DomainTools Iris Investigate

Map connected infrastructure to get ahead of threats. The Iris Investigate delivers dozens of domain name attributes on every result including Risk Score, DNS, Whois, SSL, and more. It enables easy pivoting through different domain name attributes and exposes meaningful insights with connection counts on most data fields. It is best suited for human-scale interactions.

This connector is available in the following products and regions:

Service Class Regions
Logic Apps Standard All Logic Apps regions except the following:
     -   Azure Government regions
     -   Azure China regions
     -   US Department of Defense (DoD)
Power Automate Premium All Power Automate regions except the following:
     -   US Government (GCC)
     -   US Government (GCC High)
     -   China Cloud operated by 21Vianet
     -   US Department of Defense (DoD)
Power Apps Premium All Power Apps regions except the following:
     -   US Government (GCC)
     -   US Government (GCC High)
     -   China Cloud operated by 21Vianet
     -   US Department of Defense (DoD)
Contact
Name DomainTools Integrations
URL https://www.domaintools.com/integrations
Email enterprisesupport@domaintools.com
Connector Metadata
Publisher DomainTools, LLC
Website http://www.domaintools.com/
Privacy policy https://www.domaintools.com/company/privacy-policy/
Categories Security;Website

Pre-requisites

You will need the following to proceed:

  • A Microsoft Power Apps or Power Automate plan with custom connector feature
  • An Azure subscription
  • DomainTools API Username
  • DomainTools API Key

Support and documentation:

For all the support requests and general queries you can contact enterprisesupport@domaintools.com or contact us

Creating a connection

The connector supports the following authentication types:

Default Parameters for creating connection. All regions Not shareable

Default

Applicable: All regions

Parameters for creating connection.

This is not shareable connection. If the power app is shared with another user, another user will be prompted to create new connection explicitly.

Name Type Description Required
API username securestring The API username for this api True
API key securestring The API key for this api True

Throttling Limits

Name Calls Renewal Period
API calls per connection 100 60 seconds

Actions

Investigate Domain

Retrieves the infrastructure and whois data associated with a domain or comma-separated list of up to 100 domains.

Pivot by MX IP

Returns up to 500 domains served by a given mail server IP. Use the optional 'active' and 'date updated after' parameters to pre-filter the result set.

Pivot by Nameserver IP Address

Returns up to 500 domains served by a provided nameserver IP. Use the optional 'active' and 'date updated after' parameters to pre-filter the result set.

Pivot by Registrant Name

Returns up to 500 domains exactly matching the provided Whois registrant field. Use the optional 'active' and 'date updated after' parameters to pre-filter the result set.

Pivot by Registrant Organization

Returns up to 500 domains exactly matching the provided Whois registrant organization field. Use the optional 'active' and 'date updated after' parameters to pre-filter the result set.

Pivot by SSL Hash

Returns up to 500 domains with a SSL certificate matching a provided SHA-1 hash. Use the optional 'active' and 'date updated after' parameters to pre-filter the result set.

Pivot MX Host

Returns up to 500 domains with a mail server on a provided domain name. Use the optional 'active' and 'date updated after' parameters to pre-filter the result set.

Pivot Nameserver Host

Returns up to 500 domains served by a provided nameserver host. Use the optional 'active' and 'date updated after' parameters to pre-filter the result set.

Pivot SSL Email

Returns up to 500 domains with a given email address on the SSL certificate. Use the optional 'active' and 'date updated after' parameters to pre-filter the result set.

Retrieve Account Information

Information of the active API endpoints, rate limits and usage for an account.

Return Domains from Search Hash

Import up to 500 domains from Iris Investigate into the Sentinel platform. Export your investigation by search hash (Iris Investigate -> Search -> Export). Use the optional 'active' and 'date updated after' parameters to pre-filter the result set.

Return Tagged With All

Retrieve up to 500 domains tagged within the Iris Investigate UI. Given a comma-separated list of tags, returns domains that are tagged with ALL of the tags. Use the optional 'active' and 'date updated after' parameters to pre-filter the result set.

