WHOIS Properties

Last published : Oct 12, 2026
WHOIS Agent Client Extension
Provides the results of a WHOIS lookup of the endpoint. Microsoft Windows Microsoft Windows Apple macOS Apple iOS Ubuntu Chrome OS HTML5 Android Unicon™ eLux
Adapter
The name of the network adapter used to query the whois data. Dynamic property with text data type. Persists as LOCAL_WHOIS_ADAPTER for the local agent and REMOTE_WHOIS_ADAPTER for the remote device. ✔️ ✔️ ✔️ ✔️ ✔️ ✔️
Adapter VPN
Determines whether the whois data was queried using a VPN connection. Dynamic property with boolean data type. Persists as LOCAL_WHOIS_ADAPTER_VPN for the local agent and REMOTE_WHOIS_ADAPTER_VPN for the remote device. ✔️ ✔️ ✔️ ✔️ ✔️ ✔️
Country
The country reported by the WHOIS provider. Dynamic property with text data type. Persists as LOCAL_WHOIS_COUNTRY for the local agent and REMOTE_WHOIS_COUNTRY for the remote device. ✔️ ✔️ ✔️ ✔️ ✔️ ✔️
County
The county reported by the WHOIS provider. Dynamic property with text data type. Persists as LOCAL_WHOIS_COUNTY for the local agent and REMOTE_WHOIS_COUNTY for the remote device. ✔️ ✔️ ✔️ ✔️ ✔️ ✔️
DNS
The results of a DNS lookup of the IP address. Dynamic property with text data type. Persists as LOCAL_WHOIS_DNS for the local agent and REMOTE_WHOIS_DNS for the remote device. ✔️ ✔️ ✔️ ✔️ ✔️ ✔️
IP
The public IP address of the remote device. Dynamic property with ip, text data types. Persists as LOCAL_WHOIS_IP for the local agent and REMOTE_WHOIS_IP for the remote device. ✔️ ✔️ ✔️ ✔️ ✔️ ✔️
ISP
The ISP reported by the WHOIS provider. Dynamic property with text data type. Persists as LOCAL_WHOIS_ISP for the local agent and REMOTE_WHOIS_ISP for the remote device. ✔️ ✔️ ✔️ ✔️ ✔️ ✔️
Provider
The provider used to query the WHOIS results. Dynamic property with enum data type with options IP2Location, MaxMind. Persists as LOCAL_WHOIS_PROVIDER for the local agent and REMOTE_WHOIS_PROVIDER for the remote device. ✔️ ✔️ ✔️ ✔️ ✔️ ✔️
Proxy
Set to true if a proxy is reported by the WHOIS provider. Dynamic property with boolean data type. Persists as LOCAL_WHOIS_PROXY for the local agent and REMOTE_WHOIS_PROXY for the remote device. ✔️ ✔️ ✔️ ✔️ ✔️ ✔️
Proxy Type
The type of proxy in use as reported by the WHOIS provider. Dynamic property with enum data type with options VPN, TOR, Hosted, Public, Residential. Persists as LOCAL_WHOIS_PROXY_TYPE for the local agent and REMOTE_WHOIS_PROXY_TYPE for the remote device. ✔️ ✔️ ✔️ ✔️ ✔️ ✔️
State
The state reported by the WHOIS provider. Dynamic property with text data type. Persists as LOCAL_WHOIS_STATE for the local agent and REMOTE_WHOIS_STATE for the remote device. ✔️ ✔️ ✔️ ✔️ ✔️ ✔️
Town
The town reported by the WHOIS provider. Dynamic property with text data type. Persists as LOCAL_WHOIS_TOWN for the local agent and REMOTE_WHOIS_TOWN for the remote device. ✔️ ✔️ ✔️ ✔️ ✔️ ✔️
Usage
A classification of the IP address as reported by the WHOIS provider. Dynamic property with text data type. Persists as LOCAL_WHOIS_USAGE for the local agent and REMOTE_WHOIS_USAGE for the remote device. ✔️ ✔️ ✔️ ✔️ ✔️ ✔️