DomainTools Iris Investigate
Map connected infrastructure to get ahead of threats. The Iris Investigate delivers dozens of domain name attributes on every result including Risk Score, DNS, Whois, SSL, and more. It enables easy pivoting through different domain name attributes and exposes meaningful insights with connection counts on most data fields. It is best suited for human-scale interactions.
This connector is available in the following products and regions:
| Service | Class | Regions |
|---|---|---|
| Logic Apps | Standard | All Logic Apps regions except the following: - Azure Government regions - Azure China regions - US Department of Defense (DoD) |
| Power Automate | Premium | All Power Automate regions except the following: - US Government (GCC) - US Government (GCC High) - China Cloud operated by 21Vianet - US Department of Defense (DoD) |
| Power Apps | Premium | All Power Apps regions except the following: - US Government (GCC) - US Government (GCC High) - China Cloud operated by 21Vianet - US Department of Defense (DoD) |
| Contact | |
|---|---|
| Name | DomainTools Integrations |
| URL | https://www.domaintools.com/integrations |
| enterprisesupport@domaintools.com |
| Connector Metadata | |
|---|---|
| Publisher | DomainTools, LLC |
| Website | http://www.domaintools.com/ |
| Privacy policy | https://www.domaintools.com/company/privacy-policy/ |
| Categories | Security;Website |
Pre-requisites
You will need the following to proceed:
- A Microsoft Power Apps or Power Automate plan with custom connector feature
- An Azure subscription
- DomainTools API Username
- DomainTools API Key
Support and documentation:
For all the support requests and general queries you can contact enterprisesupport@domaintools.com or contact us
Creating a connection
The connector supports the following authentication types:
| Default | Parameters for creating connection. | All regions | Not shareable |
Default
Applicable: All regions
Parameters for creating connection.
This is not shareable connection. If the power app is shared with another user, another user will be prompted to create new connection explicitly.
| Name | Type | Description | Required |
|---|---|---|---|
| API username | securestring | The API username for this api | True |
| API key | securestring | The API key for this api | True |
Throttling Limits
| Name | Calls | Renewal Period |
|---|---|---|
| API calls per connection | 100 | 60 seconds |
Actions
| Investigate Domain |
Retrieves the infrastructure and whois data associated with a domain or comma-separated list of up to 100 domains. |
| Pivot by MX IP |
Returns up to 500 domains served by a given mail server IP. Use the optional 'active' and 'date updated after' parameters to pre-filter the result set. |
| Pivot by Nameserver IP Address |
Returns up to 500 domains served by a provided nameserver IP. Use the optional 'active' and 'date updated after' parameters to pre-filter the result set. |
| Pivot by Registrant Name |
Returns up to 500 domains exactly matching the provided Whois registrant field. Use the optional 'active' and 'date updated after' parameters to pre-filter the result set. |
| Pivot by Registrant Organization |
Returns up to 500 domains exactly matching the provided Whois registrant organization field. Use the optional 'active' and 'date updated after' parameters to pre-filter the result set. |
| Pivot by SSL Hash |
Returns up to 500 domains with a SSL certificate matching a provided SHA-1 hash. Use the optional 'active' and 'date updated after' parameters to pre-filter the result set. |
| Pivot MX Host |
Returns up to 500 domains with a mail server on a provided domain name. Use the optional 'active' and 'date updated after' parameters to pre-filter the result set. |
| Pivot Nameserver Host |
Returns up to 500 domains served by a provided nameserver host. Use the optional 'active' and 'date updated after' parameters to pre-filter the result set. |
| Pivot SSL Email |
Returns up to 500 domains with a given email address on the SSL certificate. Use the optional 'active' and 'date updated after' parameters to pre-filter the result set. |
| Retrieve Account Information |
Information of the active API endpoints, rate limits and usage for an account. |
| Return Domains from Search Hash |
Import up to 500 domains from Iris Investigate into the Sentinel platform. Export your investigation by search hash (Iris Investigate -> Search -> Export). Use the optional 'active' and 'date updated after' parameters to pre-filter the result set. |
| Return Tagged With All |
Retrieve up to 500 domains tagged within the Iris Investigate UI. Given a comma-separated list of tags, returns domains that are tagged with ALL of the tags. Use the optional 'active' and 'date updated after' parameters to pre-filter the result set. |
| Return Tagged With Any |
Retrieve up to 500 domains tagged within the Iris Investigate UI. Given a comma-separated list of tags, returns domains that are tagged with ANY of the tags. Use the optional 'active' and 'date updated after' parameters to pre-filter the result set. |
| Reverse Email |
Returns up to 500 domains with an email address on the most recently available Whois record, DNS SOA record or SSL certificate. Use the optional 'active' and 'date updated after' parameters to pre-filter the result set. |
| Reverse Email Domain |
Returns up to 500 domains with the domain portion of an email address on the most recently available Whois or DNS SOA record. Use the optional 'active' and 'date updated after' parameters to pre-filter the result set. |
| Reverse IP |
Returns up to 500 domains that last resolved to a given IPv4 address an active DNS check. Use the optional 'active' and 'date updated after' parameters to pre-filter the result set. |
Investigate Domain
Retrieves the infrastructure and whois data associated with a domain or comma-separated list of up to 100 domains.