Return Tagged With Any

Retrieve up to 500 domains tagged within the Iris Investigate UI. Given a comma-separated list of tags, returns domains that are tagged with ANY of the tags. Use the optional 'active' and 'date updated after' parameters to pre-filter the result set.

Reverse Email

Returns up to 500 domains with an email address on the most recently available Whois record, DNS SOA record or SSL certificate. Use the optional 'active' and 'date updated after' parameters to pre-filter the result set.

Reverse Email Domain

Returns up to 500 domains with the domain portion of an email address on the most recently available Whois or DNS SOA record. Use the optional 'active' and 'date updated after' parameters to pre-filter the result set.

Reverse IP

Returns up to 500 domains that last resolved to a given IPv4 address an active DNS check. Use the optional 'active' and 'date updated after' parameters to pre-filter the result set.

Investigate Domain

Retrieves the infrastructure and whois data associated with a domain or comma-separated list of up to 100 domains.

Parameters

Name Key Required Type Description
Domain Name
domain True string

Domain (e.g. name.tld) to be investigated or comma-separated list of domains.

Active
active boolean

Optionally set to 'true' to only return domains that have either an entry in the global DNS system, OR are listed as registered by the registry. Set to 'false' to only return domains that do not have an entry in the global DNS system AND are not listed as registered by the registry.

Create Date(YYYY-MM-DD)
create_date string

Optionally only include domains created on a specific date(YYYY-MM-DD)

Expiration Date(YYYY-MM-DD)
expiration_date string

Optionally only include domains expiring on a specific date(YYYY-MM-DD)

Returns

Pivot by MX IP

Returns up to 500 domains served by a given mail server IP. Use the optional 'active' and 'date updated after' parameters to pre-filter the result set.

Parameters

Name Key Required Type Description
Mailserver IP
mailserver_ip True string

IP address of the mail server.

Active
active boolean

Optionally set to 'true' to only return domains that have either an entry in the global DNS system, OR are listed as registered by the registry. Set to 'false' to only return domains that do not have an entry in the global DNS system AND are not listed as registered by the registry.

Create Date(YYYY-MM-DD)
create_date string

Optionally only include domains created on a specific date(YYYY-MM-DD)

Expiration Date(YYYY-MM-DD)
expiration_date string

Optionally only include domains expiring on a specific date(YYYY-MM-DD)

Returns

Pivot by Nameserver IP Address

Returns up to 500 domains served by a provided nameserver IP. Use the optional 'active' and 'date updated after' parameters to pre-filter the result set.

Parameters

Name Key Required Type Description
Nameserver IP
nameserver_ip True string

IP address of the name server.

Active
active boolean

Optionally set to 'true' to only return domains that have either an entry in the global DNS system, OR are listed as registered by the registry. Set to 'false' to only return domains that do not have an entry in the global DNS system AND are not listed as registered by the registry.

Create Date(YYYY-MM-DD)
create_date string

Optionally only include domains created on a specific date(YYYY-MM-DD)

Expiration Date(YYYY-MM-DD)
expiration_date string

Optionally only include domains expiring on a specific date(YYYY-MM-DD)

Returns

Pivot by Registrant Name

Returns up to 500 domains exactly matching the provided Whois registrant field. Use the optional 'active' and 'date updated after' parameters to pre-filter the result set.

Parameters

Name Key Required Type Description
Registrant Name
registrant True string

Exact match to the Whois registrant field.

Active
active boolean

Optionally set to 'true' to only return domains that have either an entry in the global DNS system, OR are listed as registered by the registry. Set to 'false' to only return domains that do not have an entry in the global DNS system AND are not listed as registered by the registry.

Create Date(YYYY-MM-DD)
create_date string

Optionally only include domains created on a specific date(YYYY-MM-DD)

Expiration Date(YYYY-MM-DD)
expiration_date string

Optionally only include domains expiring on a specific date(YYYY-MM-DD)

Returns

Pivot by Registrant Organization

Returns up to 500 domains exactly matching the provided Whois registrant organization field. Use the optional 'active' and 'date updated after' parameters to pre-filter the result set.

Parameters

Name Key Required Type Description
Registrant Organization
registrant_org True string

Exact match to the Whois registrant organization field.

