WhoisXML API Predictive Threat Intelligence | WhoisXML API
Products APIs Data Feeds Web Tools Domain Research & Monitoring Enterprise Packages
WHOIS / WHOIS History
WHOIS / WHOIS History

Provide current and historical ownership information on domains / IPs. Identify all connections between domains, registrants, registrars, and DNS servers.

DNS / DNS History
DNS / DNS History

Look into all current and historical DNS / IP connections between domains and A, MX, NS, and other records. Monitor suspicious changes to DNS records.

IP Geolocation / IP Netblocks
IP Geolocation / IP Netblocks

Get detailed context on an IP address, including its user’s geolocation, time zone, connected domains, connection type, IP range, ASN, and other network ownership details.

Domain Research Suite (DRS)
Domain Research Suite (DRS)

Access our web-based solution to dig into and monitor all domain events of interest.

Domain Research Suite (DRS)
Domain Research Suite (DRS)

Get access to a web-based enterprise-grade solution to search and monitor domain registrations and ownership details for branded terms, fuzzy matches, registrants of interest, and more.

Research
Monitoring
White-Label
Enterprise API Packages
Enterprise API Packages

Our complete set of domain, IP, and DNS intelligence available via API calls as an annual subscription with predictable pricing.

Security Intelligence (SI) Suite
Security Intelligence (SI) Suite

Offers complete access to WHOIS, IP, DNS, and subdomain data for product enrichment, threat hunting and more.

Premium API Services
Premium API Services

Enjoy priority data access with our premium API services topped with extra perks including dedicated team support, enterprise-grade infrastructure, and SLAs for full scalability and high performance.

WhoisXML API Internet Infrastructure
Internet Infrastructure

Unlock integrated intelligence on Internet properties and their ownership, infrastructure, and other attributes.

WhoisXML API Predictive Threat Intelligence
Predictive Threat Intelligence

Detect and block access to and from dangerous domain names before malicious actors can weaponize them. Contact us today for more information.

Multi-Level API User Administration Now Available - Manage individual API keys for team members in your organization.

Learn More
×
Contact Us

WhoisXML API Predictive Threat Intelligence

Identify daily clusters of new risky domain names as soon as they are registered to prevent phishing, typosquatting, malware, and C&C attacks with our collection of predictive intelligence sources.

Have questions?
Download sample
50 Billion+Domains and subdomains
21.0 Billion+WHOIS records
116 Billion+DNS records
14+Years of data crawling
10.4 Million+IP netblocks in total

Build a Complete Predictive Domain Defense

Learn how to detect new risky domains before they become potential threats:

What You Need

WhoisXML API Predictive Threat Intelligence combines the products below. Contact our sales team to learn more.

Product Detail Time span
Typosquatting Data Feed Predictive clustering of domain groups suspected for typosquatting, spamming, or phishing Historical with daily updates
Early DGA Detection Data Feed Predictive clustering of domain groups suspected to be C&C servers or malware controllers Historical with daily updates
Early Warning Phishing Data Feed Predictive monitoring of domains suspected for targeting major organizations Historical with daily updates
Disposable Email Domains Database Discovery and monitoring of domains enabling throwaway or temporary email addresses Historical with daily updates

Download a Sample

Get a glimpse of our predictive threat intelligence sources.

Download sample

Practical Usage

  • Block new risky domain groups

    Identify and deter potential domain-enabled threats daily for early threat detection and response.

  • Identify attacker infrastructure

    Gather WHOIS, IP, and other contextual information for risky domains and map out their connections.

  • Safeguard brands from threats

    Catch brand impersonation early with daily access to potentially cybersquatting domains.

  • Enrich threat intelligence sources

    Combine existing intelligence sources with in-depth domain threat data for enhanced visibility.

For pricing details and building your customized solution, please contact us!