Provide current and historical ownership information on domains / IPs. Identify all connections between domains, registrants, registrars, and DNS servers.
Look into all current and historical DNS / IP connections between domains and A, MX, NS, and other records. Monitor suspicious changes to DNS records.
Get detailed context on an IP address, including its user’s geolocation, time zone, connected domains, connection type, IP range, ASN, and other network ownership details.
Access our web-based solution to dig into and monitor all domain events of interest.
Get access to a web-based enterprise-grade solution to search and monitor domain registrations and ownership details for branded terms, fuzzy matches, registrants of interest, and more.
Predictive threat intelligence is your best first line of defense. Subscribe to the feeds to strengthen your cybersecurity posture. Contact us today for more information.
Unlock integrated intelligence on Internet properties and their ownership, infrastructure, and other attributes.
Our complete set of domain, IP, and DNS intelligence available via API calls as an annual subscription with predictable pricing.
Offers complete access to WHOIS, IP, DNS, and subdomain data for product enrichment, threat hunting and more.
We're thrilled to announce that WHOIS queries can now be processed through POST requests in addition to the current HTTP GET request method. This new capability offers a more secure way to access domain registration information.
Using POST requests significantly reduces the risk of unauthorized access to API keys, as they encrypt the HTTP message body, including the API key. To illustrate, here is an example of a POST request.
Email remains a vital part of modern communication, with 347.3 billion emails sent and received daily worldwide in 2023. For each email to reach its intended recipient, mail exchange (MX) records direct it to the correct mail server.
While individual email users can create their own mail servers, most people use email services from established email service providers (ESPs) to avoid the complexity of running their own servers. These services typically provide storage, security features, and user-friendly interfaces, all without burdening users with maintenance.
However, some experts are concerned about the concentration of power within a limited number of companies controlling MX records. They warn of potential vulnerabilities if email routing relies heavily on just a handful of providers.
WhoisXML API is thrilled to announce its strategic partnership with Logpresso, an innovative provider of automated security operations platforms headquartered in Seoul, Korea. This collaboration equips Logpresso users with comprehensive domain intelligence through WhoisXML API, empowering them to strengthen phishing domain detection and brand protection capabilities.
As a specialist in security information and event management (SIEM) solutions delivered through the cloud, Logpresso is a valuable partner. Since 2013, the company has conquered the limitations of traditional SIEM solutions and developed a technically advanced platform with superior data analysis and threat detection capabilities.
Mirroring Sun Tzu’s wisdom, “To know your enemy, you must become your enemy,” today’s cybersecurity landscape demands that security teams see their IT infrastructure through attackers’ eyes. This proactive approach is vital, notably considering the Data Breach Investigations Report (DBIR) finding that 65% of data breaches stem from external sources.
Adopting an attacker mindset enables security teams to identify and address attack vectors early and continuously manage their attack surfaces. This strategy entails asking questions like, “What assets can threat actors see and use as entry points?” and “How can compromising these assets impact other assets?”
External attack surface management (EASM) solutions, especially when supplemented with IP intelligence, can help answer these and other related questions.
WhoisXML API representatives joined more than 40,000 people who attended the recent RSA Conference held in San Francisco, USA, on 6–9 May 2024. The event brings together cybersecurity professionals from around the world every year.
Our team was impressed by the thought-provoking discussions, cutting-edge innovations, and brilliant people we encountered, familiar faces and new acquaintances alike. To provide a glimpse of our experience, here is a recap that dives into some of the key themes and insights that emerged from this premier event.
WhoisXML API researchers analyzed more than 7.4 million domains registered between 1 and 31 May 2024 to identify the most popular registrars, top-level domain (TLD) extensions, and other global domain registration trends.
We also studied the top TLDs and associated threat types of more than 1 million domains detected as indicators of compromise (IoCs) in May.
Finally, we summarized the findings and provided links to the threat reports produced using DNS, IP, and domain intelligence sources during the period.
WhoisXML API recently produced a script that allows users to monitor the API status page, a JSON page showing each API’s real-time status and response time.
The script can be tailored to an organization’s specific requirements so it receives the information most relevant to an application. This valuable resource helps ensure applications and services that rely on the monitored APIs run smoothly.
This project aimed to upload data from DNS_Premium_365 dataset to a local ClickHouse database for efficient, optimized and rapid querying capabilities.
We are here to listen. For a quick response, please select your request type. By submitting a request, you agree to our Terms of Service and Privacy Policy.
