Domain Search & Whois Lookup API
Instantly perform advanced searches on previously analyzed domains. Retrieve comprehensive Whois data, trust scores, and malware status to identify threats and verify domain safety.
How to Use?
Request:
Use the following parameters to customize your search:
| Field | Type | Required | Description |
|---|---|---|---|
| apikey | String | Yes | Your unique API key that authenticates requests to our services. |
| q | String | Yes* (for simple search) | The search query (part or whole domain name, IP address, tags, etc.). |
| domain | String | No* (for advanced search) | Search by domain name. Supports partial matching. |
| detect | String | No* (for advanced search) | Search by detection category (e.g., "Scam Website", "Phishing"). |
| tags | String | No* (for advanced search) | Search by tags (e.g., "Cryptocurrency", "Shopping"). |
| fingerprint | String | No* (for advanced search) | Search by fingerprint hash or pattern. |
| hosts | String | No* (for advanced search) | Search by IP address. |
| p | Integer | No | The page number of the results (used for pagination). |
| limit | Integer | No | The number of results to return per page (defaults to 10). |
* Either 'q' for simple search OR at least one advanced search parameter (domain, detect, category, tags, fingerprint, hosts) must be provided.
Examples:
Simple Search:
curl -X GET "https://inspector.gridinsoft.com/api/v1/domain/search?apikey=YOUR_PRIVATE_APIKEY&q=example&p=1&limit=10" \
-H "Accept: application/json"
Advanced Search:
curl -X GET "https://inspector.gridinsoft.com/api/v1/domain/search?apikey=YOUR_PRIVATE_APIKEY&detect=Scam%20Website&domain=.xyz&p=1&limit=10" \
-H "Accept: application/json"
Response:
The response includes pagination details and an array of enriched domain objects.
Response Structure:
| Field | Type | Description |
|---|---|---|
| search_type | String | Type of search performed ("simple" or "advanced"). |
| p | Integer | Current page number. |
| limit | Integer | Maximum results per page. |
| total | Integer | Total number of records matching the query. |
| results | Array | List of domain objects (see below). |
Domain Object Fields:
| Field | Type | Description |
|---|---|---|
| domain | String | The domain name. |
| date | String | Timestamp of the last database update. |
| verdict | String | Security status ("Safe", "Suspicious", "Malicious"). |
| reputation | Integer | Security score (0-100). Higher is safer. |
| fingerprint | String | Behavioral fingerprint hash. |
| report | String | Link to the full interactive virus report. |
| hosting | Object | Server information (IP, Provider, Location). |
| whois | Object | Registration data (Registrar, Created/Expires dates). |
| site | Object | Website metadata and risk-based categorization tags. |
Simple Search Response:
Simple search includes the q field containing your original query string.
{
"search_type": "simple",
"q": "gridinsoft.com",
"results": [ ... ],
"p": 1,
"limit": 10,
"total": 9
}
Advanced Search Response:
Advanced search replaces q with a params object containing all filters applied.
{
"search_type": "advanced",
"params": {
"detect": "Malware",
"domain": ".xyz"
},
"results": [ ... ],
"p": 1,
"limit": 10,
"total": 25
}
Each result will provide detailed information about the domain, including hosting details, WHOIS data, and site metadata.