{"type":"api","title":"Get WHOIS Information Search","meta":{"id":"/apps/pubhub/media/cloud-security-apis-in-eft/d2a1854d5c0ed9069a7f0bc54a9b813f3075ddc9/570121d2-76a9-3f3f-bf01-6671496640c5","info":{"title":"Cisco Secure Access Investigate API","description":"The Secure Access Investigate API provides a complete view of domains in relation to IP and autonomous system number (ASN) information.\nYou can get the following domain information:\n\n* Domain status, risk score, and geolocation\n* Number of domain searches\n* Co-occurring domains\n* Subdomains of a domain\n* Tagged timeline of a domain, IP, or URL\n* Security reputation of a domain\n* Top accessed domains\n* WHOIS information for the domain\n* Threat intelligence data for domains, IPs, and URLs\n* Threat intelligence samples by file hash","version":"2.0.0","contact":{"name":"Cloud Security Developer Community"}},"security":[{"oauthFlow":[]}],"tags":[{"name":"Domain Status and Categorization"},{"name":"Domain Volume"},{"name":"Co-occurrences for a Domain"},{"name":"Passive DNS"},{"name":"Tagging Timeline"},{"name":"Subdomains for a Domain"},{"name":"Related Domains for a Domain"},{"name":"Security Information for a Domain"},{"name":"AS Information for a Domain"},{"name":"WHOIS Information for a Domain"},{"name":"Popularity List-Top Million Domains"},{"name":"Search Domain"},{"name":"Cisco Secure Malware Analytics Integration"},{"name":"Secure Access"}],"x-parser-conf":{"overview":{"markdownPath":"secure-access/reference/investigate/investigate-overview.md","uri":"secure-access-api-reference-investigate-api-overview"}},"openapi":"3.0.0","servers":[{"url":"https://api.sse.cisco.com/{basePath}","variables":{"basePath":{"default":"investigate/v2"}}}],"securitySchemes":{"oauthFlow":{"type":"oauth2","description":"The client credential flow.","flows":{"clientCredentials":{"scopes":{"investigate.investigate:read":"Investigate read access","investigate.bulk:read":"Investigate bulk read access"},"tokenUrl":"https://api.sse.cisco.com/auth/v2/token"}}}}},"spec":{"summary":"Get WHOIS Information Search","operationId":"getWhoisSearch","tags":["WHOIS Information for a Domain","Secure Access"],"description":"Performs a regular expression (RegEx) search on the WHOIS data (domain, nameserver, and email fields)\nthat was updated or created in the specified time range.\nReturns a list of ten WHOIS records that match the specified RegEx expression.\nUse the `offset` query parameter to paginate the collection.\nBy default, Investigate sorts by the `updated` field.\n","parameters":[{"name":"searchField","in":"path","required":true,"description":"Specifies the field name to use in the RegEx search.\nValid field names are: `domain`, `nameserver`, and `email`.","schema":{"type":"string","enum":["domain","nameserver","email"]},"example":"domain"},{"name":"regexExpression","in":"path","required":true,"description":"A standard regular expression pattern search.","schema":{"type":"string"},"example":"exa[a-z]ple.com"},{"name":"start","in":"query","required":true,"description":"Specifies a relative or absolute start time. If specifying an absolute time,\nuse an epoch time (Unix time) millisecond timestamp within the last 30 days.\nFilter for data that appears after this time.\nIf specifying a relative time, use either seconds, minutes, hours, days\nor weeks with a minus sign in front.\nAs an example, -1days, -1000minutes, or -2weeks are all valid.\nYou cannot combine timestamps. Only use one of the relative time enumerators per query.","schema":{"type":"string"},"example":"-1days","$$ref":"#/components/parameters/start"},{"name":"stop","in":"query","required":false,"description":"Point in time in the past expressed as a timestamp in milliseconds or relative time.\nFilter for data that appears before this time.\nValid formats: stop=-1days, stop=now, stop=1509642000000. The maximum time range is 30 days.","schema":{"type":"string"},"example":"now","$$ref":"#/components/parameters/stop"},{"name":"limit","in":"query","required":false,"description":"The number of items to return in the response from the collection. The default limit is 10.