Skip to content

Base search parameters

Base search parameters can be used independently or combined with other base parameters and filter parameters.

Parameter Reference

Parameter	Description	WHOIS/RDAP Fields Search	Compare To
`adsense`	Google AdSense tracking code
`baidu_analytics`	Baidu analytics code
`contact_name`	Contact name from domain registration data	Yes
`contact_phone`	Contact phone number from domain registration data	Yes
`contact_street`	Contact street address from domain registration data	Yes
`domain`	Apex domain
`email`	Email address from the most recently available WHOIS record, DNS SOA record or SSL certificate	Yes (for registration emails)	Reverse WHOIS
`email_dns_soa`	DNS SOA email
`email_domain`	Apex domain portion of a WHOIS or DNS SOA email address	Yes (for registration emails)	Reverse WHOIS
`facebook`	Facebook/Meta tracking code
`google_analytics`	Google Analytics tracking code
`ga4`	Google Analytics 4 tracking code
`google_tag_manager`	Google Tag Manager tracking code
`historical_email`	Email addresses from historical WHOIS records
`historical_free_text`	Free text search of a domain’s historical WHOIS records - compare to `whois`
`historical_registrant`	Registrant names from historical WHOIS records
`hotjar`	Hotjar tracking code
`iana_id`	Registrar IANA code from most recent RDAP record for a domain
`ip`	IPv4 address the registered domain was last known to point to during an active DNS check		Reverse IP
`mailserver_domain`	Only the registered domain portion of the mail server (domaintools.net)
`mailserver_host`	Fully-qualified host name of the mail server (mx.domaintools.net)		Reverse MX
`mailserver_ip`	IP address of the mail server
`matomo`	Matomo tracking code
`nameserver_domain`	Registered domain portion of the name server (domaintools.net)		Reverse Nameserver
`nameserver_host`	Fully-qualified host name of the name server (ns1.domaintools.net)
`nameserver_ip`	IP address of the name server
`redirect_domain`	Find domains observed to redirect to another domain name
`registrant`	Substring search on the WHOIS registrant field	Yes	Reverse WHOIS
`registrant_org`	Substring search on the WHOIS registrant org field	Yes	Reverse WHOIS
`registrar`	Exact match to the WHOIS registrar field	Yes	Reverse WHOIS
`search_hash`	Encoded search from the Iris Investigate UI
`server_type`	Most recent server type retrieved from screenshot gathering
`ssl_alt_names`	Query elements/labels from a list of domains/subdomains in certificate Subject Alt Name lists
`ssl_common_name`	Certificate Common Name
`ssl_duration`	Certificate validity duration, in number of days
`ssl_email`	Email address from the SSL certificate
`ssl_hash`	SSL certificate SHA-1 hash
`ssl_issuer_common_name`	Certificate issuer Common Name
`ssl_org`	Exact match to the organization name on the SSL certificate
`ssl_subject`	Subject field from the SSL certificate
`statcounter_project`	Statcounter Project tracker code
`statcounter_security`	Statcounter Security tracker code
`tagged_with_all`	Domain tagged with all tags
`tagged_with_any`	Domains tagged with a specific Iris Tag
`website_title`	HTML title from most recent screenshot
`whois`	Free text search of a domain’s most recent WHOIS record - compare to `historical_free_text`
`yandex_metrica`	Yandex tracker code

Usage Examples

Search by IP Address

https://api.domaintools.com/v1/iris-investigate/?ip=199.30.228.112

Search by Email Domain

https://api.domaintools.com/v1/iris-investigate/?email_domain=example.com

Search by SSL Hash

https://api.domaintools.com/v1/iris-investigate/?ssl_hash=abc123def456

Combine Multiple Parameters

Search for domains with a specific IP and nameserver:

https://api.domaintools.com/v1/iris-investigate/?ip=199.30.228.112&nameserver_domain=example.com

See Also

Filter Parameters - Refine your searches with filters
Search Overview - Learn about search capabilities
RDAP and WHOIS Search - Search within parsed registration data