[Feature Request] - PulseDive Analyzer Enhancement - /api/explore.php

[jonathanbrooke]

Request
Please could you consider enhancing the PulseDive analyzer to support their "Explore" API.

• /api/explore.php
• https://pulsedive.com/api/explore
• It is similar to other analyzers (Shodan/Censys) in that it can use the PulseDive Query Language to return IOCs.
• It is simply a URI encoded version of the query from their website.

Example GET Request:

{
  "q": "ioc=pulsedive.com or threat=ryuk",
  "limit": "1",
  "pretty": "1",
  "key": "[API_KEY]"
}

Example Response

{
    "results": [
        {
            "iid": 53929,
            "indicator": "pulsedive.com",
            "type": "domain",
            "risk": "none",
            "stamp_added": "2017-10-04 01:20:55",
            "stamp_updated": "2025-02-17 17:00:56",
            "stamp_seen": "2025-02-17 17:00:56",
            "summary": {
                "properties": {
                    "http": {
                        "++content-type": "text\/html",
                        "++code": "200"
                    },
                    "geo": {
                        "countrycode": "US",
                        "city": "REDACTED FOR PRIVACY",
                        "region": "NJ",
                        "country": "United States of America"
                    },
                    "whois": {
                        "++gdpr": "1"
                    }
                }
            }
        }
    ],
    "query": "ioc=pulsedive.com or threat=ryuk"
}

Explore Query Language: https://pulsedive.com/explore/

They also have a "Scan" API which could be a good contender for a Mihari Enricher.
- /api/analyze.php
- https://pulsedive.com/api/scan

Thankyou

[ninoseki]

Please consider using Feed analyzer.