{"type":"api","title":"Get WHOIS Information for Domain","meta":{"id":"/apps/pubhub/media/cloud-security-apis-in-eft/ea4928eef24d94bca5721eeaee6db0f1f1b7cac6/570121d2-76a9-3f3f-bf01-6671496640c5","info":{"title":"Cisco Secure Access Investigate API","description":"The Secure Access Investigate API provides a complete view of domains in relation to IP and autonomous system number (ASN) information.\nYou can get the following domain information:\n\n* Domain status, risk score, and geolocation\n* Number of domain searches\n* Co-occurring domains\n* Subdomains of a domain\n* Tagged timeline of a domain, IP, or URL\n* Security reputation of a domain\n* Top accessed domains\n* WHOIS information for the domain\n* Threat intelligence data for domains, IPs, and URLs\n* Threat intelligence samples by file hash","version":"2.0.0","contact":{"name":"Cloud Security Developer Community"}},"security":[{"oauthFlow":[]}],"tags":[{"name":"Domain Status and Categorization"},{"name":"Domain Volume"},{"name":"Co-occurrences for a Domain"},{"name":"Passive DNS"},{"name":"Tagging Timeline"},{"name":"Subdomains for a Domain"},{"name":"Related Domains for a Domain"},{"name":"Security Information for a Domain"},{"name":"AS Information for a Domain"},{"name":"WHOIS Information for a Domain"},{"name":"Popularity List-Top Million Domains"},{"name":"Search Domain"},{"name":"Cisco Secure Malware Analytics Integration"},{"name":"Secure Access"}],"x-parser-conf":{"overview":{"markdownPath":"secure-access/reference/investigate/investigate-overview.md","uri":"secure-access-api-reference-investigate-api-overview"}},"openapi":"3.0.0","servers":[{"url":"https://api.sse.cisco.com/{basePath}","variables":{"basePath":{"default":"investigate/v2"}}}],"securitySchemes":{"oauthFlow":{"type":"oauth2","description":"The client credential flow.","flows":{"clientCredentials":{"scopes":{"investigate.investigate:read":"Investigate read access","investigate.bulk:read":"Investigate bulk read access"},"tokenUrl":"https://api.sse.cisco.com/auth/v2/token"}}}}},"spec":{"summary":"Get WHOIS Information for Domain","operationId":"getWhois","tags":["WHOIS Information for a Domain","Secure Access"],"description":"Get the WHOIS information for the specified email addresses,\nnameservers, and domains. You can search by multiple email addresses or multiple nameservers.\nThis documentation outlines the following API endpoints:\nemail (single and multiple), domain record (current and historical), and nameserver (single and multiple).\nIn some instances, WHOIS information can be irregular as there are no standards\nbetween domain registrars and large volumes of information can be returned from a query.\nAs such, both the email and nameserver WHOIS endpoints have a limit of 500 results,\nwhich you can reduce to a smaller set of results.\nThere is an `offset` parameter that can be leveraged to retrieve the entire set\nof domain entries for a given email without any limitation. Only the email parameter\nsupports this.\nYou can sort the email parameter by filtering the entries based on the timestamp field.\nIf a domain, email, or nameserver has no known WHOIS information, Investigate returns `HTTP 404`.\nIf a domain, email or nameserver does not exist, Investigate returns `HTTP 404`.\n","parameters":[{"name":"domain","in":"path","required":true,"description":"The domain name without wildcards and including the top-level domain (TLD).","schema":{"type":"string"},"example":"store.cisco.com","$$ref":"#/components/parameters/domain"}],"security":[{"oauthFlow":["investigate.investigate:read"]}],"responses":{"200":{"description":"OK","headers":{"Content-Type":{"schema":{"type":"string"},"description":"The MIME content type of the response body.","example":"application/json","$$ref":"#/components/headers/Content-Type"},"Date":{"schema":{"type":"string","pattern":"^[0-90-90-90-9-0-90-9-0-90-9T0-90-9:0-90-9:0-90-9Z]+$"},"description":"The timestamp of the