What are the search parameters for Ads and Sponsored Search in Threat Hunting? | Axur

In this section, you will find the main search parameters for sponsored ads on Meta platforms, allowing the identification of campaigns, profiles, content, and formats used in suspicious placements, such as fraud and phishing.

🔍 Important tip: the searches in the Ads and Sponsored Search section are especially useful for investigating scams that use ads on platforms like Facebook and Instagram, such as fake promotions, fake profiles, or misleading content. Use combined filters to improve the accuracy of the results.

1. Ad Identification

Parameter	Description	Example
metaAdId	Unique Ad ID	`metaAdId="1234567890"`
adUrlFinal	Final Ad URL	`adUrlFinal="https://fakepromo.com"`
adLinkDescription	Link Text in the Ad	`adLinkDescription="Limited time"`
adText	Main Ad Text	`adText="Offer"`
adTitle	Ad Title	`adTitle="Desconto Imperdível"`

2. Advertiser Profile

Parameter	Description	Example
metaProfileName	Profile Name	`metaProfileName="Falsa Loja XYZ"`
metaProfileId	Profile ID	`metaProfileId="123450987654321"`
metaProfileWebsites	Website Linked to the Profile	`metaProfileWebsites="https://frauduloja.com"`
Status de verificação do perfil	Profile Verification Status	`metaProfileVerificationStatus="NOT_VERIFIED"`
adPageLikeCount	Number of Page Likes	`adPageLikeCount<100`

3. Placement Information

Parameter	Description	Example
adPublisherPlatform	Platform Where Published	`adPublisherPlatform="INSTAGRAM"`
adDisplayFormat	Display Format	`adDisplayFormat="VIDEO"`
adStartDate	Ad Start Date (YYYY-MM-DD)	`adStartDate=2025-06-01`
adEndDate	Ad End Date (YYYY-MM-DD)	`adEndDate=2025-06-30`
adTotalActiveTime	Total Placement Duration in Minutes	`adTotalActiveTime>43200`

4. Fraud Indicators

Parameter	Description	Example
impersonatedBrandsHigh	High Level of Brand Imitation	`impersonatedBrandsHigh="Magazine Z"`
impersonatedBrandsMedium	Medium Level of Brand Imitation	`impersonatedBrandsMedium="Loja XPTO"`
companyLogo	Company Logo Associated with the Ad	`companyLogo="MagazineZ.png"`
companiesMentioned	Companies Mentioned in the Ad	`companiesMentioned="Magazine Z"`
adDescription	Additional Content Description	`adDescription="promoção limitada"`
languages	Ad Language	`languages="pt"`
contentType	Content Type	`contentType="Financial Services", "Products (Retail)", "Professional & Personal Services", "Entertainment & Media", "Travel & Hospitality", "Automotive", "Real Estate & Housing", "Health & Wellness", "Education & Training", "Food & Beverage", "Fashion & Beauty", "Technology & Electronics", "Non-Profit & Charity", "Events & Promotions", "Sports & Fitness", "Political & Advocacy", "Employment & Careers"`
predominantColor	Predominant Color in Textual Format	`predominantColorHex="orange"`
predominantColorHex	Predominant Color in Hexadecimal Format	`predominantColorHex="#FE3131"`
predominantColorRGB	Predominant Color in RGB	`predominantColorRGB="[254, 49, 49]"`

5. Predefined Query Examples

You can use the examples below directly on the Threat Hunting platform, in the Ads and Sponsored Search tab:

impersonatedBrandsHigh="Magazine Z"

adUrlFinal="https://promo-falsa.com"

metaProfileVerificationStatus="NOT_VERIFIED"

predominantColorHex="#FE3131"

adPublisherPlatform="FACEBOOK"

contentType="Financial Services"

adText="Compre agora"

If you have any questions, feel free to reach out at [email protected] 😊

What are search parameters of Threat Hunting?

What are the credential search parameters of Threat Hunting?

What are the credit card search parameters of Threat Hunting?

What are the URL & Domains search parameters of Threat Hunting?

What are the search parameters for Social Media Profiles in Threat Hunting?