{"type":"api","title":"Get WHOIS Email Information","meta":{"id":"/apps/pubhub/media/cloud-security-apis-in-eft/d2a1854d5c0ed9069a7f0bc54a9b813f3075ddc9/570121d2-76a9-3f3f-bf01-6671496640c5","info":{"title":"Cisco Secure Access Investigate API","description":"The Secure Access Investigate API provides a complete view of domains in relation to IP and autonomous system number (ASN) information.\nYou can get the following domain information:\n\n* Domain status, risk score, and geolocation\n* Number of domain searches\n* Co-occurring domains\n* Subdomains of a domain\n* Tagged timeline of a domain, IP, or URL\n* Security reputation of a domain\n* Top accessed domains\n* WHOIS information for the domain\n* Threat intelligence data for domains, IPs, and URLs\n* Threat intelligence samples by file hash","version":"2.0.0","contact":{"name":"Cloud Security Developer Community"}},"security":[{"oauthFlow":[]}],"tags":[{"name":"Domain Status and Categorization"},{"name":"Domain Volume"},{"name":"Co-occurrences for a Domain"},{"name":"Passive DNS"},{"name":"Tagging Timeline"},{"name":"Subdomains for a Domain"},{"name":"Related Domains for a Domain"},{"name":"Security Information for a Domain"},{"name":"AS Information for a Domain"},{"name":"WHOIS Information for a Domain"},{"name":"Popularity List-Top Million Domains"},{"name":"Search Domain"},{"name":"Cisco Secure Malware Analytics Integration"},{"name":"Secure Access"}],"x-parser-conf":{"overview":{"markdownPath":"secure-access/reference/investigate/investigate-overview.md","uri":"secure-access-api-reference-investigate-api-overview"}},"openapi":"3.0.0","servers":[{"url":"https://api.sse.cisco.com/{basePath}","variables":{"basePath":{"default":"investigate/v2"}}}],"securitySchemes":{"oauthFlow":{"type":"oauth2","description":"The client credential flow.","flows":{"clientCredentials":{"scopes":{"investigate.investigate:read":"Investigate read access","investigate.bulk:read":"Investigate bulk read access"},"tokenUrl":"https://api.sse.cisco.com/auth/v2/token"}}}}},"spec":{"summary":"Get WHOIS Email Information","operationId":"getWhoisEmail","tags":["WHOIS Information for a Domain","Secure Access"],"description":"Get the email address or addresses of the registrar for the domain or domains. The results include\nthe total number of results for domains registered by this email address and a list\nof the first 500 domains associated with this email.\nYou can pivot on the email address to find other malicious domains registered by the same email.\nThis endpoint is limited to a maximum of 500 results, which are the first 500 gathered from the database.\nReduce the number of results by setting the `limit` query parameter.\n**Note:** Due to the sample length, Investigate may truncate a sample.","parameters":[{"name":"email","in":"path","required":true,"description":"An email address that follows the RFC5322 conventions.","schema":{"type":"string"},"example":"hello@sample.com"},{"name":"limit","in":"query","required":false,"description":"Specify the number of results to return.\nThe default limit is 500.","example":400,"schema":{"type":"integer","default":500}},{"name":"offset","in":"query","required":false,"description":"A number that represents an index in the collection. By default, the offset is 0 (the first record).","schema":{"type":"integer","default":0},"example":2,"$$ref":"#/components/parameters/offsetParam"},{"name":"sortField","in":"query","required":false,"description":"Valid values are: `created`, `updated`, `expires`, or `domainname`.","schema":{"type":"string","enum":["created","updated","expires","domainname"]},"example":"created","$$ref":"#/components/parameters/sortFieldParam"}],"security":[{"oauthFlow":["investigate.investigate:read"]}],"responses":{"200":{"description":"OK","headers":{"Content-Type":{"schema":{"type":"string"},"description":"The MIME content type of the response body.","example":"application/json","$$ref":"#/components/headers/Content-Type"},"Date":{"schema":{"type":"string","pattern":"^[0-90-90-90-9-0-90-9-0-90-9T0-90-9:0-90-9:0-90-9Z]+$"},"description":"The timestamp of the response.","example":"2023-03-14T18:34:25Z","$$ref":"#/components/headers/Date"}},"content":{"application/json":{"schema":{"type":"object","properties":{"totalResults":{"type":"integer","description":"The total number of results for this email address.","example":400},"offset":{"type":"integer","description":"The place to start reading in the collection.","format":"int64","default":0,"example":5,"$$ref":"#/components/schemas/offset"},"moreDataAvailable":{"type":"boolean","description":"Specifies whether there is more than 500 results for this email.","example":true},"limit":{"type":"integer","description":"The number of results returned in the response. The default\nlimit is 500."