Skip to main content

Request Domain Information.

POST 
/v1/domain/info

A POST request to retrieve general information about the specified domains, including WHOIS information, PassiveDNS, DNS Security / PAN-DB category, and the DGA score.

⚠️ Batch limit is 20 entries

Request​

Body

required
    domains object[]required

    Possible values: <= 20

    Provides a list of domain object details by matching it with the information contained in the DNS Security cloud database.

  • Array [
    • domain stringrequired

    Possible values: <= 253 characters

    The domain name you want to query

  • ]
    • end string

    Possible values: Value must match regular expression YYYY-mm-dd

    A user-specified end date of PassiveDNS records. UTC date in YYYY-mm-dd format, start cannot be later than End. Defaults to 6 months after start date if provided, otherwise current date.

    ⚠️ Passive DNS records are displayed under the IP Histories entry in the output.

    start string

    Possible values: Value must match regular expression YYYY-mm-dd

    A user-specified start date of PassiveDNS records. UTC date in YYYY-mm-dd format, start cannot be later than end. Defaults to 6 months before end date if provided, otherwise 6 months before current date.

    ⚠️ Passive DNS records are displayed under the IP Histories entry in the output.

Responses​

200 Ok

Response Headers
  • X-Quota-Limit-Remaining integer

    The remaining number of quota in this window (per day). When it drops to 0, return HTTP StatusCode = 429

  • X-Quota-Limit-Reset integer

    The unix timestamp at which the current quota window resets. Quota is refreshed every day.

  • X-Quota-Limit-Total integer

    Total number of quota in this window (per day).

Schema
    message string

    If "success" is true, the message should be empty.

    results object[]

    The list of result object.

  • Array [
    • category string

    Domain category from DNS and PanDB.

    categoryHistories object[]

    A list of history category information from PanDB.

  • Array [
    • category string

    The history category from PanDB

    evidences string[]

    A list of evidences supporting the category.

    time string

    The time when the category is published.

  • ]
    • dgaScore double

    The score of DGA domain.

    domain string

    The domain name queried.

    ipHistories object[]

    A list of history DNS records of the domain from PassiveDNS.

  • Array [
    • asn object
    ASName string

    The Autonomous System Name of the IP

    ASNumber int64

    The Autonomous System Number of the IP

    count uint64

    The number of DNS records that we had seen was resolving the given domain in PassiveDNS.

    first string

    The first seen date time of the DNS record. UTC datetime in "YYYY-mm-dd HH:mm:ss" format.

    geo object
    countryCode string

    Country code associated with the IP.

    countryName string

    Country name associated with the IP.

    ip string

    DNS record. IPv4 or IPv6.

    last string

    The last seen date time of the DNS record. UTC datetime in "YYYY-mm-dd HH:mm:ss" format.

    type string

    Type of the DNS record. We only support A(IPv4) and AAAA(IPv6) type.

  • ]
    • whoisRecords object[]

    A list of records of the domain from Whois.

  • Array [
    • Audit_auditUpdatedDate string RegistryData_rawText = 13 [json_name = "RegistryData_rawText"]; // remove this in the return to customer string WhoisRecord_rawText = 14 [json_name = "WhoisRecord_rawText"]; // remove this in the return to customer (string)
    administrativeContact_city string
    administrativeContact_country string
    administrativeContact_email string administrativeContact_rawText = 27 [json_name = "administrativeContact_rawText"]; (string)
    administrativeContact_fax string
    administrativeContact_name string
    administrativeContact_organization string
    administrativeContact_postalCode string
    administrativeContact_state string
    administrativeContact_telephone string
    contactEmail string
    createdDate string
    domainName string
    expiresDate string
    nameServers string
    registrant_city string
    registrant_country string
    registrant_email string registrant_rawText = 16 [json_name = "registrant_rawText"]; (string)
    registrant_fax string
    registrant_name string
    registrant_organization string
    registrant_postalCode string
    registrant_state string
    registrant_street1 string
    registrant_telephone string
    registrarIANAID string
    registrarName string
    standardRegCreatedDate string
    standardRegExpiresDate string
    standardRegUpdatedDate string
    status string
    technicalContact_city string
    technicalContact_country string
    technicalContact_email string technicalContact_rawText = 37 [json_name = "technicalContact_rawText"]; (string)
    technicalContact_fax string
    technicalContact_name string
    technicalContact_organization string
    technicalContact_postalCode string
    technicalContact_state string
    technicalContact_telephone string
    updatedDate string
    whoisServer string
  • ]
  • ]
    • success boolean
Loading...