Provide current and historical ownership information on domains / IPs. Identify all connections between domains, registrants, registrars, and DNS servers.
Research and Media Collaborations
WhoisXML API works with security researchers, scholars, and journalists to raise cyber awareness, investigate threats and vulnerabilities, establish context around threat actors and malicious infrastructure, and more.
Do you have an exciting research project or investigation and require access to WHOIS, IP, or DNS data? Let’s talk.
Have questions?
50B+
Domains and subdomains
28.7B+
WHOIS records
116B+
DNS records
15+
Years of data crawling
10.6M+
IP netblocks in total
What Data Can You Provide?
Our collection of domain, DNS, IP, and threat intelligence data sources cover:
Domain names
Domain history
Brands
Registrants
Email addresses
IP addresses
DNS History
Threat Intelligence
Media Coverage
FOX newsDon't let fake election websites fool you before 2026 midterms
HackRead212 New Venezuela Earthquake Domains Prompt Donation Scam Warnings
The Hacker NewsWormable XMRig Campaign Uses BYOVD Exploit and Time-Based Logic Bomb
Dark ReadingAttackers Use New Tool to Scan for React2Shell Exposure
Telemundo 47 / WNJUPáginas Web Falsas
OSINordThe Mystery of Nadia Marcinko: Epstein’s Alleged Right Hand and Her Digital Trail
BankInfoSecurityNation-State and Cybercrime Exploits Tied to React2Shell
Cyber Security NewsILOVEPOOP Toolkit Exploiting React2Shell Vulnerability to Deploy Malicious Payload
GBHackersReact2Shell Vulnerability Exploited in the Wild, Analysts Warn
News.QQ.com蠕虫式XMRig挖矿活动使用BYOVD漏洞利用和基于时间的逻辑炸弹
SecurityAffairsWormable XMRig campaign leverages BYOVD and timed kill switch for stealth
RedHotCyberState-Sponsored “ILovePoop” Toolkit Targets Global Giants via React2Shell Vulnerability
Sina.com.cn蠕虫式XMRig挖矿活动使用BYOVD漏洞利用和基于时间的逻辑炸弹
MalwareTipsAttackers Use New Tool to Scan for React2Shell ExposureFeatured Research and Collaborations
Darksight Analytics & WhoisXML API: Exposing an Investment Fraud Network
Learn how WhoisXML API helped a Darksight Analytics investigator analyze a network of invoice factories involved in a fraud scheme.
Read full story: Darksight Analytics & WhoisXML API: Exposing an Investment Fraud Network
Shedding Light on a Years-Long Surveillance Operation
WhoisXML API data played a part in an in-depth investigation by Lighthouse Reports that revealed a massive cybersurveillance outfit operating in Europe.
Read full story: Shedding Light on a Years-Long Surveillance Operation
Understanding the State of Online Scams
Discover how ScamAdviser worked with WhoisXML API and other data partners to meticulously research and curate the 2022 Global State of Scams Report.
Read full story: Understanding the State of Online Scams
Historical WHOIS Data Casting a Light on Indian Chronicles
Learn how WhoisXML API data aided EU DisinfoLab’s efforts to make sense of and expose a 15-year-old disinformation operation comprising fake media outlets targeting different countries.
Read full story: Historical WHOIS Data Casting a Light on Indian Chronicles
OSINT Tech That Saves Lives
Learn how the National Child Protection Task Force (NCPTF) teamed up with WhoisXML API and dozens of OSINT technology partners and law enforcement investigators to work on missing person cases.
Read full story: OSINT Tech That Saves Lives
Clearing the Road towards Effective Web Vulnerability Alerts
Learn how academic researchers partnered with WhoisXML API and used our WHOIS database to lay the groundwork for more effective vulnerability notifications.
Read full story: Clearing the Road towards Effective Web Vulnerability AlertsScoping Suspicious Covid-related Domain Registrations
Learn how WhoisXML API and a Bloomberg columnist raised awareness of coronavirus-related domain names possibly used in suspicious or malicious online activities.
Read full story: Scoping Suspicious Covid-related Domain RegistrationsLet’s Start Collaborating
Trusted by
the smartest
companies
Have questions?
We are here to listen. For a quick response, please select your request type. By submitting a request, you agree to our Terms of Service and Privacy Policy.