},"sortField":{"type":"string","description":"The field that is used to sort the collection.","example":"updated"},"domains":{"type":"array","items":{"type":"object","description":"The information about the WHOIS email and nameserver.","properties":{"domain":{"type":"string","description":"The domain name.","example":"zayget2.com"},"current":{"type":"boolean","description":"Specifies whether the domain name is current.","example":true}},"$$ref":"#/components/schemas/WhoisEmailsAndNameservers"},"description":"The list of domains registered by this email and if the domain is currently registered\nby this email address.","example":[{"domain":"0emm.com","current":true}]}}},"example":{"totalResults":500,"moreDataAvailable":true,"limit":500,"sortField":"updated","domains":[{"domain":"0emm.com","current":true},{"domain":"10tothe100.net","current":true},{"domain":"youtubube.com","current":true},{"domain":"zagat.net","current":true},{"domain":"zagatnyc.com","current":true},{"domain":"zavers.com","current":true}]}}}},"400":{"description":"Bad Request","headers":{"Content-Type":{"schema":{"type":"string"},"description":"The MIME content type of the response body.","example":"application/json","$$ref":"#/components/headers/Content-Type"},"Date":{"schema":{"type":"string","pattern":"^[0-90-90-90-9-0-90-9-0-90-9T0-90-9:0-90-9:0-90-9Z]+$"},"description":"The timestamp of the response.","example":"2023-03-14T18:34:25Z","$$ref":"#/components/headers/Date"}},"content":{"application/json":{"schema":{"type":"object","properties":{"message":{"type":"string"}}}}},"$$ref":"#/components/responses/400Error"},"401":{"description":"Unauthorized","headers":{"Content-Type":{"schema":{"type":"string"},"description":"The MIME content type of the response body.","example":"application/json","$$ref":"#/components/headers/Content-Type"},"Date":{"schema":{"type":"string","pattern":"^[0-90-90-90-9-0-90-9-0-90-9T0-90-9:0-90-9:0-90-9Z]+$"},"description":"The timestamp of the response.","example":"2023-03-14T18:34:25Z","$$ref":"#/components/headers/Date"}},"content":{"application/json":{"schema":{"type":"object","properties":{"message":{"type":"string"}}}}},"$$ref":"#/components/responses/401Error"},"403":{"description":"Forbidden","headers":{"Content-Type":{"schema":{"type":"string"},"description":"The MIME content type of the response body.","example":"application/json","$$ref":"#/components/headers/Content-Type"},"Date":{"schema":{"type":"string","pattern":"^[0-90-90-90-9-0-90-9-0-90-9T0-90-9:0-90-9:0-90-9Z]+$"},"description":"The timestamp of the response.","example":"2023-03-14T18:34:25Z","$$ref":"#/components/headers/Date"}},"content":{"application/json":{"schema":{"type":"object","properties":{"message":{"type":"string"}}}}},"$$ref":"#/components/responses/403Error"},"404":{"description":"Not Found","headers":{"Content-Type":{"schema":{"type":"string"},"description":"The MIME content type of the response body.","example":"application/json","$$ref":"#/components/headers/Content-Type"},"Date":{"schema":{"type":"string","pattern":"^[0-90-90-90-9-0-90-9-0-90-9T0-90-9:0-90-9:0-90-9Z]+$"},"description":"The timestamp of the response.","example":"2023-03-14T18:34:25Z","$$ref":"#/components/headers/Date"}},"content":{"application/json":{"schema":{"type":"object","properties":{"message":{"type":"string"}}}}},"$$ref":"#/components/responses/404Error"},"500":{"description":"Internal Server Error","headers":{"Content-Type":{"schema":{"type":"string"},"description":"The MIME content type of the response body.","example":"application/json","$$ref":"#/components/headers/Content-Type"},"Date":{"schema":{"type":"string","pattern":"^[0-90-90-90-9-0-90-9-0-90-9T0-90-9:0-90-9:0-90-9Z]+$"},"description":"The timestamp of the response.","example":"2023-03-14T18:34:25Z","$$ref":"#/components/headers/Date"}},"content":{"application/json":{"schema":{"type":"object","properties":{"message":{"type":"string"}}}}},"$$ref":"#/components/responses/500Error"}},"__originalOperationId":"getWhoisEmail","method":"get","path":"/whois/emails/{email}"}}