Skip to main content

Alexa Rank Indicator v2

This Integration is part of the Alexa Rank Indicator Pack.#

Supported versions

Supported Cortex XSOAR versions: 5.5.0 and later.

Alexa provides website ranking information that can be used to help determine if a domain has a strong web presence. This integration was integrated and tested with Alexa Rank Indicator V2.

New: Alexa Rank Indicator v2#
  • Use of the Alexa API rank.
  • Domains that are not in the Alexa database, are considered "Unknown" instead of "Suspicious".
  • If the domain doesn't exist, there is an error.
  • Default values changed: 1000 for Top Domain Threshold and unspecified for Suspicous Domain Threshold.

Configure Alexa Rank Indicator V2 on Cortex XSOAR#

  1. Navigate to Settings > Integrations > Servers & Services.

  2. Search for Alexa Rank Indicator V2.

  3. Click Add instance to create and configure a new integration instance.

    ParameterDescriptionRequired
    Source ReliabilityReliability of the source providing the intelligence data.True
    Rank threshold for suspicious domainIf the domain's Alexa rank is over this threshold, the domain is marked as suspicious. If the rank is between the threshold for suspicious domains and top domains, the domain is marked as unknown.True
    Base API URLTrue
    Rank threshold for top domainsIf the domain's Alexa rank is under this threshold, the domain is considered trusted and marked as good. If the rank is between the threshold for suspicious domains and top domains, the domain is marked as unknown.True
    Use system proxy settingsFalse
    Trust any certificate (not secure)False
    API KeyTrue
  4. Click Test to validate the URLs, token, and connection.

Commands#

You can execute these commands from the Cortex XSOAR CLI, as part of an automation, or in a playbook. After you successfully execute a command, a DBot message appears in the War Room with the command details.

domain#


Provides the Alexa ranking of a domain.

Base Command#

domain

Input#

Argument NameDescriptionRequired
domainDomain(s) to search.Required

Context Output#

PathTypeDescription
Domain.NameStringThe domain being checked.
DBotScore.ScorenumberThe actual score.
DBotScore.VendorStringThe vendor used to calculate the score.
DBotScore.TypeStringThe indicator type.
DBotScore.IndicatorStringThe indicator that was tested.
Alexa.Domain.IndicatorStringThe domain being checked.
Alexa.Domain.NameStringThe domain being checked.
Alexa.Domain.RankStringAlexa rank as determined by Amazon.

Command Example#

#### Context Example
```json
{
"Alexa": {
"Domain": [
{
"Indicator": "google.com",
"Name": "google.com",
"Rank": "1"
},
{
"Indicator": "xsoar.com",
"Name": "xsoar.com",
"Rank": "Unknown"
}
]
},
"DBotScore": [
{
"Indicator": "google.com",
"Reliability": "A - Completely reliable",
"Score": 0,
"Type": "domain",
"Vendor": "Alexa Rank Indicator V2"
},
{
"Indicator": "xsoar.com",
"Reliability": "A - Completely reliable",
"Score": 2,
"Type": "domain",
"Vendor": "Alexa Rank Indicator V2"
}
],
"Domain": [
{
"Name": "google.com"
},
{
"Name": "xsoar.com"
}
]
}

Human Readable Output#

Alexa Rank for xsoar.com#

DomainAlexa RankReputation
xsoar.comSuspicous