Domain Whois - Get

Reference

Service:: Sentinel

API Version:: 2024-01-01-preview

Get whois information for a single domain name

GET https://management.azure.com/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.SecurityInsights/enrichment/domain/whois/?api-version=2024-01-01-preview&domain={domain}

URI Parameters

Name	In	Required	Type	Description
resourceGroupName	path	True	string	The name of the resource group. The name is case insensitive.
subscriptionId	path	True	string	The ID of the target subscription.
api-version	query	True	string	The API version to use for this operation.
domain	query	True	string	Domain name to be enriched

Responses

Name	Type	Description
200 OK	EnrichmentDomainWhois	OK
Other Status Codes	CloudError	Error response describing why the operation failed to enrich this domain.

Security

azure_auth

Azure Active Directory OAuth2 Flow

Type: oauth2
Flow: implicit
Authorization URL: https://login.microsoftonline.com/common/oauth2/authorize

Scopes

Name	Description
user_impersonation	impersonate your user account

Examples

Get whois information for a single domain name

GET https://management.azure.com/subscriptions/bd794837-4d29-4647-9105-6339bfdb4e6a/resourceGroups/myRg/providers/Microsoft.SecurityInsights/enrichment/domain/whois/?api-version=2024-01-01-preview&domain=microsoft.com

using Azure;
using Azure.ResourceManager;
using System;
using System.Threading.Tasks;
using Azure.Core;
using Azure.Identity;
using Azure.ResourceManager.Resources;
using Azure.ResourceManager.SecurityInsights.Models;
using Azure.ResourceManager.SecurityInsights;

// Generated from example definition: specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2024-01-01-preview/examples/enrichment/GetWhoisByDomainName.json
// this example is just showing the usage of "DomainWhois_Get" operation, for the dependent resources, they will have to be created separately.

// get your azure access token, for more details of how Azure SDK get your access token, please refer to https://learn.microsoft.com/en-us/dotnet/azure/sdk/authentication?tabs=command-line
TokenCredential cred = new DefaultAzureCredential();
// authenticate your client
ArmClient client = new ArmClient(cred);

// this example assumes you already have this ResourceGroupResource created on azure
// for more information of creating ResourceGroupResource, please refer to the document of ResourceGroupResource
string subscriptionId = "bd794837-4d29-4647-9105-6339bfdb4e6a";
string resourceGroupName = "myRg";
ResourceIdentifier resourceGroupResourceId = ResourceGroupResource.CreateResourceIdentifier(subscriptionId, resourceGroupName);
ResourceGroupResource resourceGroupResource = client.GetResourceGroupResource(resourceGroupResourceId);

// invoke the operation
string domain = "microsoft.com";
EnrichmentDomainWhois result = await resourceGroupResource.GetDomainWhoisInformationAsync(domain);

Console.WriteLine($"Succeeded: {result}");

To use the Azure SDK library in your project, see this documentation. To provide feedback on this code sample, open a GitHub issue

Sample response

Status code:: 200

{
  "domain": "microsoft.com",
  "server": null,
  "created": "2021-09-01T16:15:01.187045Z",
  "updated": "2021-09-01T16:15:01.187045Z",
  "expires": null,
  "parsedWhois": {
    "registrar": {
      "name": "MarkMonitor, Inc",
      "abuseContactPhone": "12083895770",
      "abuseContactEmail": "abuse@microsoft.com",
      "url": "http://www.markmonitor.com",
      "whoisServer": "whois.markmonitor.com"
    },
    "contacts": {
      "admin": {
        "name": "Administrator",
        "org": "Microsoft",
        "street": [
          "One Microsoft Way"
        ],
        "city": null,
        "state": "WA",
        "postal": "98052",
        "country": "United States",
        "phone": "1-800-555-1234",
        "fax": null,
        "email": "mail@microsoft.com"
      },
      "registrant": null,
      "billing": {
        "name": "Administrator",
        "org": "Microsoft",
        "street": [
          "One Microsoft Way"
        ],
        "city": null,
        "state": "WA",
        "postal": "98052",
        "country": "United States",
        "phone": "1-800-555-1234",
        "fax": null,
        "email": "mail@microsoft.com"
      },
      "tech": {
        "name": "Administrator",
        "org": "Microsoft",
        "street": [
          "One Microsoft Way"
        ],
        "city": null,
        "state": "WA",
        "postal": "98052",
        "country": "United States",
        "phone": "1-800-555-1234",
        "fax": null,
        "email": "mail@microsoft.com"
      }
    },
    "nameServers": [
      "ns1-205.azure-dns.com",
      "ns2-205.azure-dns.net",
      "ns3-205.azure-dns.org",
      "ns4-205.azure-dns.info"
    ],
    "statuses": [
      "clientUpdateProhibited",
      "clientTransferProhibited",
      "clientDeleteProhibited",
      "serverUpdateProhibited",
      "serverTransferProhibited",
      "serverDeleteProhibited"
    ]
  }
}