Parameters
| Name | Key | Required | Type | Description |
|---|---|---|---|---|
|
Domain Name
|
domain | True | string |
Domain (e.g. name.tld) to be investigated or comma-separated list of domains. |
|
Active
|
active | boolean |
Optionally set to 'true' to only return domains that have either an entry in the global DNS system, OR are listed as registered by the registry. Set to 'false' to only return domains that do not have an entry in the global DNS system AND are not listed as registered by the registry. |
|
|
Create Date(YYYY-MM-DD)
|
create_date | string |
Optionally only include domains created on a specific date(YYYY-MM-DD) |
|
|
Expiration Date(YYYY-MM-DD)
|
expiration_date | string |
Optionally only include domains expiring on a specific date(YYYY-MM-DD) |
Returns
- Body
- Investigate_Response
Pivot by MX IP
Returns up to 500 domains served by a given mail server IP. Use the optional 'active' and 'date updated after' parameters to pre-filter the result set.
Parameters
| Name | Key | Required | Type | Description |
|---|---|---|---|---|
|
Mailserver IP
|
mailserver_ip | True | string |
IP address of the mail server. |
|
Active
|
active | boolean |
Optionally set to 'true' to only return domains that have either an entry in the global DNS system, OR are listed as registered by the registry. Set to 'false' to only return domains that do not have an entry in the global DNS system AND are not listed as registered by the registry. |
|
|
Create Date(YYYY-MM-DD)
|
create_date | string |
Optionally only include domains created on a specific date(YYYY-MM-DD) |
|
|
Expiration Date(YYYY-MM-DD)
|
expiration_date | string |
Optionally only include domains expiring on a specific date(YYYY-MM-DD) |
Returns
- Body
- Investigate_Response
Pivot by Nameserver IP Address
Returns up to 500 domains served by a provided nameserver IP. Use the optional 'active' and 'date updated after' parameters to pre-filter the result set.
Parameters
| Name | Key | Required | Type | Description |
|---|---|---|---|---|
|
Nameserver IP
|
nameserver_ip | True | string |
IP address of the name server. |
|
Active
|
active | boolean |
Optionally set to 'true' to only return domains that have either an entry in the global DNS system, OR are listed as registered by the registry. Set to 'false' to only return domains that do not have an entry in the global DNS system AND are not listed as registered by the registry. |
|
|
Create Date(YYYY-MM-DD)
|
create_date | string |
Optionally only include domains created on a specific date(YYYY-MM-DD) |
|
|
Expiration Date(YYYY-MM-DD)
|
expiration_date | string |
Optionally only include domains expiring on a specific date(YYYY-MM-DD) |
Returns
- Body
- Investigate_Response
Pivot by Registrant Name
Returns up to 500 domains exactly matching the provided Whois registrant field. Use the optional 'active' and 'date updated after' parameters to pre-filter the result set.
Parameters
| Name | Key | Required | Type | Description |
|---|---|---|---|---|
|
Registrant Name
|
registrant | True | string |
Exact match to the Whois registrant field. |
|
Active
|
active | boolean |
Optionally set to 'true' to only return domains that have either an entry in the global DNS system, OR are listed as registered by the registry. Set to 'false' to only return domains that do not have an entry in the global DNS system AND are not listed as registered by the registry. |
|
|
Create Date(YYYY-MM-DD)
|
create_date | string |
Optionally only include domains created on a specific date(YYYY-MM-DD) |
|
|
Expiration Date(YYYY-MM-DD)
|
expiration_date | string |
Optionally only include domains expiring on a specific date(YYYY-MM-DD) |
Returns
- Body
- Investigate_Response
Pivot by Registrant Organization
Returns up to 500 domains exactly matching the provided Whois registrant organization field. Use the optional 'active' and 'date updated after' parameters to pre-filter the result set.
Parameters
| Name | Key | Required | Type | Description |
|---|---|---|---|---|
|
Registrant Organization
|
registrant_org | True | string |
Exact match to the Whois registrant organization field. |
|
Active
|
active | boolean |
Optionally set to 'true' to only return domains that have either an entry in the global DNS system, OR are listed as registered by the registry. Set to 'false' to only return domains that do not have an entry in the global DNS system AND are not listed as registered by the registry. |
|
|
Create Date(YYYY-MM-DD)
|
create_date | string |
Optionally only include domains created on a specific date(YYYY-MM-DD) |
|
|
Expiration Date(YYYY-MM-DD)
|
expiration_date | string |
Optionally only include domains expiring on a specific date(YYYY-MM-DD) |
Returns
- Body
- Investigate_Response
Pivot by SSL Hash
Returns up to 500 domains with a SSL certificate matching a provided SHA-1 hash. Use the optional 'active' and 'date updated after' parameters to pre-filter the result set.
