diff --git a/misp_modules/modules/expansion/onyphe_full.py b/misp_modules/modules/expansion/onyphe_full.py index a2876a1..f340f92 100644 --- a/misp_modules/modules/expansion/onyphe_full.py +++ b/misp_modules/modules/expansion/onyphe_full.py @@ -169,7 +169,7 @@ def expand_reverse(api, ip, misperror): status_ok = True for elem in results['results']: - domains_reverse.append(elem['forward']) + domains_reverse.append(elem['reverse']) domains.append(elem['domain']) r.append({'types': ['domain'],