Comments

Comments posted by the community in files, URLs, IP addresses, domains and graphs.

The community can add information to an object's report by adding a comment.

Object Attributes

A comment contains the following attributes:

  • date: <integer> comment post date in UTC timestamp format.
  • html: <string> comment's raw html text.
  • tags: <list of strings> comment tags (placed in the comment text using #).
  • text: <string> comment text.
  • votes: <dictionary> number of votes per category (abuse, negative, positive).
    • abuse: <integer> number of abuse votes.
    • negative: <integer> number of negative votes.
    • positive: <integer> number of positive votes.
{
    "data": {
        "attributes": {
            "date": <int:timestamp>,
            "html": "<string>",
            "tags": ["<strings>",...],
            "text": "<string>",
            "votes": {
                "abuse": <int>,
                "negative": <int>,
                "positive": <int>
            }
        },
        "id": "<id>",
        "links": {
            "self": "https://www.virustotal.com/api/v3/comments/<id>"
        },
        "type": "comment"
    }
}
{
    "data": {
        "attributes": {
            "date": 1553751231,
            "html": "#safe",
            "tags": [
                "_:web",
                "_:public",
                "safe"
            ],
            "text": "#safe",
            "votes": {
                "abuse": 0,
                "negative": 0,
                "positive": 0
            }
        },
        "id": "d-foo.com-e015179f",
        "links": {
            "self": "https://www.virustotal.com/api/v3/comments/d-foo.com-e015179f"
        },
        "type": "comment"
    }
}

Relationships

In addition to the previously described attributes, Comment objects contain relationships with other objects in our dataset that can be retrieved as explained in the Relationships section.

The following table shows a summary of available relationships for comment objects.

Relationship

Description

Accessibility

Return object type

author

Comment author.

Everyone.

A single User

item

Item where the comment was posted.

Everyone.

A single Domain, File, Graph, IP address or URL.

These relationships are detailed in the subsections below.