Active
active boolean

Optionally set to 'true' to only return domains that have either an entry in the global DNS system, OR are listed as registered by the registry. Set to 'false' to only return domains that do not have an entry in the global DNS system AND are not listed as registered by the registry.

Create Date(YYYY-MM-DD)
create_date string

Optionally only include domains created on a specific date(YYYY-MM-DD)

Expiration Date(YYYY-MM-DD)
expiration_date string

Optionally only include domains expiring on a specific date(YYYY-MM-DD)

Returns

Pivot by SSL Hash

Returns up to 500 domains with a SSL certificate matching a provided SHA-1 hash. Use the optional 'active' and 'date updated after' parameters to pre-filter the result set.

Parameters

Name Key Required Type Description
SSL Hash
ssl_hash True string

SSL certificate SHA-1 hash.

Active
active boolean

Optionally set to 'true' to only return domains that have either an entry in the global DNS system, OR are listed as registered by the registry. Set to 'false' to only return domains that do not have an entry in the global DNS system AND are not listed as registered by the registry.

Create Date(YYYY-MM-DD)
create_date string

Optionally only include domains created on a specific date(YYYY-MM-DD)

Expiration Date(YYYY-MM-DD)
expiration_date string

Optionally only include domains expiring on a specific date(YYYY-MM-DD)

Returns

Pivot MX Host

Returns up to 500 domains with a mail server on a provided domain name. Use the optional 'active' and 'date updated after' parameters to pre-filter the result set.

Parameters

Name Key Required Type Description
Mailserver Host
mailserver_host True string

Only the registered domain portion of the mail server (e.g. domain.com).

Active
active boolean

Optionally set to 'true' to only return domains that have either an entry in the global DNS system, OR are listed as registered by the registry. Set to 'false' to only return domains that do not have an entry in the global DNS system AND are not listed as registered by the registry.

Create Date(YYYY-MM-DD)
create_date string

Optionally only include domains created on a specific date(YYYY-MM-DD)

Expiration Date(YYYY-MM-DD)
expiration_date string

Optionally only include domains expiring on a specific date(YYYY-MM-DD)

Returns

Pivot Nameserver Host

Returns up to 500 domains served by a provided nameserver host. Use the optional 'active' and 'date updated after' parameters to pre-filter the result set.

Parameters

Name Key Required Type Description
Nameserver Host
nameserver_host True string

Registered domain portion of the name server.

Active
active boolean

Optionally set to 'true' to only return domains that have either an entry in the global DNS system, OR are listed as registered by the registry. Set to 'false' to only return domains that do not have an entry in the global DNS system AND are not listed as registered by the registry.

Create Date(YYYY-MM-DD)
create_date string

Optionally only include domains created on a specific date(YYYY-MM-DD)

Expiration Date(YYYY-MM-DD)
expiration_date string

Optionally only include domains expiring on a specific date(YYYY-MM-DD)

Returns

Pivot SSL Email

Returns up to 500 domains with a given email address on the SSL certificate. Use the optional 'active' and 'date updated after' parameters to pre-filter the result set.

Parameters

Name Key Required Type Description
SSL Email
ssl_email True string

Email address from the SSL certificate.

Active
active boolean

Optionally set to 'true' to only return domains that have either an entry in the global DNS system, OR are listed as registered by the registry. Set to 'false' to only return domains that do not have an entry in the global DNS system AND are not listed as registered by the registry.

Create Date(YYYY-MM-DD)
create_date string

Optionally only include domains created on a specific date(YYYY-MM-DD)

Expiration Date(YYYY-MM-DD)
expiration_date string

Optionally only include domains expiring on a specific date(YYYY-MM-DD)

Returns

Retrieve Account Information

Information of the active API endpoints, rate limits and usage for an account.

Returns

Acoount Information Response

Return Domains from Search Hash

Import up to 500 domains from Iris Investigate into the Sentinel platform. Export your investigation by search hash (Iris Investigate -> Search -> Export). Use the optional 'active' and 'date updated after' parameters to pre-filter the result set.

Parameters

Name Key Required Type Description
Search Hash
search_hash True string

Encoded search hash from the Iris Investigate UI (Iris Investigate -> Search -> Export).