\nIncrease the limit to request a larger set of data.","schema":{"type":"integer","default":10},"example":25,"$$ref":"#/components/parameters/limitParam"},{"name":"offset","in":"query","required":false,"description":"A number that represents an index in the collection. By default, the offset is 0 (the first record).","schema":{"type":"integer","default":0},"example":2,"$$ref":"#/components/parameters/offsetParam"},{"name":"sortField","in":"query","required":false,"description":"Valid values are: `created`, `updated`, `expires`, or `domainname`.","schema":{"type":"string","enum":["created","updated","expires","domainname"]},"example":"created","$$ref":"#/components/parameters/sortFieldParam"}],"security":[{"oauthFlow":["investigate.investigate:read"]}],"responses":{"200":{"description":"OK","headers":{"Content-Type":{"schema":{"type":"string"},"description":"The MIME content type of the response body.","example":"application/json","$$ref":"#/components/headers/Content-Type"},"Date":{"schema":{"type":"string","pattern":"^[0-90-90-90-9-0-90-9-0-90-9T0-90-9:0-90-9:0-90-9Z]+$"},"description":"The timestamp of the response.","example":"2023-03-14T18:34:25Z","$$ref":"#/components/headers/Date"}},"content":{"application/json":{"schema":{"type":"object","description":"The WHOIS information for a domain.","properties":{"totalResults":{"type":"integer","description":"The total number of results for this search.","example":500},"offset":{"type":"integer","description":"The place to start reading in the collection.","format":"int64","default":0,"example":5,"$$ref":"#/components/schemas/offset"},"moreDataAvailable":{"type":"boolean","description":"Specifies whether there is more than 10 results for this search.","example":true},"limit":{"type":"integer","description":"The total number of results for this page. Default limit is 10.","example":15},"sortField":{"type":"string","description":"The field that is used to sort the collection.","example":"updated"},"records":{"type":"array","description":"The list of WHOIS records.","items":{"type":"object","description":"A standard WHOIS response record for a single domain.","properties":{"administrativeContactFax":{"type":"string"},"whoisServers":{"type":"string"},"addresses":{"type":"array","items":{"type":"string"}},"administrativeContactName":{"type":"string"},"zoneContactEmail":{"type":"string"},"billingContactFax":{"type":"string"},"administrativeContactTelephoneExt":{"type":"string"},"administrativeContactEmail":{"type":"string"},"technicalContactEmail":{"type":"string"},"technicalContactFax":{"type":"string"},"nameServers":{"type":"array","items":{"type":"string"}},"zoneContactName":{"type":"string"},"billingContactPostalCode":{"type":"string"},"zoneContactFax":{"type":"string"},"registrantTelephoneExt":{"type":"string"},"zoneContactFaxExt":{"type":"string"},"technicalContactTelephoneExt":{"type":"string"},"billingContactCity":{"type":"string"},"zoneContactStreet":{"type":"array","items":{"type":"string"}},"created":{"type":"string"},"administrativeContactCity":{"type":"string"},"registrantName":{"type":"string"},"zoneContactCity":{"type":"string"},"domainName":{"type":"string"},"zoneContactPostalCode":{"type":"string"},"administrativeContactFaxExt":{"type":"string"},"technicalContactCountry":{"type":"string"},"registrarIANAID":{"type":"string"},"updated":{"type":"string"},"administrativeContactStreet":{"type":"array","items":{"type":"string"}},"billingContactEmail":{"type":"string"},"status":{"type":"array","items":{"type":"string"}},"registrantCity":{"type":"string"},"billingContactCountry":{"type":"string"},"expires":{"type":"string"},"technicalContactStreet":{"type":"array","items":{"type":"string"}},"registrantOrganization":{"type":"string"},"billingContactStreet":{"type":"array","items":{"type":"string"}},"registrarName":{"type":"string"},"registrantPostalCode":{"type":"string"},"zoneContactTelephone":{"type":"string"},"registrantEmail":{"type":"string"},"technicalContactFaxExt":{"type":"string"},"technicalContactOrganization":{"type":"string"},"emails":{"type":"array","items":{"type":"string"}},"registrantStreet":{"type":"array