Parameters
| Name | Key | Required | Type | Description |
|---|---|---|---|---|
|
SSL Hash
|
ssl_hash | True | string |
SSL certificate SHA-1 hash. |
|
Active
|
active | boolean |
Optionally set to 'true' to only return domains that have either an entry in the global DNS system, OR are listed as registered by the registry. Set to 'false' to only return domains that do not have an entry in the global DNS system AND are not listed as registered by the registry. |
|
|
Create Date(YYYY-MM-DD)
|
create_date | string |
Optionally only include domains created on a specific date(YYYY-MM-DD) |
|
|
Expiration Date(YYYY-MM-DD)
|
expiration_date | string |
Optionally only include domains expiring on a specific date(YYYY-MM-DD) |
Returns
- Body
- Investigate_Response
Pivot MX Host
Returns up to 500 domains with a mail server on a provided domain name. Use the optional 'active' and 'date updated after' parameters to pre-filter the result set.
Parameters
| Name | Key | Required | Type | Description |
|---|---|---|---|---|
|
Mailserver Host
|
mailserver_host | True | string |
Only the registered domain portion of the mail server (e.g. domain.com). |
|
Active
|
active | boolean |
Optionally set to 'true' to only return domains that have either an entry in the global DNS system, OR are listed as registered by the registry. Set to 'false' to only return domains that do not have an entry in the global DNS system AND are not listed as registered by the registry. |
|
|
Create Date(YYYY-MM-DD)
|
create_date | string |
Optionally only include domains created on a specific date(YYYY-MM-DD) |
|
|
Expiration Date(YYYY-MM-DD)
|
expiration_date | string |
Optionally only include domains expiring on a specific date(YYYY-MM-DD) |
Returns
- Body
- Investigate_Response
Pivot Nameserver Host
Returns up to 500 domains served by a provided nameserver host. Use the optional 'active' and 'date updated after' parameters to pre-filter the result set.
Parameters
| Name | Key | Required | Type | Description |
|---|---|---|---|---|
|
Nameserver Host
|
nameserver_host | True | string |
Registered domain portion of the name server. |
|
Active
|
active | boolean |
Optionally set to 'true' to only return domains that have either an entry in the global DNS system, OR are listed as registered by the registry. Set to 'false' to only return domains that do not have an entry in the global DNS system AND are not listed as registered by the registry. |
|
|
Create Date(YYYY-MM-DD)
|
create_date | string |
Optionally only include domains created on a specific date(YYYY-MM-DD) |
|
|
Expiration Date(YYYY-MM-DD)
|
expiration_date | string |
Optionally only include domains expiring on a specific date(YYYY-MM-DD) |
Returns
- Body
- Investigate_Response
Pivot SSL Email
Returns up to 500 domains with a given email address on the SSL certificate. Use the optional 'active' and 'date updated after' parameters to pre-filter the result set.
Parameters
| Name | Key | Required | Type | Description |
|---|---|---|---|---|
|
SSL Email
|
ssl_email | True | string |
Email address from the SSL certificate. |
|
Active
|
active | boolean |
Optionally set to 'true' to only return domains that have either an entry in the global DNS system, OR are listed as registered by the registry. Set to 'false' to only return domains that do not have an entry in the global DNS system AND are not listed as registered by the registry. |
|
|
Create Date(YYYY-MM-DD)
|
create_date | string |
Optionally only include domains created on a specific date(YYYY-MM-DD) |
|
|
Expiration Date(YYYY-MM-DD)
|
expiration_date | string |
Optionally only include domains expiring on a specific date(YYYY-MM-DD) |
Returns
- Body
- Investigate_Response
Retrieve Account Information
Information of the active API endpoints, rate limits and usage for an account.
Returns
Acoount Information Response
- Body
- Account_Response
Return Domains from Search Hash
Import up to 500 domains from Iris Investigate into the Sentinel platform. Export your investigation by search hash (Iris Investigate -> Search -> Export). Use the optional 'active' and 'date updated after' parameters to pre-filter the result set.
Parameters
| Name | Key | Required | Type | Description |
|---|---|---|---|---|
|
Search Hash
|
search_hash | True | string |
Encoded search hash from the Iris Investigate UI (Iris Investigate -> Search -> Export). |
|
Active
|
active | boolean |
Optionally set to 'true' to only return domains that have either an entry in the global DNS system, OR are listed as registered by the registry. Set to 'false' to only return domains that do not have an entry in the global DNS system AND are not listed as registered by the registry. |
|
|
Create Date(YYYY-MM-DD)
|
create_date | string |
Optionally only include domains created on a specific date(YYYY-MM-DD) |
|
|
Expiration Date(YYYY-MM-DD)
|
expiration_date | string |
Optionally only include domains expiring on a specific date(YYYY-MM-DD) |
Returns
- Body
- Investigate_Response
Return Tagged With All
Retrieve up to 500 domains tagged within the Iris Investigate UI. Given a comma-separated list of tags, returns domains that are tagged with ALL of the tags. Use the optional 'active' and 'date updated after' parameters to pre-filter the result set.