response.","example":"2023-03-14T18:34:25Z","$$ref":"#/components/headers/Date"}},"content":{"application/json":{"schema":{"type":"array","description":"The list of WHOIS information.","items":{"type":"object","description":"A standard WHOIS response record for a single domain.","properties":{"administrativeContactFax":{"type":"string"},"whoisServers":{"type":"string"},"addresses":{"type":"array","items":{"type":"string"}},"administrativeContactName":{"type":"string"},"zoneContactEmail":{"type":"string"},"billingContactFax":{"type":"string"},"administrativeContactTelephoneExt":{"type":"string"},"administrativeContactEmail":{"type":"string"},"technicalContactEmail":{"type":"string"},"technicalContactFax":{"type":"string"},"nameServers":{"type":"array","items":{"type":"string"}},"zoneContactName":{"type":"string"},"billingContactPostalCode":{"type":"string"},"zoneContactFax":{"type":"string"},"registrantTelephoneExt":{"type":"string"},"zoneContactFaxExt":{"type":"string"},"technicalContactTelephoneExt":{"type":"string"},"billingContactCity":{"type":"string"},"zoneContactStreet":{"type":"array","items":{"type":"string"}},"created":{"type":"string"},"administrativeContactCity":{"type":"string"},"registrantName":{"type":"string"},"zoneContactCity":{"type":"string"},"domainName":{"type":"string"},"zoneContactPostalCode":{"type":"string"},"administrativeContactFaxExt":{"type":"string"},"technicalContactCountry":{"type":"string"},"registrarIANAID":{"type":"string"},"updated":{"type":"string"},"administrativeContactStreet":{"type":"array","items":{"type":"string"}},"billingContactEmail":{"type":"string"},"status":{"type":"array","items":{"type":"string"}},"registrantCity":{"type":"string"},"billingContactCountry":{"type":"string"},"expires":{"type":"string"},"technicalContactStreet":{"type":"array","items":{"type":"string"}},"registrantOrganization":{"type":"string"},"billingContactStreet":{"type":"array","items":{"type":"string"}},"registrarName":{"type":"string"},"registrantPostalCode":{"type":"string"},"zoneContactTelephone":{"type":"string"},"registrantEmail":{"type":"string"},"technicalContactFaxExt":{"type":"string"},"technicalContactOrganization":{"type":"string"},"emails":{"type":"array","items":{"type":"string"}},"registrantStreet":{"type":"array","items":{"type":"string"}},"technicalContactTelephone":{"type":"string"},"technicalContactState":{"type":"string"},"technicalContactCity":{"type":"string"},"registrantFax":{"type":"string"},"registrantCountry":{"type":"string"},"billingContactFaxExt":{"type":"string"},"timestamp":{"type":"integer"},"zoneContactOrganization":{"type":"string"},"administrativeContactCountry":{"type":"string"},"billingContactName":{"type":"string"},"registrantState":{"type":"string"},"registrantTelephone":{"type":"string"},"administrativeContactState":{"type":"string"},"registrantFaxExt":{"type":"string"},"technicalContactPostalCode":{"type":"string"},"zoneContactTelephoneExt":{"type":"string"},"administrativeContactOrganization":{"type":"string"},"billingContactTelephone":{"type":"string"},"billingContactTelephoneExt":{"type":"string"},"zoneContactState":{"type":"string"},"administrativeContactTelephone":{"type":"string"},"billingContactOrganization":{"type":"string"},"technicalContactName":{"type":"string"},"administrativeContactPostalCode":{"type":"string"},"zoneContactCountry":{"type":"string"},"billingContactState":{"type":"string"},"auditUpdatedDate":{"type":"string"}},"example":{"administrativeContactFax":"","whoisServers":"","addresses":["1600 amphitheatre parkway","please contact contact-admin@google.com, 1600 amphitheatre parkway","2400 e. bayshore pkwy"],"administrativeContactName":"DNS Admin","zoneContactEmail":"","billingContactFax":"","administrativeContactTelephoneExt":"","administrativeContactEmail":"dns-admin@google.com","technicalContactEmail":"dns-admin@google.com","technicalContactFax":"16506181499","nameServers":["ns1.google.com","ns2.google.com","ns3.google.com","ns4.google.com"],"zoneContactName":"","billingContactPostalCode":"","zoneContactFax":"","registrantTelephoneExt":"","zoneContactFaxExt":"","technicalContactTelephoneExt":"","billingContactCity":"","zoneContactStreet":[],"created":"","administrativeContactCity":"Mountain