WhoisXML API Blog

WhoisXML API Joins Code Blue 2025 in Tokyo

Earlier this month, the global cybersecurity community converged in Tokyo, Japan, for Code Blue 2025. WhoisXML API was proud to be part of the conversation, represented by our top executives: Jonathan Zhang (CEO), Ed Gibbs (Vice President of Research), and Ching Chao (Head of APAC and Global Partnerships).

Running from November 16–19, 2025, the event kicked off with two days of intensive, specialized training sessions—covering everything from attacking and defending AI agents to advanced IDA decompiler skills—before diving into the main conference tracks. 

WXA Forum Tokyo 2025 Recap: Japan’s Cyber Leaders Unite for a New Era of DNS-Driven Threat Intelligence

Tokyo, November 2025 — The WXA Forum Tokyo 2025 concluded with remarkable energy and engagement, bringing together more than two dozen C-suite and executive leaders from Japan’s top-tier cybersecurity companies. Leaders from major MSSPs, SOC operators, and enterprise security divisions gathered for an unprecedented deep-dive into the evolving DNS threat landscape — and how Japan can stay ahead of it.

Hosted by WhoisXML API, the forum showcased original research, live case studies, and advanced demonstrations of next-generation DNS, domain, and traffic intelligence. The event highlighted one core message: DNS is no longer just infrastructure — it is the earliest and most universal signal of cyber risk.

WhoisXML API Participates in the 2025 FIRST Mexico City Technical Colloquium

With the cybersecurity landscape constantly evolving, regional gatherings like the 2025 Mexico City Technical Colloquium are vital for incident response professionals. Organized by the Forum of Incident Response and Security Teams (FIRST), the event took place in Mexico City from October 27 to 29, 2025.  

WhoisXML API’s Vice President of Research, Ed Gibbs, was one of the speakers at the gathering. He co-led a session titled "Advanced Signals: NextGen Threat Hunting using Active and Passive DNS and Internet NetFlow Telemetry," along with Ernesto Guzmán, Head of the Digital Forensics and Incident Response team at ES Consulting.

In this post, we share some of the recurring themes and our key takeaways from the event.

WhoisXML API Launches Two-Factor Authentication

WhoisXML API is pleased to announce the addition of support for two-factor authentication (2FA) — an important new security upgrade for user accounts.

WhoisXML API Participates in the BSides Chicago 2025 Conference

Representatives from WhoisXML API joined hundreds of cybersecurity professionals and enthusiasts at the BSides Chicago 2025 conference, held at the Hilton Chicago from October 31 to November 1, 2025.

The WhoisXML API team, including Tara Conneally (Enterprise Partnership Development III), Hanna Frank (Technical Account Executive), and Michael Kaparos (DevSecOps & Threat Researcher), was on site. We participated with a booth alongside vendors from across the cybersecurity community, such as Aikido, Bitwarden, GitGuardian, Guidepoint Security, Push Security, and SecurityScorecard.

What Are Lookalike Domains and How to Detect Them

Can you quickly spot the difference between these two domains: whoisxmlapi[.]com and whoisxrnlapi[.]com? Took you a few seconds, didn’t it? Your eyes can deceive you, and that’s exactly what threat actors hope for when they use lookalike domains. 

Lookalike domains are one of the most effective tools cybercriminals use in modern cyberattacks, tricking people into thinking that they are visiting a legit website or receiving an official business email. 

In this post, we explore what lookalike domains are, how dangerous they can be, and how organizations can detect and protect against them.

5 Domain Name Scams Targeting Website Owners

Your domain name is one of the most valuable digital assets you own. It is your address and a central hub for your business, and because of this, your domain name is a prime target for opportunistic scammers. 

It’s not just about stealing a domain name from you — there are other types of domain name scams. In this post, we discuss some of the most pervasive domain name scams, detailing how each of them works and the steps you can take to avoid falling victim to them. 

October 2025: Domain Activity Highlights

WhoisXML API analyzed 9.6+ million domains registered between 1 and 31 October 2025 to identify the most popular registrars, top-level domain (TLD) extensions, and other global domain registration trends.

We also determined the top TLD extensions used by 38.7+ billion domains from our DNS database’s A record full file dated 4 October 2025.

Next, we studied the top TLDs of 1.1+ million domains detected as indicators of compromise (IoCs) this month.

Finally, we summed up our findings and provided links to the threat reports produced using DNS and domain intelligence sources during the period.