Active
active boolean

Optionally set to 'true' to only return domains that have either an entry in the global DNS system, OR are listed as registered by the registry. Set to 'false' to only return domains that do not have an entry in the global DNS system AND are not listed as registered by the registry.

Create Date(YYYY-MM-DD)
create_date string

Optionally only include domains created on a specific date(YYYY-MM-DD)

Expiration Date(YYYY-MM-DD)
expiration_date string

Optionally only include domains expiring on a specific date(YYYY-MM-DD)

Returns

Return Tagged With All

Retrieve up to 500 domains tagged within the Iris Investigate UI. Given a comma-separated list of tags, returns domains that are tagged with ALL of the tags. Use the optional 'active' and 'date updated after' parameters to pre-filter the result set.

Parameters

Name Key Required Type Description
Tagged With All
tagged_with_all True string

Comma-separated list of tags. Only returns domains tagged with the full list of tags.

Active
active boolean

Optionally set to 'true' to only return domains that have either an entry in the global DNS system, OR are listed as registered by the registry. Set to 'false' to only return domains that do not have an entry in the global DNS system AND are not listed as registered by the registry.

Create Date(YYYY-MM-DD)
create_date string

Optionally only include domains created on a specific date(YYYY-MM-DD)

Expiration Date(YYYY-MM-DD)
expiration_date string

Optionally only include domains expiring on a specific date(YYYY-MM-DD)

Returns

Return Tagged With Any

Retrieve up to 500 domains tagged within the Iris Investigate UI. Given a comma-separated list of tags, returns domains that are tagged with ANY of the tags. Use the optional 'active' and 'date updated after' parameters to pre-filter the result set.

Parameters

Name Key Required Type Description
Tagged With Any
tagged_with_any True string

Comma-separated list of Iris Investigate tags. Returns domains tagged with any of the tags in a list.

Active
active boolean

Optionally set to 'true' to only return domains that have either an entry in the global DNS system, OR are listed as registered by the registry. Set to 'false' to only return domains that do not have an entry in the global DNS system AND are not listed as registered by the registry.

Create Date(YYYY-MM-DD)
create_date string

Optionally only include domains created on a specific date(YYYY-MM-DD)

Expiration Date(YYYY-MM-DD)
expiration_date string

Optionally only include domains expiring on a specific date(YYYY-MM-DD)

Returns

Reverse Email

Returns up to 500 domains with an email address on the most recently available Whois record, DNS SOA record or SSL certificate. Use the optional 'active' and 'date updated after' parameters to pre-filter the result set.

Parameters

Name Key Required Type Description
Email Address
email True string

Email address from the most recently available Whois record, DNS SOA record or SSL certificate.

Active
active boolean

Optionally set to 'true' to only return domains that have either an entry in the global DNS system, OR are listed as registered by the registry. Set to 'false' to only return domains that do not have an entry in the global DNS system AND are not listed as registered by the registry.

Create Date(YYYY-MM-DD)
create_date string

Optionally only include domains created on a specific date(YYYY-MM-DD)

Expiration Date(YYYY-MM-DD)
expiration_date string

Optionally only include domains expiring on a specific date(YYYY-MM-DD)

Returns

Reverse Email Domain

Returns up to 500 domains with the domain portion of an email address on the most recently available Whois or DNS SOA record. Use the optional 'active' and 'date updated after' parameters to pre-filter the result set.

Parameters

Name Key Required Type Description
Email Domain
email_domain True string

The domain portion of a Whois or DNS SOA email address.

Active
active boolean

Optionally set to 'true' to only return domains that have either an entry in the global DNS system, OR are listed as registered by the registry. Set to 'false' to only return domains that do not have an entry in the global DNS system AND are not listed as registered by the registry.

Create Date(YYYY-MM-DD)
create_date string

Optionally only include domains created on a specific date(YYYY-MM-DD)

Expiration Date(YYYY-MM-DD)
expiration_date string

Optionally only include domains expiring on a specific date(YYYY-MM-DD)

Returns

Reverse IP

Returns up to 500 domains that last resolved to a given IPv4 address an active DNS check. Use the optional 'active' and 'date updated after' parameters to pre-filter the result set.

