Provide current and historical ownership information on domains / IPs. Identify all connections between domains, registrants, registrars, and DNS servers.
Research and Media Collaborations
WhoisXML API works with security researchers, scholars, and journalists to raise cyber awareness, investigate threats and vulnerabilities, establish context around threat actors and malicious infrastructure, and more.
Do you have an exciting research project or investigation and require access to WHOIS, IP, or DNS data? Let’s talk.
Have questions?
50B+
Domains and subdomains
28.7B+
WHOIS records
116B+
DNS records
15+
Years of data crawling
10.6M+
IP netblocks in total
What Data Can You Provide?
Our collection of domain, DNS, IP, and threat intelligence data sources cover:
Domain names
Domain history
Brands
Registrants
Email addresses
IP addresses
DNS History
Threat Intelligence
Media Coverage
The Hacker News Wormable XMRig Campaign Uses BYOVD Exploit and Time-Based Logic Bomb 
Dark Reading Attackers Use New Tool to Scan for React2Shell Exposure 
BankInfoSecurity Nation-State and Cybercrime Exploits Tied to React2Shell 
Cyber Security News ILOVEPOOP Toolkit Exploiting React2Shell Vulnerability to Deploy Malicious Payload 
OSINord The Mystery of Nadia Marcinko: Epstein’s Alleged Right Hand and Her Digital Trail 
GBHackers React2Shell Vulnerability Exploited in the Wild, Analysts Warn 
News.QQ.com 蠕虫式XMRig挖矿活动使用BYOVD漏洞利用和基于时间的逻辑炸弹 
SecurityAffairs Wormable XMRig campaign leverages BYOVD and timed kill switch for stealth 
RedHotCyber State-Sponsored “ILovePoop” Toolkit Targets Global Giants via React2Shell Vulnerability 
Sina.com.cn 蠕虫式XMRig挖矿活动使用BYOVD漏洞利用和基于时间的逻辑炸弹 
MalwareTips Attackers Use New Tool to Scan for React2Shell Exposure Featured Research and Collaborations
Darksight Analytics & WhoisXML API: Exposing an Investment Fraud Network
Learn how WhoisXML API helped a Darksight Analytics investigator analyze a network of invoice factories involved in a fraud scheme.
Read full story
Shedding Light on a Years-Long Surveillance Operation
WhoisXML API data played a part in an in-depth investigation by Lighthouse Reports that revealed a massive cybersurveillance outfit operating in Europe.
Read full story
Understanding the State of Online Scams
Discover how ScamAdviser worked with WhoisXML API and other data partners to meticulously research and curate the 2022 Global State of Scams Report.
Read full story
Historical WHOIS Data Casting a Light on Indian Chronicles
Learn how WhoisXML API data aided EU DisinfoLab’s efforts to make sense of and expose a 15-year-old disinformation operation comprising fake media outlets targeting different countries.
Read full story
OSINT Tech That Saves Lives
Learn how the National Child Protection Task Force (NCPTF) teamed up with WhoisXML API and dozens of OSINT technology partners and law enforcement investigators to work on missing person cases.
Read full story
Clearing the Road towards Effective Web Vulnerability Alerts
Learn how academic researchers partnered with WhoisXML API and used our WHOIS database to lay the groundwork for more effective vulnerability notifications.
Read full storyScoping Suspicious Covid-related Domain Registrations
Learn how WhoisXML API and a Bloomberg columnist raised awareness of coronavirus-related domain names possibly used in suspicious or malicious online activities.
Read full storyLet’s Start Collaborating
Trusted by
the smartest
companies
Have questions?
We are here to listen. For a quick response, please select your request type. By submitting a request, you agree to our Terms of Service and Privacy Policy.