Parameters
| Name | Key | Required | Type | Description |
|---|---|---|---|---|
|
Tagged With All
|
tagged_with_all | True | string |
Comma-separated list of tags. Only returns domains tagged with the full list of tags. |
|
Active
|
active | boolean |
Optionally set to 'true' to only return domains that have either an entry in the global DNS system, OR are listed as registered by the registry. Set to 'false' to only return domains that do not have an entry in the global DNS system AND are not listed as registered by the registry. |
|
|
Create Date(YYYY-MM-DD)
|
create_date | string |
Optionally only include domains created on a specific date(YYYY-MM-DD) |
|
|
Expiration Date(YYYY-MM-DD)
|
expiration_date | string |
Optionally only include domains expiring on a specific date(YYYY-MM-DD) |
Returns
- Body
- Investigate_Response
Return Tagged With Any
Retrieve up to 500 domains tagged within the Iris Investigate UI. Given a comma-separated list of tags, returns domains that are tagged with ANY of the tags. Use the optional 'active' and 'date updated after' parameters to pre-filter the result set.
Parameters
| Name | Key | Required | Type | Description |
|---|---|---|---|---|
|
Tagged With Any
|
tagged_with_any | True | string |
Comma-separated list of Iris Investigate tags. Returns domains tagged with any of the tags in a list. |
|
Active
|
active | boolean |
Optionally set to 'true' to only return domains that have either an entry in the global DNS system, OR are listed as registered by the registry. Set to 'false' to only return domains that do not have an entry in the global DNS system AND are not listed as registered by the registry. |
|
|
Create Date(YYYY-MM-DD)
|
create_date | string |
Optionally only include domains created on a specific date(YYYY-MM-DD) |
|
|
Expiration Date(YYYY-MM-DD)
|
expiration_date | string |
Optionally only include domains expiring on a specific date(YYYY-MM-DD) |
Returns
- Body
- Investigate_Response
Reverse Email
Returns up to 500 domains with an email address on the most recently available Whois record, DNS SOA record or SSL certificate. Use the optional 'active' and 'date updated after' parameters to pre-filter the result set.
Parameters
| Name | Key | Required | Type | Description |
|---|---|---|---|---|
|
Email Address
|
True | string |
Email address from the most recently available Whois record, DNS SOA record or SSL certificate. |
|
|
Active
|
active | boolean |
Optionally set to 'true' to only return domains that have either an entry in the global DNS system, OR are listed as registered by the registry. Set to 'false' to only return domains that do not have an entry in the global DNS system AND are not listed as registered by the registry. |
|
|
Create Date(YYYY-MM-DD)
|
create_date | string |
Optionally only include domains created on a specific date(YYYY-MM-DD) |
|
|
Expiration Date(YYYY-MM-DD)
|
expiration_date | string |
Optionally only include domains expiring on a specific date(YYYY-MM-DD) |
Returns
- Body
- Investigate_Response
Reverse Email Domain
Returns up to 500 domains with the domain portion of an email address on the most recently available Whois or DNS SOA record. Use the optional 'active' and 'date updated after' parameters to pre-filter the result set.
Parameters
| Name | Key | Required | Type | Description |
|---|---|---|---|---|
|
Email Domain
|
email_domain | True | string |
The domain portion of a Whois or DNS SOA email address. |
|
Active
|
active | boolean |
Optionally set to 'true' to only return domains that have either an entry in the global DNS system, OR are listed as registered by the registry. Set to 'false' to only return domains that do not have an entry in the global DNS system AND are not listed as registered by the registry. |
|
|
Create Date(YYYY-MM-DD)
|
create_date | string |
Optionally only include domains created on a specific date(YYYY-MM-DD) |
|
|
Expiration Date(YYYY-MM-DD)
|
expiration_date | string |
Optionally only include domains expiring on a specific date(YYYY-MM-DD) |
Returns
- Body
- Investigate_Response
Reverse IP
Returns up to 500 domains that last resolved to a given IPv4 address an active DNS check. Use the optional 'active' and 'date updated after' parameters to pre-filter the result set.