","items":{"type":"string"}},"technicalContactTelephone":{"type":"string"},"technicalContactState":{"type":"string"},"technicalContactCity":{"type":"string"},"registrantFax":{"type":"string"},"registrantCountry":{"type":"string"},"billingContactFaxExt":{"type":"string"},"timestamp":{"type":"integer"},"zoneContactOrganization":{"type":"string"},"administrativeContactCountry":{"type":"string"},"billingContactName":{"type":"string"},"registrantState":{"type":"string"},"registrantTelephone":{"type":"string"},"administrativeContactState":{"type":"string"},"registrantFaxExt":{"type":"string"},"technicalContactPostalCode":{"type":"string"},"zoneContactTelephoneExt":{"type":"string"},"administrativeContactOrganization":{"type":"string"},"billingContactTelephone":{"type":"string"},"billingContactTelephoneExt":{"type":"string"},"zoneContactState":{"type":"string"},"administrativeContactTelephone":{"type":"string"},"billingContactOrganization":{"type":"string"},"technicalContactName":{"type":"string"},"administrativeContactPostalCode":{"type":"string"},"zoneContactCountry":{"type":"string"},"billingContactState":{"type":"string"},"auditUpdatedDate":{"type":"string"}},"example":{"administrativeContactFax":"","whoisServers":"","addresses":["1600 amphitheatre parkway","please contact contact-admin@google.com, 1600 amphitheatre parkway","2400 e. bayshore pkwy"],"administrativeContactName":"DNS Admin","zoneContactEmail":"","billingContactFax":"","administrativeContactTelephoneExt":"","administrativeContactEmail":"dns-admin@google.com","technicalContactEmail":"dns-admin@google.com","technicalContactFax":"16506181499","nameServers":["ns1.google.com","ns2.google.com","ns3.google.com","ns4.google.com"],"zoneContactName":"","billingContactPostalCode":"","zoneContactFax":"","registrantTelephoneExt":"","zoneContactFaxExt":"","technicalContactTelephoneExt":"","billingContactCity":"","zoneContactStreet":[],"created":"","administrativeContactCity":"Mountain View","registrantName":"Dns Admin","zoneContactCity":"","domainName":"google.com","zoneContactPostalCode":"","administrativeContactFaxExt":"","technicalContactCountry":"UNITED STATES","registrarIANAID":"292","updated":"2011-07-20 00:00:00 UTC","administrativeContactStreet":["1600 amphitheatre parkway"],"billingContactEmail":"","status":["clientDeleteProhibited","clientTransferProhibited","clientUpdateProhibited","serverDeleteProhibited","serverTransferProhibited","serverUpdateProhibited"],"registrantCity":"Mountain View","billingContactCountry":"","expires":"2020-09-14 00:00:00 UTC","technicalContactStreet":["2400 e. bayshore pkwy"],"registrantOrganization":"Google Inc.","billingContactStreet":[],"registrarName":"MARKMONITOR INC.","registrantPostalCode":"94043","zoneContactTelephone":"","registrantEmail":"dns-admin@google.com","technicalContactFaxExt":"","technicalContactOrganization":"Google Inc.","emails":["dns-admin@google.com"],"registrantStreet":["please contact contact-admin@google.com","1600 amphitheatre parkway"],"technicalContactTelephone":"16503300100","technicalContactState":"CA","technicalContactCity":"Mountain View","registrantFax":"16506188571","registrantCountry":"UNITED STATES","billingContactFaxExt":"","timestamp":0,"zoneContactOrganization":"","administrativeContactCountry":"UNITED STATES","billingContactName":"","registrantState":"CA","registrantTelephone":"16502530000","administrativeContactState":"CA","registrantFaxExt":"","technicalContactPostalCode":"94043","rawBase64":"","zoneContctTelephoneExt":"","administrativeContactOrganization":"Google Inc.","billingContactTelephone":"","billingContactTelephoneExt":"","zoneContactState":"","administrativeContactTelephone":"16506234000","billingContactOrganization":"","technicalContactName":"DNS Admin","administrativeContactPostalCode":"94043","zoneContactCountry":"","billingContactState":""},"$$ref":"#/components/schemas/WhoisDomain"},"example":[{"administrativeContactFax":"","whoisServers":"","addresses":["1600 amphitheatre parkway","please contact contact-admin@google.com, 1600 amphitheatre parkway","2400 e. bayshore pkwy"],"administrativeContactName":"DNS