Parameters

Name Key Required Type Description
IP Address
ip True string

IPv4 address the registered domain was last known to point to during an active DNS check.

Active
active boolean

Optionally set to 'true' to only return domains that have either an entry in the global DNS system, OR are listed as registered by the registry. Set to 'false' to only return domains that do not have an entry in the global DNS system AND are not listed as registered by the registry.

Create Date(YYYY-MM-DD)
create_date string

Optionally only include domains created on a specific date(YYYY-MM-DD)

Expiration Date(YYYY-MM-DD)
expiration_date string

Optionally only include domains expiring on a specific date(YYYY-MM-DD)

Returns

Definitions

Account_Response

Acoount Information Response

Name Path Type Description
API username
account.api_username string

API username

Active
account.active boolean

Active

products
products array of object

Products Information

ID
products.id string

ID

Per Month Limit
products.per_month_limit string

Per Month Limit

Per Minute Limit
products.per_minute_limit string

Per Minute Limit

Absolute Limit
products.absolute_limit string

Absolute Limit

Today Usage
products.usage.today string

Today Usage

Month Usage
products.usage.month string

Month Usage

Expiration Date
products.expiration_date string

Expiration Date

Investigate_Response

Name Path Type Description
Limit Exceeded
response.limit_exceeded boolean

DomainTools API results are limited to 5000 entries in a result set. If a query has more than 5000 results, the 'Limit exceeded' returns true. Try refining your query with more specific search terms.

Has More Results
response.has_more_results boolean

DomainTools API responses are limited to 500 responses in a single reply. The query can be iterated by adding an optional 'position' parameter to fetch 500 more responses up to a maximum of 5000. Please see https://github.com/DomainTools/python_api/blob/main/examples/retrieving_all_results_in_paginated_return.py for an example

Message
response.message string

Message

Results Count
response.results_count integer

Results Count

Total Count
response.total_count integer

Total Count

results
response.results array of object

Results Object

Domain
response.results.domain string

Domain

Whois URL
response.results.whois_url string

Whois URL

Adsense Value
response.results.adsense.value string

Adsense Value

Adsense Count
response.results.adsense.count integer

Adsense Count

popularity_rank
response.results.popularity_rank

Popularity Rank

Active
response.results.active boolean

Active

google_analytics
response.results.google_analytics object

Google Analytics

Administrative Contact Name
response.results.admin_contact.name.value string

Name of the administrative contact

Administrative Contact Name Count
response.results.admin_contact.name.count integer

Count of connected domains sharing the administrative contact name

Administrative Contact Organization
response.results.admin_contact.org.value string

Organization of the administrative contact

Administrative Contact Organization Count
response.results.admin_contact.org.count integer

Count of connected domains sharing the administrative contact organization

Administrative Contact Street
response.results.admin_contact.street.value string

Street address of the administrative contact

Administrative Contact Street Count
response.results.admin_contact.street.count integer

Count of connected domains sharing the administrative contact street

Administrative Contact City
response.results.admin_contact.city.value string

City of the administrative contact

Administrative Contact City Count
response.results.admin_contact.city.count integer

Count of connected domains sharing the administrative contact city

Administrative Contact State
response.results.admin_contact.state.value string

State or province of the administrative contact

Administrative Contact State Count
response.results.admin_contact.state.count integer

Count of connected domains sharing the administrative contact state

Administrative Contact Postal
response.results.admin_contact.postal.value string

Postal code of the administrative contact

Administrative Contact Postal Count
response.results.admin_contact.postal.count integer

Count of connected domains sharing the administrative contact postal

Administrative Contact Country
response.results.admin_contact.country.value string

Country of the administrative contact

Administrative Contact Country Count
response.results.admin_contact.country.count integer

Count of connected domains sharing the administrative contact country

Administrative Contact Phone
response.results.admin_contact.phone.value string

Phone number of the administrative contact

Administrative Contact Phone Count
response.results.admin_contact.phone.count integer

Count of connected domains sharing the administrative contact phone

Administrative Contact Fax
response.results.admin_contact.fax.value string

Fax number of the administrative contact

Administrative Contact Fax Count
response.results.admin_contact.fax.count integer