Parameters
| Name | Key | Required | Type | Description |
|---|---|---|---|---|
|
IP Address
|
ip | True | string |
IPv4 address the registered domain was last known to point to during an active DNS check. |
|
Active
|
active | boolean |
Optionally set to 'true' to only return domains that have either an entry in the global DNS system, OR are listed as registered by the registry. Set to 'false' to only return domains that do not have an entry in the global DNS system AND are not listed as registered by the registry. |
|
|
Create Date(YYYY-MM-DD)
|
create_date | string |
Optionally only include domains created on a specific date(YYYY-MM-DD) |
|
|
Expiration Date(YYYY-MM-DD)
|
expiration_date | string |
Optionally only include domains expiring on a specific date(YYYY-MM-DD) |
Returns
- Body
- Investigate_Response
Definitions
Account_Response
Acoount Information Response
| Name | Path | Type | Description |
|---|---|---|---|
|
API username
|
account.api_username | string |
API username |
|
Active
|
account.active | boolean |
Active |
|
products
|
products | array of object |
Products Information |
|
ID
|
products.id | string |
ID |
|
Per Month Limit
|
products.per_month_limit | string |
Per Month Limit |
|
Per Minute Limit
|
products.per_minute_limit | string |
Per Minute Limit |
|
Absolute Limit
|
products.absolute_limit | string |
Absolute Limit |
|
Today Usage
|
products.usage.today | string |
Today Usage |
|
Month Usage
|
products.usage.month | string |
Month Usage |
|
Expiration Date
|
products.expiration_date | string |
Expiration Date |
Investigate_Response
| Name | Path | Type | Description |
|---|---|---|---|
|
Limit Exceeded
|
response.limit_exceeded | boolean |
DomainTools API results are limited to 5000 entries in a result set. If a query has more than 5000 results, the 'Limit exceeded' returns true. Try refining your query with more specific search terms. |
|
Has More Results
|
response.has_more_results | boolean |
DomainTools API responses are limited to 500 responses in a single reply. The query can be iterated by adding an optional 'position' parameter to fetch 500 more responses up to a maximum of 5000. Please see https://github.com/DomainTools/python_api/blob/main/examples/retrieving_all_results_in_paginated_return.py for an example |
|
Message
|
response.message | string |
Message |
|
Results Count
|
response.results_count | integer |
Results Count |
|
Total Count
|
response.total_count | integer |
Total Count |
|
results
|
response.results | array of object |
Results Object |
|
Domain
|
response.results.domain | string |
Domain |
|
Whois URL
|
response.results.whois_url | string |
Whois URL |
|
Adsense Value
|
response.results.adsense.value | string |
Adsense Value |
|
Adsense Count
|
response.results.adsense.count | integer |
Adsense Count |
|
popularity_rank
|
response.results.popularity_rank |
Popularity Rank |
|
|
Active
|
response.results.active | boolean |
Active |
|
google_analytics
|
response.results.google_analytics | object |
Google Analytics |
|
Administrative Contact Name
|
response.results.admin_contact.name.value | string |
Name of the administrative contact |
|
Administrative Contact Name Count
|
response.results.admin_contact.name.count | integer |
Count of connected domains sharing the administrative contact name |
|
Administrative Contact Organization
|
response.results.admin_contact.org.value | string |
Organization of the administrative contact |
|
Administrative Contact Organization Count
|
response.results.admin_contact.org.count | integer |
Count of connected domains sharing the administrative contact organization |
|
Administrative Contact Street
|
response.results.admin_contact.street.value | string |
Street address of the administrative contact |
|
Administrative Contact Street Count
|
response.results.admin_contact.street.count | integer |
Count of connected domains sharing the administrative contact street |
|
Administrative Contact City
|
response.results.admin_contact.city.value | string |
City of the administrative contact |
|
Administrative Contact City Count
|
response.results.admin_contact.city.count | integer |
Count of connected domains sharing the administrative contact city |
|
Administrative Contact State
|
response.results.admin_contact.state.value | string |
State or province of the administrative contact |
|
Administrative Contact State Count
|
response.results.admin_contact.state.count | integer |
Count of connected domains sharing the administrative contact state |
|
Administrative Contact Postal
|
response.results.admin_contact.postal.value | string |
Postal code of the administrative contact |
|
Administrative Contact Postal Count
|
response.results.admin_contact.postal.count | integer |
Count of connected domains sharing the administrative contact postal |
|
Administrative Contact Country
|
response.results.admin_contact.country.value | string |
Country of the administrative contact |
|
Administrative Contact Country Count
|
response.results.admin_contact.country.count | integer |
Count of connected domains sharing the administrative contact country |
|
Administrative Contact Phone
|
response.results.admin_contact.phone.value | string |
Phone number of the administrative contact |
|
Administrative Contact Phone Count
|
response.results.admin_contact.phone.count | integer |
Count of connected domains sharing the administrative contact phone |
|
Administrative Contact Fax
|
response.results.admin_contact.fax.value | string |
