Check Domain
check_domainDetermine if a domain appears on USOM's malicious-link list, including parent domain matches. Optionally enrich results with VirusTotal.
Instructions
Check whether a domain is listed by USOM, including when a parent domain is listed.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| domain | Yes | Domain such as login.example.com (IDN ok). | |
| enrich | No | Also query VirusTotal (needs VIRUSTOTAL_API_KEY). |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| kind | Yes | ||
| note | No | ||
| cache | Yes | ||
| error | No | ||
| input | Yes | ||
| stale | Yes | True when a refresh failed and cached data may be outdated; warn the user. | |
| source | No | T.C. Siber Güvenlik Başkanlığı / USOM (siberguvenlik.gov.tr) | |
| matches | No | ||
| verdict | Yes | ||
| warnings | No | ||
| enrichment | No | ||
| normalized | No | ||
| data_origin | Yes | ||
| enrichment_errors | No | ||
| timestamps_timezone | No | unspecified |