Provide current and historical ownership information on domains / IPs. Identify all connections between domains, registrants, registrars, and DNS servers.
Look into all current and historical DNS / IP connections between domains and A, MX, NS, and other records. Monitor suspicious changes to DNS records.
Get detailed context on an IP address, including its user’s geolocation, time zone, connected domains, connection type, IP range, ASN, and other network ownership details.
Access our web-based solution to dig into and monitor all domain events of interest.
Get access to a web-based enterprise-grade solution to search and monitor domain registrations and ownership details for branded terms, fuzzy matches, registrants of interest, and more.
Predictive threat intelligence is your best first line of defense. Subscribe to the feeds to strengthen your cybersecurity posture. Contact us today for more information.
Unlock integrated intelligence on Internet properties and their ownership, infrastructure, and other attributes.
Our complete set of domain, IP, and DNS intelligence available via API calls as an annual subscription with predictable pricing.
Offers complete access to WHOIS, IP, DNS, and subdomain data for product enrichment, threat hunting and more.
Talk to our APIs using LLMs. Connect your preferred LLM to WhoisXML API and simply chat about WHOIS, DNS, threat intelligence, and more.
I’m your Domain Intelligence Assistant. I make it easy to explore WHOIS, DNS, and threat data from WhoisXML API — I’m cloud-based, fast, and always ready to help.
WhoisXML API is proud to announce that the false positive rate of its First Watch Malicious Domains Data Feed went down from 3% to 1.66%. This significant reduction in false alarms translates directly into a more efficient, reliable, and trustworthy predictive threat intelligence solution for users, allowing them to block upcoming threats with higher confidence and fewer interruptions.
WhoisXML API announces the launch of the Domain Info API, a new cyber intelligence solution designed to deliver a single, enriched WHOIS record for any active or expired domain name by leveraging WhoisXML API’s massive historical WHOIS database. The Domain Info API automatically fills in WHOIS fields that are redacted or missing for any domain name, using the latest available historical data.
WhoisXML API announces the launch of its MCP server that allows large language models (LLMs) to query 17 of its APIs, enabling users to access unique internet infrastructure intelligence data, run bulk queries and conduct complex internet infrastructure research projects directly from the chatbot interface using natural language.
The MCP server is software that enables the use of the Model Context Protocol, an open standard that enables LLMs and other AI systems to securely connect to external data sources. The protocol uses a client-server architecture, where the client is the AI application that connects to the MCP server.
We are excited to announce that a protocol selector has been added to WHOIS Lookup and WHOIS Search (on Domain Research Suite), giving users more flexibility to choose how to retrieve domain registration data.
With this new feature, users can select from three protocols—RDAP, WHOIS, and Auto.
We’re excited to introduce upgraded web tool interfaces with enhanced data access across all our lookup tools. The improved GUIs are designed to make your lookup reports richer and simpler to use for investigations and testing, improving how technical and nontechnical users access and utilize domain, DNS, IP, and other cyber data accessible through this complete list of our lookup tools.
Here are the new features available to all logged-in users with credits.
In line with our commitment to continuous improvement, we recently expanded the data coverage of Subdomains Database Download from an average of 2.3 billion to more than 9.6 billion subdomain records, as seen in our latest weekly full files. This coverage enhancement is a direct result of techniques employed to optimize data processing and storage efficiency, with our development team focusing on improving data indexing and retrieval, as well as enhancing resolving processes—overall enabling faster lookups and more accurate results for our database.
We are excited to announce that our development team has upgraded Real-Time Domain Registration Streaming to include a feature called “includeCandidates,” an optional Boolean parameter that allows users to immediately obtain simplified domain records directly from zone files before they undergo newly registered domain (NRD) processing.
The candidate records only have two fields, namely, “domainName” and “reason,” where the latter field can be “added” for NRDs or “dropped” for recently removed domains.
We are excited to share that Enterprise and Ultimate subscribers of the Newly Registered Domains (NRD) Data Feed will now have access to past data feed files, giving security professionals deeper context to help trace threat patterns and evolution.
In particular, NRD Enterprise users can access files produced in the past 30 days from their subscription date, while NRD Ultimate users can go as far back as 365 days. With this new enhancement, WhoisXML API users can now use NRD data feeds to:
We are here to listen. For a quick response, please select your request type. By submitting a request, you agree to our Terms of Service and Privacy Policy.