Fax number of the administrative contact |
|
Administrative Contact Fax Count
|
response.results.admin_contact.fax.count | integer |
Count of connected domains sharing the administrative contact fax |
|
email
|
response.results.admin_contact.email | array of object | |
|
Administrative Contact Email
|
response.results.admin_contact.email.value | string |
Email address of the administrative contact |
|
Administrative Contact Email Count
|
response.results.admin_contact.email.count | integer |
Count of connected domains sharing the administrative contact email |
|
Billing Contact Name
|
response.results.billing_contact.name.value | string |
Name of the billing contact |
|
Billing Contact Name Count
|
response.results.billing_contact.name.count | integer |
Count of connected domains sharing the billing contact name |
|
Billing Contact Organization
|
response.results.billing_contact.org.value | string |
Organization of the billing contact |
|
Billing Contact Organization Count
|
response.results.billing_contact.org.count | integer |
Count of connected domains sharing the billing contact organization |
|
Billing Contact Street
|
response.results.billing_contact.street.value | string |
Street address of the billing contact |
|
Billing Contact Street Count
|
response.results.billing_contact.street.count | integer |
Count of connected domains sharing the billing contact street |
|
Billing Contact City
|
response.results.billing_contact.city.value | string |
City of the billing contact |
|
Billing Contact City Count
|
response.results.billing_contact.city.count | integer |
Count of connected domains sharing the billing contact city |
|
Billing Contact State
|
response.results.billing_contact.state.value | string |
State of Province of the billing contact |
|
Billing Contact State Count
|
response.results.billing_contact.state.count | integer |
Count of connected domains sharing the billing contact state |
|
Billing Contact Postal
|
response.results.billing_contact.postal.value | string |
Postal Code of the billing contact |
|
Billing Contact Postal Count
|
response.results.billing_contact.postal.count | integer |
Count of connected domains sharing the billing contact postal |
|
Billing Contact Country
|
response.results.billing_contact.country.value | string |
Country of the billing contact |
|
Billing Contact Country Count
|
response.results.billing_contact.country.count | integer |
Count of connected domains sharing the billing contact country |
|
Billing Contact Phone
|
response.results.billing_contact.phone.value | string |
Phone number of the billing contact |
|
Billing Contact Phone Count
|
response.results.billing_contact.phone.count | integer |
Count of connected domains sharing the billing contact phone |
|
Billing Contact Fax
|
response.results.billing_contact.fax.value | string |
Fax number of the billing contact |
|
Billing Contact Fax Count
|
response.results.billing_contact.fax.count | integer |
Count of connected domains sharing the billing contact fax |
|
email
|
response.results.billing_contact.email | array of object |
Billing Contact Email |
|
Billing Contact Email
|
response.results.billing_contact.email.value | string |
Email of the billing contact |
|
Billing Contact Email Count
|
response.results.billing_contact.email.count | integer |
Count of connected domains sharing the billing contact email |
|
Registrant Contact Name
|
response.results.registrant_contact.name.value | string |
Name of the registration contact |
|
Registrant Contact Name Count
|
response.results.registrant_contact.name.count | integer |
Count of connected domains sharing the registrant contact name |
|
Registrant Contact Organization
|
response.results.registrant_contact.org.value | string |
Organization of the registration contact |
|
Registrant Contact Organization Count
|
response.results.registrant_contact.org.count | integer |
Count of connected domains sharing the registrant contact organization |
|
Registrant Contact Street
|
response.results.registrant_contact.street.value | string |
Street Address of the registration contact |
|
Registrant Contact Street Count
|
response.results.registrant_contact.street.count | integer |
Count of connected domains sharing the registrant contact street |
|
Registrant Contact City
|
response.results.registrant_contact.city.value | string |
City of the registration contact |
|
Registrant Contact City Count
|
response.results.registrant_contact.city.count | integer |
Count of connected domains sharing the registrant contact city |
|
Registrant Contact State
|
response.results.registrant_contact.state.value | string |
State or province of the registration contact |
|
Registrant Contact State Count
|
response.results.registrant_contact.state.count | integer |
Count of connected domains sharing the registrant contact state |
|
Registrant Contact Postal
|
response.results.registrant_contact.postal.value | string |
Postal code of the registration contact |
|
Registrant Contact Postal Count
|
response.results.registrant_contact.postal.count | integer |
Count of connected domains sharing the registrant contact postal |
|
Registrant Contact Country
|
response.results.registrant_contact.country.value | string |
Country of the registration contact |
|
Registrant Contact Country Count
|
response.results.registrant_contact.country.count | integer |
Count of connected domains sharing the registrant contact country |
|
Registrant Contact Phone
|
