WhoisXML API Blog

KEY POINT: The year 3000 and beyond  is generally a sentinel date: a machine-readable way to say “do not run the normal lifecycle timer while this operation awaits a decision.” It is not a centuries-long registration.

When a registrar submits a domain-registration request, the answer is normally immediate: the registry either creates the domain or rejects the command. Some registrations, however, require additional review. The registry may need to verify eligibility, obtain third-party approval, enforce a reserved-name policy, or investigate a request that triggered an administrative rule.

TL;DR

• The upgraded WHOIS API runs real-time lookups with improved parsing accuracy.
• It’s now 2x faster than before. 
• Account rate limits now go up to 200 requests per second, up from 50.
• Control the cache freshness and choose the protocol used to retrieve domain registration data.
• Some changes may affect how you integrate.

WhoisXML API analyzed 11.1+ million domains registered between 1 and 31 July 2026 that appeared in Newly Registered Domains to identify the most popular registrars, TLD extensions, and other global domain registration trends. This number rose by 20.1% from 9.2+ million NRDs last month.

We also determined the top TLD extensions used by 1.9+ million domains likely registered with malicious intent from the First Watch Malicious Domains Data Feed in July 2026. This number decreased by 1.1% from the previous month.

Most often, SSL/TLS certificates are issued for specific websites: one certificate for one hostname or website. But for larger organizations, this creates problems with certificate management — they pile up, they expire at different times, it becomes harder to spot rogue certificates, and so on. 

This problem is solved by so-called SAN certificates, or multi-domain certificates, which can secure multiple domain names or hostnames with the help of the Subject Alternative Names (SAN) field. This post covers what a SAN certificate actually is, how it works, how to get one, and how security teams use SAN data for asset discovery. 

TL;DR

• The Disposable Email Domains Database has been upgraded with a more precise machine learning detection model that reaches 99% tested detection precision.
• It adds scoring for every domain on a scale from 0 to 100, allowing you to set your own block, verify, and allow thresholds based on the score.
• It tracks 162,000+ disposable domains and is refreshed daily in CSV and JSON.

TL;DR

• You can now restrict API requests to a list of trusted IP addresses, so a leaked or shared key alone is no longer enough for unauthorized users to use your API key.
• Enterprise account administrators using Parent-Child API keys can see API usage broken down by individual team member or combined for the whole account.
• Both are available now in your account settings. The IP allowlist is off by default, and your account setup stays the same.