Products APIs Data Feeds Web Tools Domain Research & Monitoring Enterprise Packages AI Deep Research
WHOIS / WHOIS History
WHOIS / WHOIS History

Provide current and historical ownership information on domains / IPs. Identify all connections between domains, registrants, registrars, and DNS servers.

DNS / DNS History
DNS / DNS History

Look into all current and historical DNS / IP connections between domains and A, MX, NS, and other records. Monitor suspicious changes to DNS records.

IP Geolocation / IP Netblocks
IP Geolocation / IP Netblocks

Get detailed context on an IP address, including its user’s geolocation, time zone, connected domains, connection type, IP range, ASN, and other network ownership details.

Domain Research Suite (DRS)
Domain Research Suite (DRS)

Access our web-based solution to dig into and monitor all domain events of interest.

Domain Research Suite (DRS)
Domain Research Suite (DRS)

Get access to a web-based enterprise-grade solution to search and monitor domain registrations and ownership details for branded terms, fuzzy matches, registrants of interest, and more.

Research
Monitoring
White-Label
Predictive Threat Intelligence Feeds
Predictive Threat Intelligence Feeds

Predictive threat intelligence is your best first line of defense. Subscribe to the feeds to strengthen your cybersecurity posture. Contact us today for more information.

WhoisXML API Internet Infrastructure
Internet Infrastructure

Unlock integrated intelligence on Internet properties and their ownership, infrastructure, and other attributes.

Enterprise API Packages
Enterprise API Packages

Our complete set of domain, IP, and DNS intelligence available via API calls as an annual subscription with predictable pricing.

Security Intelligence (SI) Suite
Security Intelligence (SI) Suite

Offers complete access to WHOIS, IP, DNS, and subdomain data for product enrichment, threat hunting and more.

MCP Server
MCP Server

Talk to our APIs using LLMs. Connect your preferred LLM to WhoisXML API and simply chat about WHOIS, DNS, threat intelligence, and more.

Jake AI
Jake AI

I’m your Domain Intelligence Assistant. I make it easy to explore WHOIS, DNS, and threat data from WhoisXML API — I’m cloud-based, fast, and always ready to help.

Discover what you really pay for when buying commercial Internet intelligence data.

Download now
×
Contact Us
Read other press releases Download PDF

Product and Feature Updates for 2025

In line with WhoisXML API’s commitment to improving its service offerings, we released the following products and feature upgrades in 2025 so far:

  • WhoisXML API releases new product—Domain Info API: Domain Info API provides a modern way to access the latest defined WHOIS data for both live and expired domain names. It intelligently fills in redacted or missing fields by using the most recent historical records available. Users can also access this API from the Domain Research Suite as Domain Info Search.
  • TLD RDAP Monitor launch: WhoisXML API developed the TLD RDAP Monitor, a first-of-its-kind dashboard that tracks the adoption of RDAP across 1,440+ TLDs. This tool is publicly available at https://rdap.wxapros.com/ and provides insights into which TLDs support RDAP, WHOIS, both, or neither. The dashboard also monitors the operational health of the servers.
  • WhoisXML API now has its own MCP Server: WhoisXML API launched an MCP server to enable LLMs to access our Internet infrastructure intelligence. This server allows users to query 17 APIs with natural language directly through a chatbot interface, democratizing access to data for anyone, from seasoned investigators to people without a technical background. Learn more about the MCP server or request a free technical demo.
  • WHOIS product enrichment with new protocol selector: A new feature has been added to WHOIS API, WHOIS Lookup, and WHOIS Search (on the Domains Research Suite) that gives users the flexibility to choose between three protocols—Auto, RDAP, and WHOIS. The Auto option intelligently selects the best available data source, preferring WHOIS first and then defaulting to RDAP, if necessary. On WHOIS API, users can set the parameter to 0 for the Auto protocol (default setting), 1 to use only RDAP, or 2 to use only WHOIS. Please review the WHOIS API documentation or contact us for more details.
  • Subdomain Database Download coverage increases from 2.3B to 9.6B subdomains: The weekly full files of our Subdomain Database Download now cover an average of 9.6 billion subdomain records—a result of data processing and storage optimization strategies implemented by our development team that also improved how data is indexed and retrieved. Download a sample of Subdomains Database Download or contact us for more information.
  • Richer interface for all lookup tools: All logged-in users with credits can now access unmasked query results within the user-friendly GUI and look back on past queries with the new lookup memory feature. Users can also share the results with unregistered users by toggling the “Visible for all” option.
  • Newly Registered Domains Data Feed now offers up to a year’s worth of historical files: Enterprise subscribers to the data feed can now access files produced in the past 30 days, while Ultimate users can go as far back as 365 days to access historical files. With this deeper access, security professionals can enrich threat intelligence with more context and gain retrospective insights into security investigations. Download a sample of the Enterprise or Ultimate data feed or contact us for more details.
  • WHOIS API now RDAP-ready: ICANN’s sunsetting of WHOIS port 43 on 28 January 2025 officially signaled the transition to RDAP. WHOIS API is ready for that transition as it happens. The API allows users to retrieve data through RDAP or WHOIS with an automatic fallback mechanism to RDAP in case WHOIS data cannot be retrieved. Please review the WHOIS API documentation or contact us for more details.

Developer Resources

WhoisXML API also enhanced its library of developer resources with these updates:

  • Script for Reverse NS API auto-pagination feature: A Python script was created to enable Reverse NS API users to retrieve the entire query output without the first 300 result restriction through automatic pagination. This allows for full automation and improved scalability of applications relying on Reverse NS API data. The latest version of the script is on GitHub.
  • Automation script for First Watch Malicious Domains Data Feed now available: First Watch users can now transform predictive domain intelligence into machine-readable STIX 2.1 format for automated data processing and download the output as a JSON file in TXII format for easy threat intelligence ingestion and sharing.

Stay tuned for more product and feature improvements in the coming quarters.

Related posts
Read other press releases Download PDF
Try our WhoisXML API for free
Get started