Skip to content

Base Search Parameters

Base search parameters can be used independently or combined with other base parameters and filter parameters.

Parameter Reference

Parameter Description WHOIS/RDAP Fields Search Compare To
adsense Google AdSense tracking code
baidu_analytics Baidu analytics code
contact_name Contact name from domain registration data Yes
contact_phone Contact street address from domain registration data Yes
contact_street Contact street address from domain registration data Yes
domain Apex domain
email Email address from the most recently available WHOIS record, DNS SOA record or SSL certificate Yes (for registration emails) Reverse WHOIS
email_dns_soa DNS SOA email
email_domain Apex domain portion of a WHOIS or DNS SOA email address Yes (for registration emails) Reverse WHOIS
facebook Facebook/Meta tracking code
google_analytics Google Analytics tracking code
google_analytics_4 Google Analytics 4 tracking code
google_tag_manager Google Tag Manager tracking code
historical_email Email addresses from historical WHOIS records
historical_free_text Free text search of a domain's historical WHOIS records - compare to whois
historical_registrant Registrant names from historical WHOIS records
hotjar Hotjar tracking code
iana_id Registrar IANA code from most recent RDAP record for a domain
ip IPv4 address the registered domain was last known to point to during an active DNS check Reverse IP
mailserver_domain Only the registered domain portion of the mail server (domaintools.net)
mailserver_host Fully-qualified host name of the mail server (mx.domaintools.net) Reverse MX
mailserver_ip IP address of the mail server
matomo Matomo tracking code
nameserver_domain Registered domain portion of the name server (domaintools.net) Reverse Nameserver
nameserver_host Fully-qualified host name of the name server (ns1.domaintools.net)
nameserver_ip IP address of the name server
redirect_domain Find domains observed to redirect to another domain name
registrant Substring search on the WHOIS registrant field Yes Reverse WHOIS
registrant_org Substring search on the WHOIS registrant org field Yes Reverse WHOIS
registrar Exact match to the WHOIS registrar field Yes Reverse WHOIS
search_hash Encoded search from the Iris Investigate UI
server_type Most recent server type retrieved from screenshot gathering
ssl_alt_names Query elements/labels from a list of domains/subdomains in certificate Subject Alt Name lists
ssl_common_name Certificate Common Name
ssl_duration Certificate validity duration, in number of days
ssl_email Email address from the SSL certificate
ssl_hash SSL certificate SHA-1 hash
ssl_issuer_common_name Certificate issuer Common Name
ssl_org Exact match to the organization name on the SSL certificate
ssl_subject Subject field from the SSL certificate
statcounter_project Statcounter Project tracker code
statcounter_security Statcounter Security tracker code
tagged_with_all Domain tagged with all tags
tagged_with_any Domains tagged with a specific Iris Tag
website_title HTML title from most recent screenshot
whois Free text search of a domain's most recent WHOIS record - compare to historical_free_text
yandex_metrica Yandex tracker code

Usage Examples

Search by IP Address

https://api.domaintools.com/v1/iris-investigate/?ip=199.30.228.112

Search by Email Domain

https://api.domaintools.com/v1/iris-investigate/?email_domain=example.com

Search by SSL Hash

https://api.domaintools.com/v1/iris-investigate/?ssl_hash=abc123def456

Combine Multiple Parameters

Search for domains with a specific IP and nameserver:

https://api.domaintools.com/v1/iris-investigate/?ip=199.30.228.112&nameserver_domain=example.com

See Also