Count of connected domains sharing the administrative contact fax

email
response.results.admin_contact.email array of object
Administrative Contact Email
response.results.admin_contact.email.value string

Email address of the administrative contact

Administrative Contact Email Count
response.results.admin_contact.email.count integer

Count of connected domains sharing the administrative contact email

Billing Contact Name
response.results.billing_contact.name.value string

Name of the billing contact

Billing Contact Name Count
response.results.billing_contact.name.count integer

Count of connected domains sharing the billing contact name

Billing Contact Organization
response.results.billing_contact.org.value string

Organization of the billing contact

Billing Contact Organization Count
response.results.billing_contact.org.count integer

Count of connected domains sharing the billing contact organization

Billing Contact Street
response.results.billing_contact.street.value string

Street address of the billing contact

Billing Contact Street Count
response.results.billing_contact.street.count integer

Count of connected domains sharing the billing contact street

Billing Contact City
response.results.billing_contact.city.value string

City of the billing contact

Billing Contact City Count
response.results.billing_contact.city.count integer

Count of connected domains sharing the billing contact city

Billing Contact State
response.results.billing_contact.state.value string

State of Province of the billing contact

Billing Contact State Count
response.results.billing_contact.state.count integer

Count of connected domains sharing the billing contact state

Billing Contact Postal
response.results.billing_contact.postal.value string

Postal Code of the billing contact

Billing Contact Postal Count
response.results.billing_contact.postal.count integer

Count of connected domains sharing the billing contact postal

Billing Contact Country
response.results.billing_contact.country.value string

Country of the billing contact

Billing Contact Country Count
response.results.billing_contact.country.count integer

Count of connected domains sharing the billing contact country

Billing Contact Phone
response.results.billing_contact.phone.value string

Phone number of the billing contact

Billing Contact Phone Count
response.results.billing_contact.phone.count integer

Count of connected domains sharing the billing contact phone

Billing Contact Fax
response.results.billing_contact.fax.value string

Fax number of the billing contact

Billing Contact Fax Count
response.results.billing_contact.fax.count integer

Count of connected domains sharing the billing contact fax

email
response.results.billing_contact.email array of object

Billing Contact Email

Billing Contact Email
response.results.billing_contact.email.value string

Email of the billing contact

Billing Contact Email Count
response.results.billing_contact.email.count integer

Count of connected domains sharing the billing contact email

Registrant Contact Name
response.results.registrant_contact.name.value string

Name of the registration contact

Registrant Contact Name Count
response.results.registrant_contact.name.count integer

Count of connected domains sharing the registrant contact name

Registrant Contact Organization
response.results.registrant_contact.org.value string

Organization of the registration contact

Registrant Contact Organization Count
response.results.registrant_contact.org.count integer

Count of connected domains sharing the registrant contact organization

Registrant Contact Street
response.results.registrant_contact.street.value string

Street Address of the registration contact

Registrant Contact Street Count
response.results.registrant_contact.street.count integer

Count of connected domains sharing the registrant contact street

Registrant Contact City
response.results.registrant_contact.city.value string

City of the registration contact

Registrant Contact City Count
response.results.registrant_contact.city.count integer

Count of connected domains sharing the registrant contact city

Registrant Contact State
response.results.registrant_contact.state.value string

State or province of the registration contact

Registrant Contact State Count
response.results.registrant_contact.state.count integer

Count of connected domains sharing the registrant contact state

Registrant Contact Postal
response.results.registrant_contact.postal.value string

Postal code of the registration contact

Registrant Contact Postal Count
response.results.registrant_contact.postal.count integer

Count of connected domains sharing the registrant contact postal

Registrant Contact Country
response.results.registrant_contact.country.value string

Country of the registration contact

Registrant Contact Country Count
response.results.registrant_contact.country.count integer

Count of connected domains sharing the registrant contact country

Registrant Contact Phone
response.results.registrant_contact.phone.value string

Phone number of the registration contact

Registrant Contact Phone Count
response.results.registrant_contact.phone.count integer