Definitions

Name	Description
CloudError	Error response structure.
CloudErrorBody	Error details.
EnrichmentDomainWhois	Whois information for a given domain and associated metadata
EnrichmentDomainWhoisContact	An individual contact associated with this domain
EnrichmentDomainWhoisContacts	The set of contacts associated with this domain
EnrichmentDomainWhoisDetails	The whois record for a given domain
EnrichmentDomainWhoisRegistrarDetails	The registrar associated with this domain

CloudError

Error response structure.

Name	Type	Description
error	CloudErrorBody	Error data

CloudErrorBody

Error details.

Name	Type	Description
code	string	An identifier for the error. Codes are invariant and are intended to be consumed programmatically.
message	string	A message describing the error, intended to be suitable for display in a user interface.

EnrichmentDomainWhois

Whois information for a given domain and associated metadata

Name	Type	Description
created	string	The timestamp at which this record was created
domain	string	The domain for this whois record
expires	string	The timestamp at which this record will expire
parsedWhois	EnrichmentDomainWhoisDetails	The whois record for a given domain
server	string	The hostname of this registrar's whois server
updated	string	The timestamp at which this record was last updated

EnrichmentDomainWhoisContact

An individual contact associated with this domain

Name	Type	Description
city	string	The city for this contact
country	string	The country for this contact
email	string	The email address for this contact
fax	string	The fax number for this contact
name	string	The name of this contact
org	string	The organization for this contact
phone	string	The phone number for this contact
postal	string	The postal code for this contact
state	string	The state for this contact
street	string[]	A list describing the street address for this contact

EnrichmentDomainWhoisContacts

The set of contacts associated with this domain

Name	Type	Description
admin	EnrichmentDomainWhoisContact	The admin contact for this whois record
billing	EnrichmentDomainWhoisContact	The billing contact for this whois record
registrant	EnrichmentDomainWhoisContact	The registrant contact for this whois record
tech	EnrichmentDomainWhoisContact	The technical contact for this whois record

EnrichmentDomainWhoisDetails

The whois record for a given domain

Name	Type	Description
contacts	EnrichmentDomainWhoisContacts	The set of contacts associated with this domain
nameServers	string[]	A list of name servers associated with this domain
registrar	EnrichmentDomainWhoisRegistrarDetails	The registrar associated with this domain
statuses	string[]	The set of status flags for this whois record

EnrichmentDomainWhoisRegistrarDetails

The registrar associated with this domain

Name	Type	Description
abuseContactEmail	string	This registrar's abuse contact email
abuseContactPhone	string	This registrar's abuse contact phone number
ianaId	string	This registrar's Internet Assigned Numbers Authority id
name	string	The name of this registrar
url	string	This registrar's URL
whoisServer	string	The hostname of this registrar's whois server

Share via

Domain Whois - Get

URI Parameters

Responses

Security

azure_auth

Scopes

Examples

Get whois information for a single domain name

Sample request

Sample response

Definitions

CloudError

CloudErrorBody

EnrichmentDomainWhois

EnrichmentDomainWhoisContact

EnrichmentDomainWhoisContacts

EnrichmentDomainWhoisDetails

EnrichmentDomainWhoisRegistrarDetails

Additional resources