Admin","zoneContactEmail":"","billingContactFax":"","administrativeContactTelephoneExt":"","administrativeContactEmail":"dns-admin@google.com","technicalContactEmail":"dns-admin@google.com","technicalContactFax":"16506181499","nameServers":["ns1.google.com","ns2.google.com","ns3.google.com","ns4.google.com"],"zoneContactName":"","billingContactPostalCode":"","zoneContactFax":"","registrantTelephoneExt":"","zoneContactFaxExt":"","technicalContactTelephoneExt":"","billingContactCity":"","zoneContactStreet":[],"created":"","administrativeContactCity":"Mountain View","registrantName":"Dns Admin","zoneContactCity":"","domainName":"google.com","zoneContactPostalCode":"","administrativeContactFaxExt":"","technicalContactCountry":"UNITED STATES","registrarIANAID":"292","updated":"2011-07-20 00:00:00 UTC","administrativeContactStreet":["1600 amphitheatre parkway"],"billingContactEmail":"","status":["clientDeleteProhibited","clientTransferProhibited","clientUpdateProhibited","serverDeleteProhibited","serverTransferProhibited","serverUpdateProhibited"],"registrantCity":"Mountain View","billingContactCountry":"","expires":"2020-09-14 00:00:00 UTC","technicalContactStreet":["2400 e. bayshore pkwy"],"registrantOrganization":"Google Inc.","billingContactStreet":[],"registrarName":"MARKMONITOR INC.","registrantPostalCode":"94043","zoneContactTelephone":"","registrantEmail":"dns-admin@google.com","technicalContactFaxExt":"","technicalContactOrganization":"Google Inc.","emails":["dns-admin@google.com"],"registrantStreet":["please contact contact-admin@google.com","1600 amphitheatre parkway"],"technicalContactTelephone":"16503300100","technicalContactState":"CA","technicalContactCity":"Mountain View","registrantFax":"16506188571","registrantCountry":"UNITED STATES","billingContactFaxExt":"","timestamp":0,"zoneContactOrganization":"","administrativeContactCountry":"UNITED STATES","billingContactName":"","registrantState":"CA","registrantTelephone":"16502530000","administrativeContactState":"CA","registrantFaxExt":"","technicalContactPostalCode":"94043","rawBase64":"","zoneContctTelephoneExt":"","administrativeContactOrganization":"Google Inc.","billingContactTelephone":"","billingContactTelephoneExt":"","zoneContactState":"","administrativeContactTelephone":"16506234000","billingContactOrganization":"","technicalContactName":"DNS Admin","administrativeContactPostalCode":"94043","zoneContactCountry":"","billingContactState":""}]}}},"example":{"totalResults":500,"offset":0,"moreDataAvailable":true,"limit":10,"sortField":"updated","records":[{"administrativeContactFax":"","whoisServers":"","addresses":["1600 amphitheatre parkway","please contact contact-admin@google.com, 1600 amphitheatre parkway","2400 e. bayshore pkwy"],"administrativeContactName":"DNS Admin","zoneContactEmail":"","billingContactFax":"","administrativeContactTelephoneExt":"","administrativeContactEmail":"dns-admin@google.com","technicalContactEmail":"dns-admin@google.com","technicalContactFax":"16506181499","nameServers":["ns1.google.com","ns2.google.com","ns3.google.com","ns4.google.com"],"zoneContactName":"","billingContactPostalCode":"","zoneContactFax":"","registrantTelephoneExt":"","zoneContactFaxExt":"","technicalContactTelephoneExt":"","billingContactCity":"","zoneContactStreet":[],"created":"","administrativeContactCity":"Mountain View","registrantName":"Dns Admin","zoneContactCity":"","domainName":"google.com","zoneContactPostalCode":"","administrativeContactFaxExt":"","technicalContactCountry":"UNITED STATES","registrarIANAID":"292","updated":"2011-07-20 00:00:00 UTC","administrativeContactStreet":["1600 amphitheatre parkway"],"billingContactEmail":"","status":["clientDeleteProhibited","clientTransferProhibited","clientUpdateProhibited","serverDeleteProhibited","serverTransferProhibited","serverUpdateProhibited"],"registrantCity":"Mountain View","billingContactCountry":"","expires":"2020-09-14 00:00:00 UTC","technicalContactStreet":["2400 e. bayshore pkwy"],"registrantOrganization":"Google Inc.","billingContactStreet":[],"registrarName":"MARKMONITOR