{"type":"api","title":"Get WHOIS Email Information","meta":{"id":"/apps/pubhub/media/legacy-umbrella-api/bf58de618cbb72dda8f39b0414ce94c0a15cd467/f963d12c-70c5-3340-bb7c-d5cff60c643a","info":{"title":"Investigate API","description":"Umbrella Investigate API","version":"1.1.4","contact":{"name":"Cloud Security Developer Community"}},"security":[{"bearerAuth":[]}],"tags":[{"name":"Domain Status and Categorization"},{"name":"Domain Volume"},{"name":"Co-occurrences for a Domain"},{"name":"Passive DNS"},{"name":"Tagging Timeline"},{"name":"Subdomains for a Domain"},{"name":"Related Domains for a Domain"},{"name":"Security Information for a Domain"},{"name":"AS Information for a Domain"},{"name":"WHOIS Information for a Domain"},{"name":"Umbrella Popularity List-Top Million Domains"},{"name":"Search Domain"},{"name":"Cisco Secure Malware Analytics Integration"}],"x-parser-conf":{"overview":{"markdownPath":"investigate/investigate-explorer-overview.md"}},"openapi":"3.0.0","servers":[{"url":"https://investigate.api.umbrella.com"}],"securitySchemes":{"bearerAuth":{"type":"http","scheme":"bearer"}}},"spec":{"summary":"Get WHOIS Email Information","operationId":"getWhoisEmail","tags":["WHOIS Information for a Domain"],"description":"Returns the email address or addresses\nof the registrar for the domain or domains that are looked up. The results include\nthe total number of results for domains\nregistered by this email address and a list of the first 500 (by default) domains\nassociated with this email.\nYou can pivot on the email address to find other malicious domains registered\nby the same email.\nThis endpoint is limited to a maximum of 500 results, which are the first 500 gathered from the database.\nReduce the number of results by setting the `limit` query parameter.\nNote: Several of the samples have been truncated due to length.","parameters":[{"name":"email","in":"path","required":true,"description":"Email address following RFC5322 conventions.","schema":{"type":"string"}},{"name":"limit","in":"query","required":false,"description":"Specify the number of records to return from the collection.\nThe default value is 500.","schema":{"type":"integer","default":500}},{"name":"offset","in":"query","required":false,"description":"A number that represents an index into the collection. By default, the offset is 0 (the first record).","schema":{"type":"integer"},"$$ref":"#/components/parameters/offsetParam"},{"name":"sortField","in":"query","required":false,"description":"Valid values are: 'created', 'updated', 'expires', or 'domainname'.","schema":{"type":"string"},"$$ref":"#/components/parameters/sortFieldParam"}],"responses":{"200":{"description":"Everything worked as expected.","content":{"application/json":{"schema":{"type":"object","properties":{"totalResults":{"type":"integer","description":"Total number of results for this email."},"offset":{"type":"integer"},"moreDataAvailable":{"type":"boolean","description":"Determines if there are more than 500 results for this email."},"limit":{"type":"integer","description":"The total number of results for this page of results. The default\nlimit is 500."},"sortField":{"type":"string"},"domains":{"type":"array","items":{"type":"object","properties":{"domain":{"type":"string"},"current":{"type":"boolean"}},"$$ref":"#/components/schemas/WhoisEmailsAndNameservers"},"description":"Domains registered by this email and if the domain is currently registered\nby this email address."}}},"example":{"dns-admin@google.com":null,"totalResults":500,"moreDataAvailable":true,"limit":500,"domains":[{"domain":"0emm.com","current":true},{"domain":"10tothe100.net","current":true},{"domain":"youtubube.com","current":true},{"domain":"zagat.net","current":true},{"domain":"zagatnyc.com","current":true},{"domain":"zavers.com","current":true}]}}}},"400":{"description":"Invalid request","content":{"application/json":{"schema":{"type":"object","properties":{"message":{"type":"string"}}}}},"$$ref":"#/components/responses/400Error"},"401":{"description":"Unauthorized request","content":{"application/json":{"schema":{"type":"object","properties":{"message":{"type":"string"}}}}},"$$ref":"#/components/responses/401Error"},"403":{"description":"Forbidden","content":{"application/json":{"schema":{"type":"object","properties":{"message":{"type":"string"}}}}},"$$ref":"#/components/responses/403Error"},"404":{"description":"Not Found","content":{"application/json":{"schema":{"type":"object","properties":{"message":{"type":"string"}}}}},"$$ref":"#/components/responses/404Error"},"500":{"description":"Server error","content":{"application/json":{"schema":{"type":"object","properties":{"message":{"type":"string"}}}}},"$$ref":"#/components/responses/500Error"}},"__originalOperationId":"getWhoisEmail","security":[{"bearerAuth":[]}],"method":"get","path":"/whois/emails/{email}"}}