Count of connected domains sharing the registrant contact phone

Registrant Contact Fax
response.results.registrant_contact.fax.value string

Fax number of the registration contact

Registrant Contact Fax Count
response.results.registrant_contact.fax.count integer

Count of connected domains sharing the registrant contact fax

email
response.results.registrant_contact.email array of object

Registrant Contact Email

Registrant Contact Email
response.results.registrant_contact.email.value string

Email of the registration contact

Registrant Contact Email Count
response.results.registrant_contact.email.count integer

Count of connected domains sharing the registrant contact email

Technical Contact Name
response.results.technical_contact.name.value string

Name of the technical contact

Technical Contact Name Count
response.results.technical_contact.name.count integer

Count of connected domains sharing the technical contact name

Technical Contact Organization
response.results.technical_contact.org.value string

Organization of the technical contact

Technical Contact Organization Count
response.results.technical_contact.org.count integer

Count of connected domains sharing the technical contact organization

Technical Contact Street
response.results.technical_contact.street.value string

Street address of the technical contact

Technical Contact Street Count
response.results.technical_contact.street.count integer

Count of connected domains sharing the technical contact street

Technical Contact City
response.results.technical_contact.city.value string

City of the technical contact

Technical Contact City Count
response.results.technical_contact.city.count integer

Count of connected domains sharing the technical contact city

Technical Contact State
response.results.technical_contact.state.value string

State or province of the technical contact

Technical Contact State Count
response.results.technical_contact.state.count integer

Count of connected domains sharing the technical contact state

Technical Contact Postal
response.results.technical_contact.postal.value string

Postal code of the technical contact

Technical Contact Postal Count
response.results.technical_contact.postal.count integer

Count of connected domains sharing the technical contact postal

Technical Contact Country
response.results.technical_contact.country.value string

Country of the technical contact

Technical Contact Country Count
response.results.technical_contact.country.count integer

Count of connected domains sharing the technical contact country

Technical Contact Phone
response.results.technical_contact.phone.value string

Phone number of the technical contact

Technical Contact Phone Count
response.results.technical_contact.phone.count integer

Count of connected domains sharing the technical contact phone

Technical Contact Fax
response.results.technical_contact.fax.value string

Fax number of the technical contact

Technical Contact Fax Count
response.results.technical_contact.fax.count integer

Count of connected domains sharing the technical contact fax

email
response.results.technical_contact.email array of object

Technical Contact Email

Technical Contact Email
response.results.technical_contact.email.value string

Email of the technical contact

Technical Contact Email Count
response.results.technical_contact.email.count integer

Count of connected domains sharing the technical contact email

Create Date
response.results.create_date.value string

Creation date for the domain

Create Date Count
response.results.create_date.count integer

Count of connected domains sharing the create date

Expiration Date
response.results.expiration_date.value string

Expiration date for the domain

Expiration Date Count
response.results.expiration_date.count integer

Count of connected domains sharing the expiration date

email_domain
response.results.email_domain array of object
Email Domain
response.results.email_domain.value string

Email Domain

Email Domain Count
response.results.email_domain.count integer

Count of connected domains sharing the email domain

soa_email
response.results.soa_email array of object

SOA Email

SOA Email
response.results.soa_email.value string

SOA Email

SOA Email Count
response.results.soa_email.count integer

Count of connected domains sharing the SOA email

ssl_email
response.results.ssl_email array of object

SSL Email

SSL Email
response.results.ssl_email.value string

SSL Email

SSL Email Count
response.results.ssl_email.count integer

Count of connected domains sharing the SSL email

additional_whois_email
response.results.additional_whois_email array of object

Additional Whois Email

Additional Whois Email
response.results.additional_whois_email.value string

Additional Whois Email

Additional Whois Email Count
response.results.additional_whois_email.count integer