INC.","registrantPostalCode":"94043","zoneContactTelephone":"","registrantEmail":"dns-admin@google.com","technicalContactFaxExt":"","technicalContactOrganization":"Google Inc.","emails":["dns-admin@google.com"],"registrantStreet":["please contact contact-admin@google.com","1600 amphitheatre parkway"],"technicalContactTelephone":"16503300100","technicalContactState":"CA","technicalContactCity":"Mountain View","registrantFax":"16506188571","registrantCountry":"UNITED STATES","billingContactFaxExt":"","timestamp":0,"zoneContactOrganization":"","administrativeContactCountry":"UNITED STATES","billingContactName":"","registrantState":"CA","registrantTelephone":"16502530000","administrativeContactState":"CA","registrantFaxExt":"","technicalContactPostalCode":"94043","rawBase64":"","zoneContctTelephoneExt":"","administrativeContactOrganization":"Google Inc.","billingContactTelephone":"","billingContactTelephoneExt":"","zoneContactState":"","administrativeContactTelephone":"16506234000","billingContactOrganization":"","technicalContactName":"DNS Admin","administrativeContactPostalCode":"94043","zoneContactCountry":"","billingContactState":""}]}}}},"400":{"description":"Bad Request","headers":{"Content-Type":{"schema":{"type":"string"},"description":"The MIME content type of the response body.","example":"application/json","$$ref":"#/components/headers/Content-Type"},"Date":{"schema":{"type":"string","pattern":"^[0-90-90-90-9-0-90-9-0-90-9T0-90-9:0-90-9:0-90-9Z]+$"},"description":"The timestamp of the response.","example":"2023-03-14T18:34:25Z","$$ref":"#/components/headers/Date"}},"content":{"application/json":{"schema":{"type":"object","properties":{"message":{"type":"string"}}}}},"$$ref":"#/components/responses/400Error"},"401":{"description":"Unauthorized","headers":{"Content-Type":{"schema":{"type":"string"},"description":"The MIME content type of the response body.","example":"application/json","$$ref":"#/components/headers/Content-Type"},"Date":{"schema":{"type":"string","pattern":"^[0-90-90-90-9-0-90-9-0-90-9T0-90-9:0-90-9:0-90-9Z]+$"},"description":"The timestamp of the response.","example":"2023-03-14T18:34:25Z","$$ref":"#/components/headers/Date"}},"content":{"application/json":{"schema":{"type":"object","properties":{"message":{"type":"string"}}}}},"$$ref":"#/components/responses/401Error"},"403":{"description":"Forbidden","headers":{"Content-Type":{"schema":{"type":"string"},"description":"The MIME content type of the response body.","example":"application/json","$$ref":"#/components/headers/Content-Type"},"Date":{"schema":{"type":"string","pattern":"^[0-90-90-90-9-0-90-9-0-90-9T0-90-9:0-90-9:0-90-9Z]+$"},"description":"The timestamp of the response.","example":"2023-03-14T18:34:25Z","$$ref":"#/components/headers/Date"}},"content":{"application/json":{"schema":{"type":"object","properties":{"message":{"type":"string"}}}}},"$$ref":"#/components/responses/403Error"},"404":{"description":"Not Found","headers":{"Content-Type":{"schema":{"type":"string"},"description":"The MIME content type of the response body.","example":"application/json","$$ref":"#/components/headers/Content-Type"},"Date":{"schema":{"type":"string","pattern":"^[0-90-90-90-9-0-90-9-0-90-9T0-90-9:0-90-9:0-90-9Z]+$"},"description":"The timestamp of the response.","example":"2023-03-14T18:34:25Z","$$ref":"#/components/headers/Date"}},"content":{"application/json":{"schema":{"type":"object","properties":{"message":{"type":"string"}}}}},"$$ref":"#/components/responses/404Error"},"500":{"description":"Internal Server Error","headers":{"Content-Type":{"schema":{"type":"string"},"description":"The MIME content type of the response body.","example":"application/json","$$ref":"#/components/headers/Content-Type"},"Date":{"schema":{"type":"string","pattern":"^[0-90-90-90-9-0-90-9-0-90-9T0-90-9:0-90-9:0-90-9Z]+$"},"description":"The timestamp of the response.","example":"2023-03-14T18:34:25Z","$$ref":"#/components/headers/Date"}},"content":{"application/json":{"schema":{"type":"object","properties":{"message":{"type":"string"}}}}},"$$ref":"#/components/responses/500Error"}},"__originalOperationId":"getWhoisSearch","method":"get","path":"/whois/search/{searchField}/{regexExpression}"}}