View","registrantName":"Dns Admin","zoneContactCity":"","domainName":"google.com","zoneContactPostalCode":"","administrativeContactFaxExt":"","technicalContactCountry":"UNITED STATES","registrarIANAID":"292","updated":"2011-07-20 00:00:00 UTC","administrativeContactStreet":["1600 amphitheatre parkway"],"billingContactEmail":"","status":["clientDeleteProhibited","clientTransferProhibited","clientUpdateProhibited","serverDeleteProhibited","serverTransferProhibited","serverUpdateProhibited"],"registrantCity":"Mountain View","billingContactCountry":"","expires":"2020-09-14 00:00:00 UTC","technicalContactStreet":["2400 e. bayshore pkwy"],"registrantOrganization":"Google Inc.","billingContactStreet":[],"registrarName":"MARKMONITOR INC.","registrantPostalCode":"94043","zoneContactTelephone":"","registrantEmail":"dns-admin@google.com","technicalContactFaxExt":"","technicalContactOrganization":"Google Inc.","emails":["dns-admin@google.com"],"registrantStreet":["please contact contact-admin@google.com","1600 amphitheatre parkway"],"technicalContactTelephone":"16503300100","technicalContactState":"CA","technicalContactCity":"Mountain View","registrantFax":"16506188571","registrantCountry":"UNITED STATES","billingContactFaxExt":"","timestamp":0,"zoneContactOrganization":"","administrativeContactCountry":"UNITED STATES","billingContactName":"","registrantState":"CA","registrantTelephone":"16502530000","administrativeContactState":"CA","registrantFaxExt":"","technicalContactPostalCode":"94043","rawBase64":"","zoneContctTelephoneExt":"","administrativeContactOrganization":"Google Inc.","billingContactTelephone":"","billingContactTelephoneExt":"","zoneContactState":"","administrativeContactTelephone":"16506234000","billingContactOrganization":"","technicalContactName":"DNS Admin","administrativeContactPostalCode":"94043","zoneContactCountry":"","billingContactState":""},"$$ref":"#/components/schemas/WhoisDomain"}},"example":[{"administrativeContactFax":"","whoisServers":"","addresses":["1600 amphitheatre parkway","please contact contact-admin@google.com, 1600 amphitheatre parkway","2400 e. bayshore pkwy"],"administrativeContactName":"DNS Admin","zoneContactEmail":"","billingContactFax":"","administrativeContactTelephoneExt":"","administrativeContactEmail":"dns-admin@google.com","technicalContactEmail":"dns-admin@google.com","technicalContactFax":"16506181499","nameServers":["ns1.google.com","ns2.google.com","ns3.google.com","ns4.google.com"],"zoneContactName":"","billingContactPostalCode":"","zoneContactFax":"","registrantTelephoneExt":"","zoneContactFaxExt":"","technicalContactTelephoneExt":"","billingContactCity":"","zoneContactStreet":[],"created":"","administrativeContactCity":"Mountain View","registrantName":"Dns Admin","zoneContactCity":"","domainName":"google.com","zoneContactPostalCode":"","administrativeContactFaxExt":"","technicalContactCountry":"UNITED STATES","registrarIANAID":"292","updated":"2011-07-20 00:00:00 UTC","administrativeContactStreet":["1600 amphitheatre parkway"],"billingContactEmail":"","status":["clientDeleteProhibited","clientTransferProhibited","clientUpdateProhibited","serverDeleteProhibited","serverTransferProhibited","serverUpdateProhibited"],"registrantCity":"Mountain View","billingContactCountry":"","expires":"2020-09-14 00:00:00 UTC","technicalContactStreet":["2400 e. bayshore pkwy"],"registrantOrganization":"Google Inc.","billingContactStreet":[],"registrarName":"MARKMONITOR INC.","registrantPostalCode":"94043","zoneContactTelephone":"","registrantEmail":"dns-admin@google.com","technicalContactFaxExt":"","technicalContactOrganization":"Google Inc.","emails":["dns-admin@google.com"],"registrantStreet":["please