Count of connected domains sharing the additional whois email

ip
response.results.ip array of object

IP Address Object

IP Address
response.results.ip.address.value string

IP Address

IP Address Count
response.results.ip.address.count integer

Count of connected domains sharing the IP Address

asn
response.results.ip.asn array of object

IP Address ASN

IP Address ASN
response.results.ip.asn.value integer

IP Address ASN

IP Address ASN Count
response.results.ip.asn.count integer

Count of connected domains sharing the IP ASN

IP Address Country Code
response.results.ip.country_code.value string

IP Address Country Code

IP Address Country Code Count
response.results.ip.country_code.count integer

Count of connected domains sharing the IP country code

IP Address ISP
response.results.ip.isp.value string

IP Address ISP

IP Address ISP Count
response.results.ip.isp.count integer

Count of connected domains sharing the IP ISP

mx
response.results.mx array of object

MX Object

MX host
response.results.mx.host.value string

MX host

MX host Count
response.results.mx.host.count integer

Count of connected domains sharing the mx host

MX Domain
response.results.mx.domain.value string

MX Domain

MX Domain Count
response.results.mx.domain.count integer

Count of connected domains sharing the mx domain

ip
response.results.mx.ip array of object

MX IP

MX IP
response.results.mx.ip.value string

MX IP

MX IP Count
response.results.mx.ip.count integer

Count of connected domains sharing the mx IP

MX Priority
response.results.mx.priority integer

MX Priority

name_server
response.results.name_server array of object

Nameserver Object

Nameserver Host
response.results.name_server.host.value string

Nameserver Host

Nameserver Host Count
response.results.name_server.host.count integer

Count of connected domains sharing the name server host

Nameserver Domain
response.results.name_server.domain.value string

Nameserver Domain

Nameserver Domain Count
response.results.name_server.domain.count integer

Count of connected domains sharing the name server domain

ip
response.results.name_server.ip array of object

Nameserver IP

Nameserver IP
response.results.name_server.ip.value string

Nameserver IP

Nameserver IP Count
response.results.name_server.ip.count integer

Count of connected domains sharing the name server IP

Risk Score
response.results.domain_risk.risk_score integer

Risk Score

components
response.results.domain_risk.components array of object

Domain Risk Components

Domain Risk Component Name
response.results.domain_risk.components.name string

Domain Risk Component Name

Domain Risk Component Risk Score
response.results.domain_risk.components.risk_score integer

Domain Risk Component Risk Score

threats
response.results.domain_risk.components.threats array of string

Domain Risk Threats

evidence
response.results.domain_risk.components.evidence array of string

Domain Risk Evidence

Redirect
response.results.redirect.value string

Redirect

Redirect Count
response.results.redirect.count integer

Count of connected domains sharing the redirect

Redirect Domain
response.results.redirect_domain.value string

Redirect Domain

Redirect Domain Count
response.results.redirect_domain.count integer

Count of connected domains sharing the redirect domain

Registrant Name
response.results.registrant_name.value string

Registrant Name

Registrant Name Count
response.results.registrant_name.count integer

Count of connected domains sharing the registrant name

Registrant Organization
response.results.registrant_org.value string

Registrant Organization

Registrant Organization Count
response.results.registrant_org.count integer

Count of connected domains sharing the registrant organization

registrar
response.results.registrar

Registrar Name

registrar_status
response.results.registrar_status array of string

Registrar Status

SPF Info
response.results.spf_info string

SPF Info

ssl_info
response.results.ssl_info array of object

SSL Info Object

SSL Info Hash Value
response.results.ssl_info.hash.value string

SSL Info Hash Value

SSL Info Hash Count
response.results.ssl_info.hash.count integer

Count of connected domains sharing the SSL info hash

SSL Info Hash Subject
response.results.ssl_info.hash.subject.value string

SSL Info Hash Subject

SSL Info Hash Subject Count
response.results.ssl_info.hash.subject.count integer

Count of connected domains sharing the SSL info hash subject

SSL Info Hash Organization
response.results.ssl_info.hash.organization.value string

SSL Info Hash Organization

SSL Info Hash Organization Count
response.results.ssl_info.hash.organization.count integer

Count of connected domains sharing the SSL info hash organization

email
response.results.ssl_info.hash.email array of string

SSL Info Hash Email

TLD
response.results.tld string

TLD

website_response
response.results.website_response

Website Response

Data Updated Timestamp
response.results.data_updated_timestamp string

Data Updated Timestamp

tags
response.results.tags array of

Tags

missing_domains
response.missing_domains array of

Missing Domains