Enricher - IPQualityScore Domain Lookup#

Note

This article describes how to configure a particular enrichment source. To see how to configure enrichers in general, see Configure enrichers.

	Specification
Enricher name	IPQualityScore Domain Lookup
Supported observable types	`domain`
Output	Enriches supported observable types to produce: Indicator Entity with related observables
API endpoint	`https://ipqualityscore.com/api/json/url`

Requirements#

IPQualityScore API Key.

Note

Required fields are marked with an asterisk (*).

Edit the enricher.
Set the Source reliability for this enricher. All objects produced by this enricher inherits this source reliability.

In the Parameters section, set the following fields:

Field name	Description
API URL*	Default: `https://ipqualityscore.com/api/json/url` Change this to match your IPQualityScore account’s API URL.
API Key*	Enter your API key.
Strictness Level	Set fraud detection sensitivity level (typically 0–2)
Fast Mode	Provide ‘true’ or ‘false’. The API will provide quicker response times using lighter checks and analysis when enabled.
SSL verification	Select to enforce SSL verification.
Path to SSL certificate file	Enter the path to a SSL certificate file located on the EclecticIQ Intelligence Center host filesystem. To use an SSL certificate, it must be: Accessible on the EclecticIQ Intelligence Center host. Placed in a location that can be accessed by the `eclecticiq` user. Owned by `eclecticiq:eclecticiq`. To make sure that EclecticIQ Intelligence Center can access the SSL certificate: Upload the SSL certificate to a location on the EclecticIQ Intelligence Center host. On the EclecticIQ Intelligence Center host, open the terminal. Change ownership of the SSL certificate by running as root in the terminal: chown eclecticiq:eclecticiq /path/to/cert.pem Where `/path/to/cert.pem` is the location of the SSL certificate EclecticIQ Intelligence Center needs to access.