contact contact-admin@google.com","1600 amphitheatre parkway"],"technicalContactTelephone":"16503300100","technicalContactState":"CA","technicalContactCity":"Mountain View","registrantFax":"16506188571","registrantCountry":"UNITED STATES","billingContactFaxExt":"","timestamp":0,"zoneContactOrganization":"","administrativeContactCountry":"UNITED STATES","billingContactName":"","registrantState":"CA","registrantTelephone":"16502530000","administrativeContactState":"CA","registrantFaxExt":"","technicalContactPostalCode":"94043","rawBase64":"","zoneContctTelephoneExt":"","administrativeContactOrganization":"Google Inc.","billingContactTelephone":"","billingContactTelephoneExt":"","zoneContactState":"","administrativeContactTelephone":"16506234000","billingContactOrganization":"","technicalContactName":"DNS Admin","administrativeContactPostalCode":"94043","zoneContactCountry":"","billingContactState":""}]}}},"400":{"description":"Bad Request","headers":{"Content-Type":{"schema":{"type":"string"},"description":"The MIME content type of the response body.","example":"application/json","$$ref":"#/components/headers/Content-Type"},"Date":{"schema":{"type":"string","pattern":"^[0-90-90-90-9-0-90-9-0-90-9T0-90-9:0-90-9:0-90-9Z]+$"},"description":"The timestamp of the response.","example":"2023-03-14T18:34:25Z","$$ref":"#/components/headers/Date"}},"content":{"application/json":{"schema":{"type":"object","properties":{"message":{"type":"string"}}}}},"$$ref":"#/components/responses/400Error"},"401":{"description":"Unauthorized","headers":{"Content-Type":{"schema":{"type":"string"},"description":"The MIME content type of the response body.","example":"application/json","$$ref":"#/components/headers/Content-Type"},"Date":{"schema":{"type":"string","pattern":"^[0-90-90-90-9-0-90-9-0-90-9T0-90-9:0-90-9:0-90-9Z]+$"},"description":"The timestamp of the response.","example":"2023-03-14T18:34:25Z","$$ref":"#/components/headers/Date"}},"content":{"application/json":{"schema":{"type":"object","properties":{"message":{"type":"string"}}}}},"$$ref":"#/components/responses/401Error"},"403":{"description":"Forbidden","headers":{"Content-Type":{"schema":{"type":"string"},"description":"The MIME content type of the response body.","example":"application/json","$$ref":"#/components/headers/Content-Type"},"Date":{"schema":{"type":"string","pattern":"^[0-90-90-90-9-0-90-9-0-90-9T0-90-9:0-90-9:0-90-9Z]+$"},"description":"The timestamp of the response.","example":"2023-03-14T18:34:25Z","$$ref":"#/components/headers/Date"}},"content":{"application/json":{"schema":{"type":"object","properties":{"message":{"type":"string"}}}}},"$$ref":"#/components/responses/403Error"},"404":{"description":"Not Found","headers":{"Content-Type":{"schema":{"type":"string"},"description":"The MIME content type of the response body.","example":"application/json","$$ref":"#/components/headers/Content-Type"},"Date":{"schema":{"type":"string","pattern":"^[0-90-90-90-9-0-90-9-0-90-9T0-90-9:0-90-9:0-90-9Z]+$"},"description":"The timestamp of the response.","example":"2023-03-14T18:34:25Z","$$ref":"#/components/headers/Date"}},"content":{"application/json":{"schema":{"type":"object","properties":{"message":{"type":"string"}}}}},"$$ref":"#/components/responses/404Error"},"500":{"description":"Internal Server Error","headers":{"Content-Type":{"schema":{"type":"string"},"description":"The MIME content type of the response body.","example":"application/json","$$ref":"#/components/headers/Content-Type"},"Date":{"schema":{"type":"string","pattern":"^[0-90-90-90-9-0-90-9-0-90-9T0-90-9:0-90-9:0-90-9Z]+$"},"description":"The timestamp of the response.","example":"2023-03-14T18:34:25Z","$$ref":"#/components/headers/Date"}},"content":{"application/json":{"schema":{"type":"object","properties":{"message":{"type":"string"}}}}},"$$ref":"#/components/responses/500Error"}},"__originalOperationId":"getWhois","method":"get","path":"/whois/{domain}"}}