response.results.registrant_contact.phone.value | string |
Phone number of the registration contact |
|
Registrant Contact Phone Count
|
response.results.registrant_contact.phone.count | integer |
Count of connected domains sharing the registrant contact phone |
|
Registrant Contact Fax
|
response.results.registrant_contact.fax.value | string |
Fax number of the registration contact |
|
Registrant Contact Fax Count
|
response.results.registrant_contact.fax.count | integer |
Count of connected domains sharing the registrant contact fax |
|
email
|
response.results.registrant_contact.email | array of object |
Registrant Contact Email |
|
Registrant Contact Email
|
response.results.registrant_contact.email.value | string |
Email of the registration contact |
|
Registrant Contact Email Count
|
response.results.registrant_contact.email.count | integer |
Count of connected domains sharing the registrant contact email |
|
Technical Contact Name
|
response.results.technical_contact.name.value | string |
Name of the technical contact |
|
Technical Contact Name Count
|
response.results.technical_contact.name.count | integer |
Count of connected domains sharing the technical contact name |
|
Technical Contact Organization
|
response.results.technical_contact.org.value | string |
Organization of the technical contact |
|
Technical Contact Organization Count
|
response.results.technical_contact.org.count | integer |
Count of connected domains sharing the technical contact organization |
|
Technical Contact Street
|
response.results.technical_contact.street.value | string |
Street address of the technical contact |
|
Technical Contact Street Count
|
response.results.technical_contact.street.count | integer |
Count of connected domains sharing the technical contact street |
|
Technical Contact City
|
response.results.technical_contact.city.value | string |
City of the technical contact |
|
Technical Contact City Count
|
response.results.technical_contact.city.count | integer |
Count of connected domains sharing the technical contact city |
|
Technical Contact State
|
response.results.technical_contact.state.value | string |
State or province of the technical contact |
|
Technical Contact State Count
|
response.results.technical_contact.state.count | integer |
Count of connected domains sharing the technical contact state |
|
Technical Contact Postal
|
response.results.technical_contact.postal.value | string |
Postal code of the technical contact |
|
Technical Contact Postal Count
|
response.results.technical_contact.postal.count | integer |
Count of connected domains sharing the technical contact postal |
|
Technical Contact Country
|
response.results.technical_contact.country.value | string |
Country of the technical contact |
|
Technical Contact Country Count
|
response.results.technical_contact.country.count | integer |
Count of connected domains sharing the technical contact country |
|
Technical Contact Phone
|
response.results.technical_contact.phone.value | string |
Phone number of the technical contact |
|
Technical Contact Phone Count
|
response.results.technical_contact.phone.count | integer |
Count of connected domains sharing the technical contact phone |
|
Technical Contact Fax
|
response.results.technical_contact.fax.value | string |
Fax number of the technical contact |
|
Technical Contact Fax Count
|
response.results.technical_contact.fax.count | integer |
Count of connected domains sharing the technical contact fax |
|
email
|
response.results.technical_contact.email | array of object |
Technical Contact Email |
|
Technical Contact Email
|
response.results.technical_contact.email.value | string |
Email of the technical contact |
|
Technical Contact Email Count
|
response.results.technical_contact.email.count | integer |
Count of connected domains sharing the technical contact email |
|
Create Date
|
response.results.create_date.value | string |
Creation date for the domain |
|
Create Date Count
|
response.results.create_date.count | integer |
Count of connected domains sharing the create date |
|
Expiration Date
|
response.results.expiration_date.value | string |
Expiration date for the domain |
|
Expiration Date Count
|
response.results.expiration_date.count | integer |
Count of connected domains sharing the expiration date |
|
email_domain
|
response.results.email_domain | array of object | |
|
Email Domain
|
response.results.email_domain.value | string |
Email Domain |
|
Email Domain Count
|
response.results.email_domain.count | integer |
Count of connected domains sharing the email domain |
|
soa_email
|
response.results.soa_email | array of object |
SOA Email |
|
SOA Email
|
response.results.soa_email.value | string |
SOA Email |
|
SOA Email Count
|
response.results.soa_email.count | integer |
Count of connected domains sharing the SOA email |
|
ssl_email
|
response.results.ssl_email | array of object |
SSL Email |
|
SSL Email
|
response.results.ssl_email.value | string |
SSL Email |
|
SSL Email Count
|
response.results.ssl_email.count | integer |
Count of connected domains sharing the SSL email |
|
additional_whois_email
|
response.results.additional_whois_email | array of object |
Additional Whois Email |
|
Additional Whois Email
|
response.results.additional_whois_email.value | string |
Additional Whois Email |
|
Additional Whois Email Count
|
response.results.additional_whois_email.count | integer |
Count of connected domains sharing the additional whois email |
|
ip
|
response.results.ip | array of object |
