How to use the SQL API

SELECT attribute FROM table WHERE condition = "value"

SELECT domain.hostname FROM hosts WHERE domain.apex = "google.com"

SELECT 
  domain.hostname, 
  dns.a.value.ip
FROM
  hosts
WHERE
  domain.apex = 'google.com'
AND
  dns.a.value.ip IS NOT Null

SELECT
  isp.name,
  asn.owner,
  asn.number,
  address
FROM
  ips
WHERE
  ports.port IN ('5060', '5051')
 AND 
  geo.owner.country_iso_code = 'US'

{ "query": "SQL Query"}

{ "query": "SELECT domain.hostname FROM hosts WHERE tags.title IN ('cPanel/WHM Software')" }

{
  "query":"SELECT domain.hostname FROM hosts WHERE tags.title IN ('cPanel/WHM Software')",
  "id":"bc01cf0b6744bdbaee51df5190284f6d",
  "total": {
            "value": "1500", 
            "relation": "lte"
  }, 
  "records":[
              { 
               "domain":
                 {
                  "hostname": "gmpg.org"
                 },
                 {
                  "hostname": "reacts.ru"
                 },
                 {
                  "hostname": "caniuse.com"
                 },
                 {...}
              }
   ]
}

{ 
  "query": Executed SQL query,
  "id": ID to query the scrolling URL,
  "total": {
            "value": aproximate_count_of_results, 
            "relation": eq | lte | gte
  },          
  "records": [ array_with_results ]
}

{
  "query":"SELECT domain.hostname FROM hosts WHERE tags.title IN ('cPanel/WHM Software')",
  "id": bc01cf0b6744bdbaee51df5190284f6d
  [...]
}

curl --request GET \
  --url 'https://api.securitytrails.com/v1/query/scroll/bc01cf0b6744bdbaee51df5190284f6d' \
  --header 'apikey: YOUR_API_KEY'

curl --request POST \
  --url 'https://api.securitytrails.com/v1/query/scroll' \
  --header 'apikey: YOUR_API_KEY' \
  --header 'Content-Type: application/json' \
  --data '{"query":"SELECT domain.hostname, dns.a.value.ip, ip.asn.owner FROM hosts WHERE domain.apex = \"google.com\""}'

import requests

url = "https://api.securitytrails.com/v1/query/scroll"

querystring = { "page": "1" }
sql_query = "SELECT domain.hostname, dns.a.value.ip, ip.asn.owner FROM hosts WHERE domain.apex = \"google.com\""
payload = { "query": sql_query}

headers = {
    "Content-Type": "application/json",
    "APIKEY": "YOUR_API_KEY"
}

response = requests.request("POST", url, json=payload, headers=headers, params=querystring)

print(response.text)

OkHttpClient client = new OkHttpClient();
MediaType mediaType = MediaType.parse("application/json");

RequestBody body = RequestBody.create(mediaType, "{\"query\":\"SELECT domain.hostname, dns.a.value.ip, ip.asn.owner FROM hosts WHERE domain.apex = \\\"google.com\\\"\"}");
Request request = new Request.Builder()
  .url("https://api.securitytrails.com/v1/query/scroll")
  .post(body)
  .addHeader("Content-Type", "application/json")
  .addHeader("APIKEY", "YOUR_API_KEY")
  .build();

Response response = client.newCall(request).execute();

<?php

$curl = curl_init();
curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.securitytrails.com/v1/prototype/dslv2?page=1",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => "{\"query\":\"SELECT domain.hostname, dns.a.value.ip, ip.asn.owner FROM hosts WHERE domain.apex = \\\"google.com\\\"\"}",
  CURLOPT_HTTPHEADER => [
    "APIKEY: YOUR_API_KEY",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

?>

package main

import (
    "fmt"
    "strings"
    "net/http"
    "io/ioutil"
)

func main() {

    url := "https://api.securitytrails.com/v1/query/scroll"
    payload := strings.NewReader("{\"query\":\"SELECT domain.hostname, dns.a.value.ip, ip.asn.owner FROM hosts WHERE domain.apex = \\\"google.com\\\"\"}")
    req, _ := http.NewRequest("POST", url, payload)

    req.Header.Add("Content-Type", "application/json")
    req.Header.Add("APIKEY", "YOUR_API_KEY")

    res, _ := http.DefaultClient.Do(req)
    defer res.Body.Close()

    body, _ := ioutil.ReadAll(res.Body)

    fmt.Println(res)
    fmt.Println(string(body))

}

require 'uri'
require 'net/http'
require 'openssl'

url = URI("https://api.securitytrails.com/v1/query/scroll")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
http.verify_mode = OpenSSL::SSL::VERIFY_NONE

request = Net::HTTP::Post.new(url)
request["Content-Type"] = 'application/json'
request["APIKEY"] = 'YOUR_API_KEY'

request.body = "{\"query\":\"SELECT domain.hostname, dns.a.value.ip, ip.asn.owner FROM hosts WHERE domain.apex = \\\"google.com\\\"\"}"
response = http.request(request)

puts response.read_body

const fetch = require('node-fetch');

let url = 'https://api.securitytrails.com/v1/query/scroll';

let options = {
  method: 'POST',
  qs: {include_ips: 'false', page: '1', scroll: 'false'},
  headers: {'Content-Type': 'application/json', APIKEY: 'YOUR_API_KEY'},
  body: JSON.stringify({query: 'SELECT domain.hostname, dns.a.value.ip, ip.asn.owner FROM hosts WHERE domain.apex = "google.com"'})
};

fetch(url, options)
  .then(res => res.json())
  .then(json => console.log(json))
  .catch(err => console.error('error:' + err));

fetch("https://api.securitytrails.com/v1/query/scroll", {
  "method": "POST",
  "headers": {
    "Content-Type": "application/json",
    "APIKEY": "YOUR_API_KEY"
  },
  "body": "{\"query\":\"SELECT domain.hostname, dns.a.value.ip, ip.asn.owner FROM hosts WHERE domain.apex = \\\"gogole.com\\\"\"}"
})

.then(response => {
  console.log(response);
})

.catch(err => {
  console.error(err);
});