Actions13
Threat Intelligence — IOC Lookup
AI-generatedSummary
Queries RelayShield's live threat intelligence database (Telegram channels, ThreatFox, URLhaus) for indicators of compromise.
Inputs
- indicator (required) — The IOC value to look up — domain, IP, email, phone, or wallet address
- indicatorType (required) — Type of indicator being queried (domain, email, ip, phone, wallet)
Output shape
one item per input item with data containing the API response
The returned data structure depends on the specific IOC type and RelayShield's threat intelligence sources.
Examples
Example 1: Check if a specific domain is flagged in Telegram threat channels.
Indicator: 'malicious.com', Indicator Type: 'domain'
Example 2: Look up an IP address for known malicious activity.
Indicator: '192.0.2.1', Indicator Type: 'ip'