developers.cloudflare.com/api/go/resources/intel/subresources/sinkholes/methods/list) client.Intel.Sinkholes.List(ctx, query) (\*SinglePage\[[Sinkhole]()], error) GET/accounts/{account\_id}/intel/sinkholes ##### [Get a sinkhole](https://developers.cloudflare.com/api/go/resources/intel/subresources/sinkholes/methods/get) client.Intel.Sinkholes.Get(ctx, sinkholeID, query) (\*[Sinkhole](), error) GET/accounts/{account\_id}/intel/sinkholes/{sinkhole\_id} ##### [Create a new sinkhole for your account](https://developers.cloudflare.com/api/go/resources/intel/subresources/sinkholes/methods/create) client.Intel.Sinkholes.New(ctx, params) (\*[Sinkhole](), error) POST/accounts/{account\_id}/intel/sinkholes ##### [Update a sinkhole](https://developers.cloudflare.com/api/go/resources/intel/subresources/sinkholes/methods/update) client.Intel.Sinkholes.Update(ctx, sinkholeID, params) (\*[SinkholeUpdateResponse](), error) PUT/accounts/{account\_id}/intel/sinkholes/{sinkhole\_id} ##### [Delete a sinkhole](https://developers.cloudflare.com/api/go/resources/intel/subresources/sinkholes/methods/delete) client.Intel.Sinkholes.Delete(ctx, sinkholeID, body) (\*[SinkholeDeleteResponse](), error) DELETE/accounts/{account\_id}/intel/sinkholes/{sinkhole\_id} ##### ModelsExpand Collapse
type Sinkhole struct{…} ID stringOptional The unique identifier for the sinkhole. Link to this property AccountTag stringOptional The account tag that owns this sinkhole. Link to this property CreatedOn TimeOptional The date and time when the sinkhole was created. formatdate-time Link to this property ModifiedOn TimeOptional The date and time when the sinkhole was last modified. formatdate-time Link to this property Name stringOptional The name of the sinkhole. Link to this property R2Bucket stringOptional The name of the R2 bucket to store results. Link to this property R2ID stringOptional The id of the R2 instance. Link to this property
[Link to this property](<#(resource)%20intel.sinkholes%20%3E%20(model)%20sinkhole%20%3E%20(schema)>) #### IntelSinkholesIngresses ##### [Create an ingress rule](https://developers.cloudflare.com/api/go/resources/intel/subresources/sinkholes/subresources/ingresses/methods/create) client.Intel.Sinkholes.Ingresses.New(ctx, sinkholeID, params) (\*[SinkholeIngressNewResponse](), error) POST/zones/{zone\_id}/intel/sinkholes/{sinkhole\_id}/ingresses ##### [Get an ingress rule](https://developers.cloudflare.com/api/go/resources/intel/subresources/sinkholes/subresources/ingresses/methods/get) client.Intel.Sinkholes.Ingresses.Get(ctx, sinkholeID, ingressID, query) (\*[SinkholeIngressGetResponse](), error) GET/zones/{zone\_id}/intel/sinkholes/{sinkhole\_id}/ingresses/{ingress\_id} ##### [Update an ingress rule](https://developers.cloudflare.com/api/go/resources/intel/subresources/sinkholes/subresources/ingresses/methods/update) client.Intel.Sinkholes.Ingresses.Update(ctx, sinkholeID, ingressID, params) (\*[SinkholeIngressUpdateResponse](), error) PUT/zones/{zone\_id}/intel/sinkholes/{sinkhole\_id}/ingresses/{ingress\_id} ##### [Delete an ingress rule](https://developers.cloudflare.com/api/go/resources/intel/subresources/sinkholes/subresources/ingresses/methods/delete) client.Intel.Sinkholes.Ingresses.Delete(ctx, sinkholeID, ingressID, body) (\*[SinkholeIngressDeleteResponse](), error) DELETE/zones/{zone\_id}/intel/sinkholes/{sinkhole\_id}/ingresses/{ingress\_id} #### IntelAttack Surface Report #### IntelAttack Surface ReportIssue Types ##### [Retrieves Security Center Issues Types](https://developers.cloudflare.com/api/go/resources/intel/subresources/attack_surface_report/subresources/issue_types/methods/get) client.Intel.AttackSurfaceReport.IssueTypes.Get(ctx, query) (\*SinglePage\[string], error) GET/accounts/{account\_id}/intel/attack-surface-report/issue-types #### IntelAttack Surface ReportIssues ##### [Retrieves Security Center Issues](https://developers.cloudflare.com/api/go/resources/intel/subresources/attack_surface_report/subresources/issues/methods/list) Deprecated client.Intel.AttackSurfaceReport.Issues.List(ctx, params) (\*V4PagePagination\[[AttackSurfaceReportIssueListResponse]()], error) GET/accounts/{account\_id}/intel/attack-surface-report/issues ##### [Retrieves Security Center Issue Counts by Class](https://developers.cloudflare.com/api/go/resources/intel/subresources/attack_surface_report/subresources/issues/methods/class) Deprecated client.Intel.AttackSurfaceReport.Issues.Class(ctx, params) (\*\[] [AttackSurfaceReportIssueClassResponse](), error) GET/accounts/{account\_id}/intel/attack-surface-report/issues/class ##### [Retrieves Security Center Issue Counts by Severity](https://developers.cloudflare.com/api/go/resources/intel/subresources/attack_surface_report/subresources/issues/methods/severity) Deprecated client.Intel.AttackSurfaceReport.Issues.Severity(ctx, params) (\*\[] [AttackSurfaceReportIssueSeverityResponse](), error) GET/accounts/{account\_id}/intel/attack-surface-report/issues/severity ##### [Retrieves Security Center Issue Counts by Type](https://developers.cloudflare.com/api/go/resources/intel/subresources/attack_surface_report/subresources/issues/methods/type) Deprecated client.Intel.AttackSurfaceReport.Issues.Type(ctx, params) (\*\[] [AttackSurfaceReportIssueTypeResponse](), error) GET/accounts/{account\_id}/intel/attack-surface-report/issues/type ##### ModelsExpand Collapse
type IssueType string One of the following: const IssueTypeComplianceViolation IssueType = "compliance\_violation" Link to this property const IssueTypeEmailSecurity IssueType = "email\_security" Link to this property const IssueTypeExposedInfrastructure IssueType = "exposed\_infrastructure" Link to this property const IssueTypeInsecureConfiguration IssueType = "insecure\_configuration" Link to this property const IssueTypeWeakAuthentication IssueType = "weak\_authentication" Link to this property const IssueTypeConfigurationSuggestion IssueType = "configuration\_suggestion" Link to this property
[Link to this property](<#(resource)%20intel.attack_surface_report.issues%20%3E%20(model)%20issue_type%20%3E%20(schema)>)
type SeverityQueryParam string One of the following: const SeverityQueryParamLow SeverityQueryParam = "low" Link to this property const SeverityQueryParamModerate SeverityQueryParam = "moderate" Link to this property const SeverityQueryParamCritical SeverityQueryParam = "critical" Link to this property
[Link to this property](<#(resource)%20intel.attack_surface_report.issues%20%3E%20(model)%20severity_query_param%20%3E%20(schema)>)