IP Address Object |
|
IP Address
|
response.results.ip.address.value | string |
IP Address |
|
IP Address Count
|
response.results.ip.address.count | integer |
Count of connected domains sharing the IP Address |
|
asn
|
response.results.ip.asn | array of object |
IP Address ASN |
|
IP Address ASN
|
response.results.ip.asn.value | integer |
IP Address ASN |
|
IP Address ASN Count
|
response.results.ip.asn.count | integer |
Count of connected domains sharing the IP ASN |
|
IP Address Country Code
|
response.results.ip.country_code.value | string |
IP Address Country Code |
|
IP Address Country Code Count
|
response.results.ip.country_code.count | integer |
Count of connected domains sharing the IP country code |
|
IP Address ISP
|
response.results.ip.isp.value | string |
IP Address ISP |
|
IP Address ISP Count
|
response.results.ip.isp.count | integer |
Count of connected domains sharing the IP ISP |
|
mx
|
response.results.mx | array of object |
MX Object |
|
MX host
|
response.results.mx.host.value | string |
MX host |
|
MX host Count
|
response.results.mx.host.count | integer |
Count of connected domains sharing the mx host |
|
MX Domain
|
response.results.mx.domain.value | string |
MX Domain |
|
MX Domain Count
|
response.results.mx.domain.count | integer |
Count of connected domains sharing the mx domain |
|
ip
|
response.results.mx.ip | array of object |
MX IP |
|
MX IP
|
response.results.mx.ip.value | string |
MX IP |
|
MX IP Count
|
response.results.mx.ip.count | integer |
Count of connected domains sharing the mx IP |
|
MX Priority
|
response.results.mx.priority | integer |
MX Priority |
|
name_server
|
response.results.name_server | array of object |
Nameserver Object |
|
Nameserver Host
|
response.results.name_server.host.value | string |
Nameserver Host |
|
Nameserver Host Count
|
response.results.name_server.host.count | integer |
Count of connected domains sharing the name server host |
|
Nameserver Domain
|
response.results.name_server.domain.value | string |
Nameserver Domain |
|
Nameserver Domain Count
|
response.results.name_server.domain.count | integer |
Count of connected domains sharing the name server domain |
|
ip
|
response.results.name_server.ip | array of object |
Nameserver IP |
|
Nameserver IP
|
response.results.name_server.ip.value | string |
Nameserver IP |
|
Nameserver IP Count
|
response.results.name_server.ip.count | integer |
Count of connected domains sharing the name server IP |
|
Risk Score
|
response.results.domain_risk.risk_score | integer |
Risk Score |
|
components
|
response.results.domain_risk.components | array of object |
Domain Risk Components |
|
Domain Risk Component Name
|
response.results.domain_risk.components.name | string |
Domain Risk Component Name |
|
Domain Risk Component Risk Score
|
response.results.domain_risk.components.risk_score | integer |
Domain Risk Component Risk Score |
|
threats
|
response.results.domain_risk.components.threats | array of string |
Domain Risk Threats |
|
evidence
|
response.results.domain_risk.components.evidence | array of string |
Domain Risk Evidence |
|
Redirect
|
response.results.redirect.value | string |
Redirect |
|
Redirect Count
|
response.results.redirect.count | integer |
Count of connected domains sharing the redirect |
|
Redirect Domain
|
response.results.redirect_domain.value | string |
Redirect Domain |
|
Redirect Domain Count
|
response.results.redirect_domain.count | integer |
Count of connected domains sharing the redirect domain |
|
Registrant Name
|
response.results.registrant_name.value | string |
Registrant Name |
|
Registrant Name Count
|
response.results.registrant_name.count | integer |
Count of connected domains sharing the registrant name |
|
Registrant Organization
|
response.results.registrant_org.value | string |
Registrant Organization |
|
Registrant Organization Count
|
response.results.registrant_org.count | integer |
Count of connected domains sharing the registrant organization |
|
registrar
|
response.results.registrar |
Registrar Name |
|
|
registrar_status
|
response.results.registrar_status | array of string |
Registrar Status |
|
SPF Info
|
response.results.spf_info | string |
SPF Info |
|
ssl_info
|
response.results.ssl_info | array of object |
SSL Info Object |
|
SSL Info Hash Value
|
response.results.ssl_info.hash.value | string |
SSL Info Hash Value |
|
SSL Info Hash Count
|
response.results.ssl_info.hash.count | integer |
Count of connected domains sharing the SSL info hash |
|
SSL Info Hash Subject
|
response.results.ssl_info.hash.subject.value | string |
SSL Info Hash Subject |
|
SSL Info Hash Subject Count
|
response.results.ssl_info.hash.subject.count | integer |
Count of connected domains sharing the SSL info hash subject |
|
SSL Info Hash Organization
|
response.results.ssl_info.hash.organization.value | string |
SSL Info Hash Organization |
|
SSL Info Hash Organization Count
|
response.results.ssl_info.hash.organization.count | integer |
Count of connected domains sharing the SSL info hash organization |
|
email
|
response.results.ssl_info.hash.email | array of string |
SSL Info Hash Email |
|
TLD
|
response.results.tld | string |
TLD |
|
website_response
|
response.results.website_response |
Website Response |
|
|
Data Updated Timestamp
|
response.results.data_updated_timestamp | string |
Data Updated Timestamp |
|
tags
|
response.results.tags | array of |
Tags |
|
missing_domains
|
response.missing_domains | array of |
Missing Domains |