Intelligence API

Data freshness is governed by the user role and delay attached. Refer to Roles and data delays for more information.

Authentication

Check the authentication page to see the available options.

Access and authentication

PreCrime Intelligence Feed

Intelligence feed endpoint

get

Returns a list of indicators between since and until and between min_score and max_score.

Authorizations

OAuth2PasswordBearerApiKey

OAuth2passwordRequired

Token URL:

cookie

company_idany ofOptional

integerOptional

or

nullOptional

Query parameters

sincestring · date-timeOptional

untilany ofOptional

string · date-timeOptional

or

nullOptional

min_scorenumber · max: 1OptionalDefault: 0

max_scorenumber · max: 1OptionalDefault: 1

orderstring · enumOptionalDefault: ascendingPossible values:

urlany ofOptional

stringOptional

or

nullOptional

pageinteger · min: 1Optional

Page number

Default: 1

sizeinteger · min: 1 · max: 1000OptionalDefault: 1000

Responses

200

Successful Response

application/json

totalany ofRequired

integerOptional

or

nullOptional

pageany ofRequired

integer · min: 1Optional

or

nullOptional

sizeany ofRequired

integer · min: 1Optional

or

nullOptional

pagesany ofOptional

integerOptional

or

nullOptional

422

Validation Error

application/json

get

/v2/feed/intel

HTTPcURLJavaScriptPython

GET /v2/feed/intel HTTP/1.1
Authorization: Bearer YOUR_OAUTH2_TOKEN
Accept: */*

{
  "items": [
    {
      "name": "text",
      "score": 1,
      "created": "2026-03-28T10:22:01.913Z",
      "updated": "2026-03-28T10:22:01.913Z",
      "type": "domain",
      "id": 1
    }
  ],
  "total": 1,
  "page": 1,
  "size": 1,
  "pages": 1
}

Deprecated version

The following endpoint is deprecated and will be discontinued in July 2026. Please avoid using it for any new implementations. The documentation below is retained for reference purposes.

Get domain list

get

Returns the list of domains processed from a specific start time, limited by record count and score.

Use this endpoint to retrieve domains that have been analyzed by the PreCrime Intelligence engine within a specified timeframe and matching minimum score criteria.

Authorizations

BearerAuth

AuthorizationstringRequired

JWT token obtained from /user/login endpoint

Query parameters

sstringRequired

Start date, either ISO 8601 format or Unix timestamp

Example: 2024-04-13T01:00:00

estringRequired

End date, either ISO 8601 format or Unix timestamp. Limited to 24 hours after the start date

Example: 2024-04-14T01:00:00

cinteger · min: 1 · max: 10000Optional

Maximum records returned

Example: 2

dnumber · float · max: 1Optional

Minimum score threshold (0.0-1.0)

Example: 0.8

Responses

200

List of domains matching the criteria

application/json

Idinteger · int64Optional

Unique domain identifier

Example: 246884482

NamestringOptional

Domain name

Example: spreekwijzen.nl

DomainCreatedstring · date-timeOptional

Date and time when the domain was first processed

Example: 2024-04-13T01:13:26

ScoreCreatedstring · date-timeOptional

Date and time when the score was assigned

Example: 2024-04-15T02:38:29

Scorenumber · float · max: 1Optional

Confidence level that the domain is controlled by malicious actors (0.0-1.0).

Score Categories:

• 0-0.49: Safe domains
• 0.5: Monitored domains
• 0.51-0.79: Suspicious domains

• = 0.8: Malicious domains (recommended for blocking)

Special Scores:

• 0.12345600128173828: False Positive
• 0.9876539707183838: PreCrime Active Defense (Known malicious threat against monitored brands)

Example: 1

400

Bad request - Invalid parameters

application/json

401

Unauthorized - Invalid or missing authentication token

application/json

get

/domain/list

HTTPcURLJavaScriptPython

GET /domain/list?s=text&e=text HTTP/1.1
Host: api.bfore.ai
Authorization: Bearer YOUR_SECRET_TOKEN
Accept: */*

[
  {
    "Id": 246884482,
    "Name": "spreekwijzen.nl",
    "DomainCreated": "2024-04-13T01:13:26",
    "ScoreCreated": "2024-04-15T02:38:29",
    "Score": 1
  },
  {
    "Id": 246884422,
    "Name": "hablasv.com",
    "DomainCreated": "2024-04-13T01:13:26",
    "ScoreCreated": "2024-04-13T01:13:26",
    "Score": 1
  }
]