--- updatedAt: 2026-08-25T12:05:54.000Z agentTools: siteIndex: https://techdocs.akamai.com/llms.txt projectIndex: https://techdocs.akamai.com/etp-reporting/llms.txt --- # Get IOC domain tree report Lists the blocklisted domains and IPs matching a given record. Returns an empty list if no domains match. # OpenAPI definition ```json { "externalDocs": { "description": "See documentation for Akamai's Secure Internet Access Enterprise Reporting API", "url": "https://techdocs.akamai.com/etp-reporting/reference" }, "info": { "license": { "name": "Apache 2.0", "url": "https://www.apache.org/licenses/LICENSE-2.0.html" }, "title": "Indicators of Compromise (IOC) reports", "version": "v3" }, "openapi": "3.0.0", "paths": { "/ioc/domain-tree": { "get": { "description": "Lists the blocklisted domains and IPs matching a given record. Returns an empty list if no domains match.", "externalDocs": { "description": "See documentation for this operation in Akamai's Secure Internet Access Enterprise Reporting API", "url": "https://techdocs.akamai.com/etp-reporting/reference/get-ioc-domain-tree" }, "operationId": "get-ioc-domain-tree", "parameters": [ { "description": "__Enum__ Specifies the record type, either `DOMAIN` or `IP`.", "in": "query", "name": "recordType", "required": true, "schema": { "enum": [ "DOMAIN", "IP" ], "example": "DOMAIN", "type": "string" }, "x-akamai": { "file-path": "parameters/record-type-query.yaml" } }, { "description": "The target record from which to get blocklisted domains.", "in": "query", "name": "record", "required": true, "schema": { "example": "facebook.com", "type": "string" }, "x-akamai": { "file-path": "parameters/record-query.yaml" } }, { "description": "For customers who manage more than one account, this [runs the operation from another account](https://techdocs.akamai.com/developer/docs/manage-many-accounts-with-one-api-client). The Identity and Access Management API provides a [list of available account switch keys](https://techdocs.akamai.com/iam-api/reference/get-client-account-switch-keys).", "in": "query", "name": "accountSwitchKey", "required": false, "schema": { "example": "1-5C0YLB:1-8BYUX", "type": "string" } } ], "responses": { "200": { "content": { "application/json": { "example": [ { "aup": [ "facebook.com" ] }, { "avc": [ "facebook.com" ] }, { "blacklist": [ "facebook.com" ] }, { "cidr": [ "192.0.2.17" ] } ], "schema": { "description": "Contains IOC domain tree details.", "items": { "additionalProperties": false, "properties": { "aup": { "description": "Matching domains found in AUP categorization.", "items": { "minLength": 1, "type": "string" }, "minItems": 0, "type": "array" }, "avc": { "description": "Matching domains found in AVC categorization.", "items": { "minLength": 1, "type": "string" }, "minItems": 0, "type": "array" }, "blacklist": { "description": "Matching domains found in Akamai blocklist.", "items": { "minLength": 1, "type": "string" }, "minItems": 0, "type": "array" }, "cidr": { "description": "Matching CIDRs found in Akamai discovered CIDR blocks.", "items": { "minLength": 1, "type": "string" }, "minItems": 0, "type": "array" }, "whois": { "description": "Matching domains in Akamai discovered whois servers.", "items": { "minLength": 1, "type": "string" }, "minItems": 0, "type": "array" } }, "type": "object" }, "type": "array", "x-akamai": { "file-path": "schemas/ioc-domain-tree.yaml" } } } }, "description": "Successful response." }, "400": { "content": { "application/problem+json": { "examples": { "invalid-format": { "summary": "Invalid request format", "value": { "detail": "The system cannot understand your request. Please check the syntax and correct any problems.", "instance": "1e4c346b-3a36-4527-9c37-86ae748b87c5", "status": 400, "title": "Bad Request", "type": "https://problems.omni.akamaiapis.net/http/bad-request" } }, "invalid-start-time": { "summary": "Invalid startTime", "value": { "detail": "Start time is invalid. Code-000104", "instance": "0415df5e-6e9c-4596-bdd3-9ada53b63599", "status": 400, "title": "Bad Request", "type": "https://problems.omni.akamaiapis.net/http/bad-request" } } }, "schema": { "additionalProperties": true, "description": "A common [RFC 9457](https://www.rfc-editor.org/rfc/rfc9457) Problem Response error.", "properties": { "detail": { "description": "A human-readable explanation specific to the problem.", "minLength": 