WhoisXML API Blog

Whether you call it SSL or TLS (yes, everybody’s actually using Transport Layer Security nowadays, but SSL stuck around the way Kleenex did for tissues), the protocol that secures communications between a host and a server is critical for the modern web and yet it can fail in more ways than most people realize. 

In this post, we cover the different SSL security threats, their consequences, and how to reduce the risks.

WhoisXML API analyzed 11.6+ million domains registered between 1 and 31 August 2026 that appeared in Newly Registered Domains to identify the most popular registrars, TLD extensions, and other global domain registration trends. This number rose by 4.4% from 11.1+ million NRDs last month.

We also determined the top TLD extensions used by 3.0+ million domains likely registered with malicious intent from the First Watch Malicious Domains Data Feed in August 2026. This number increased by 51.7% from the previous month.

WhoisXML API is proud to be named among the 2026 Inc. 5000 fastest-growing private companies in America, ranking No. 81 in Security and No. 4,682 overall. This marks the company’s ninth appearance on the Inc. 5000, continuing a track record reflected in its Inc. 5000 rankings over the years.

“We are honored to be recognized on this year’s Inc. 5000 and especially proud to rank No. 81 in Security. This recognition affirms our commitment to delivering reliable Internet intelligence that helps organizations strengthen their cyber solutions. We remain grateful for the role we play in promoting a safer Internet,” says WhoisXML API CEO Jonathan Zhang.

KEY POINT: The year 3000 and beyond  is generally a sentinel date: a machine-readable way to say “do not run the normal lifecycle timer while this operation awaits a decision.” It is not a centuries-long registration.

When a registrar submits a domain-registration request, the answer is normally immediate: the registry either creates the domain or rejects the command. Some registrations, however, require additional review. The registry may need to verify eligibility, obtain third-party approval, enforce a reserved-name policy, or investigate a request that triggered an administrative rule.

TL;DR

• The upgraded WHOIS API runs real-time lookups with improved parsing accuracy.
• It’s now 2x faster than before. 
• Account rate limits now go up to 200 requests per second, up from 50.
• Control the cache freshness and choose the protocol used to retrieve domain registration data.
• Some changes may affect how you integrate.

WhoisXML API analyzed 11.1+ million domains registered between 1 and 31 July 2026 that appeared in Newly Registered Domains to identify the most popular registrars, TLD extensions, and other global domain registration trends. This number rose by 20.1% from 9.2+ million NRDs last month.

We also determined the top TLD extensions used by 1.9+ million domains likely registered with malicious intent from the First Watch Malicious Domains Data Feed in July 2026. This number decreased by 1.1% from the previous month.

Most often, SSL/TLS certificates are issued for specific websites: one certificate for one hostname or website. But for larger organizations, this creates problems with certificate management — they pile up, they expire at different times, it becomes harder to spot rogue certificates, and so on. 

This problem is solved by so-called SAN certificates, or multi-domain certificates, which can secure multiple domain names or hostnames with the help of the Subject Alternative Names (SAN) field. This post covers what a SAN certificate actually is, how it works, how to get one, and how security teams use SAN data for asset discovery.