Research and Media Collaborations | WhoisXML API

Research and Media Collaborations

WhoisXML API works with security researchers, scholars, and journalists to raise cyber awareness, investigate threats and vulnerabilities, establish context around threat actors and malicious infrastructure, and more.

Do you have an exciting research project or investigation and require access to WHOIS, IP, or DNS data? Let’s talk.

Have questions?
32 Billion+Domains and subdomains
20.0 Billion+WHOIS records
116 Billion+DNS records
14+Years of data crawling
13.5 Million+IP netblocks in total

What Data Can You Provide?

Our collection of domain, DNS, IP, and threat intelligence data sources cover:

Domain names

Domain history




Email addresses

IP addresses

net org com

DNS History

Threat Intelligence

Let’s Start Collaborating


How extensive is your data coverage?

Our main coverage stats include:

  • 20.0B+ historical WHOIS records
  • 7,596+ TLDs, including ccTLDs
  • 2.3B+ subdomains
  • 500B+ historical DNS lookup data
  • >99.5% of all IP addresses in use
  • 17M+ netblocks for 235K+ ISPs

Should I credit WhoisXML API when using your data?

Yes, please. Check our Data Policy for Online Publication / Influencer or Data Policy for Print Publications / News Organizations.

Let us know if you are working on an investigation or research where referencing WhoisXML API is not possible and why.

How can you help with my research or investigation?

We can help enrich security data strings; investigate domain footprints related to a particular event or trend for news reporting (e.g., COVID-19, BlackLiveMatters, etc.); expose malicious / C&C infrastructure; lookup Internet properties linked to phishing, scams, disinformation, typosquatting, etc.

How do we get started?

Please fill up form or contact us at [email protected].

Past Research and Collaborations

Shedding Light on a Years-Long Surveillance Operation

WhoisXML API data played a part in an in-depth investigation by Lighthouse Reports that revealed a massive cybersurveillance outfit operating in Europe.

Read full story

Understanding the State of Online Scams

Discover how ScamAdviser worked with WhoisXML API and other data partners to meticulously research and curate the 2022 Global State of Scams Report.

Read full story

Historical WHOIS Data Casting a Light on Indian Chronicles

Learn how WhoisXML API data aided EU DisinfoLab’s efforts to make sense of and expose a 15-year-old disinformation operation comprising fake media outlets targeting different countries.

Read full story

OSINT Tech That Saves Lives

Learn how the National Child Protection Task Force (NCPTF) teamed up with WhoisXML API and dozens of OSINT technology partners and law enforcement investigators to work on missing person cases.

Read full story

Clearing the Road towards Effective Web Vulnerability Alerts

Learn how academic researchers partnered with WhoisXML API and used our WHOIS database to lay the groundwork for more effective vulnerability notifications.

Read full story

Scoping Suspicious Covid-related Domain Registrations

Learn how WhoisXML API and a Bloomberg columnist raised awareness of coronavirus-related domain names possibly used in suspicious or malicious online activities.

Read full story

What Our Partners Say

"I used WHOIS API and Website Categorization API. Both tools are simple and straightforward to use. Some API providers have extra bells and whistles that they force you to use, but WhoisXML API is really easy to work with. It’s stable, and I can trust that it’s not going to flatline later."

Mohammad Ismail Daud
UC Davis Student

"With other APIs, there’s a tendency for requests to fail. But I didn’t notice that with Website Categorization API. I noticed that whenever a request was made, the website was always categorized even if it was under an unknown category."

Fergus Smith
University of Glasgow Software
Development MST Student