1, "type": "string" }, "errors": { "description": "A list of HTTP problem details. The error response includes this list if there are several problems with a single request, to call out each of them separately.", "items": { "description": "A nested problem response error object.", "type": "object", "x-akamai": { "file-path": "schemas/http-problem-nested.yaml" } }, "minItems": 0, "type": "array" }, "instance": { "description": "The URI for this error occurrence.", "type": "string" }, "status": { "description": "The HTTP status code generated by the origin server.", "minimum": 0, "type": "integer" }, "title": { "description": "A short, human-readable summary of the problem type.", "minLength": 1, "type": "string" }, "type": { "description": "A URI that identifies the problem type.", "minLength": 1, "type": "string" } }, "required": [ "type", "title", "detail", "instance", "status" ], "type": "object", "x-akamai": { "file-path": "schemas/http-problem.yaml" } } } }, "description": "[Bad Request](https://techdocs.akamai.com/etp-reporting/reference/400).", "x-akamai": { "file-path": "errors/400.yaml" } }, "403": { "content": { "application/problem+json": { "example": { "detail": "Insufficient permissions. Code-01", "instance": "3e3f11da-e205-409a-be77-24e459f29fa8", "status": 403, "title": "Forbidden", "type": "https://problems.omni.akamaiapis.net/http/forbidden" }, "schema": { "additionalProperties": true, "description": "A common [RFC 9457](https://www.rfc-editor.org/rfc/rfc9457) Problem Response error.", "properties": { "detail": { "description": "A human-readable explanation specific to the problem.", "minLength": 1, "type": "string" }, "errors": { "description": "A list of HTTP problem details. The error response includes this list if there are several problems with a single request, to call out each of them separately.", "items": { "description": "A nested problem response error object.", "type": "object", "x-akamai": { "file-path": "schemas/http-problem-nested.yaml" } }, "minItems": 0, "type": "array" }, "instance": { "description": "The URI for this error occurrence.", "type": "string" }, "status": { "description": "The HTTP status code generated by the origin server.", "minimum": 0, "type": "integer" }, "title": { "description": "A short, human-readable summary of the problem type.", "minLength": 1, "type": "string" }, "type": { "description": "A URI that identifies the problem type.", "minLength": 1, "type": "string" } }, "required": [ "type", "title", "detail", "instance", "status" ], "type": "object", "x-akamai": { "file-path": "schemas/http-problem.yaml" } } } }, "description": "[Access forbidden](https://techdocs.akamai.com/etp-reporting/reference/403).", "x-akamai": { "file-path": "errors/insufficient-permissions-403.yaml" } } }, "summary": "Get IOC domain tree report", "tags": [ "IOC reports" ] }, "x-akamai": { "file-path": "paths/domain-tree.yaml", "path-info": "/ioc/domain-tree" } } }, "servers": [ { "url": "https://{hostname}/etp-report/v3" } ], "tags": [ { "description": "Generate reports for Indicators of Compromise (IOC) records. IOCs are artifacts observed on a network or in an operating system that indicate a computer intrusion with high confidence.", "name": "IOC reports" } ], "x-akamai": { "auth-type": "EDGE_GRID", "file-path": "08-ioc.yaml" }, "x-readme": { "explorer-enabled": false, "samples-languages": [ "curl", "python", "node" ] } } ``` # Sibling pages * [Get IOC time series report](https://techdocs.akamai.com/etp-reporting/reference/get-time-series.md) * [Get IOC change report](https://techdocs.akamai.com/etp-reporting/reference/get-ioc-changes.md) * [Get IOC AVC details report](https://techdocs.akamai.com/etp-reporting/reference/get-ioc-details-avc.md) * [Get IOC CIDR details report](https://techdocs.akamai.com/etp-reporting/reference/get-ioc-details-cidr.md) * [Get IOC domain tree report](https://techdocs.akamai.com/etp-reporting/reference/get-ioc-domain-tree.md) * [Get IOC time series report](https://techdocs.akamai.com/etp-reporting/reference/get-time-series-1.md) * [Get IOC change report](https://techdocs.akamai.com/etp-reporting/reference/get-ioc-changes-1.md) * [Get IOC AVC details report](https://techdocs.akamai.com/etp-reporting/reference/get-ioc-details-avc-1.md) * [Get IOC CIDR details report](https://techdocs.akamai.com/etp-reporting/reference/get-ioc-details-cidr-1.md)