Research and Media Collaborations | WhoisXML API

Research and Media Collaborations

WhoisXML API works with security researchers, scholars, and journalists to raise cyber awareness, investigate threats and vulnerabilities, establish context around threat actors and malicious infrastructure, and more.


Do you have an exciting research project or investigation and require access to WHOIS, IP, or DNS data? Let’s talk.

Have questions?

Contact us at
[email protected]

11.5+ billionWHOIS records
582+ millionDomains tracked
2,864+TLDs & ccTLDs
1.2+ billionDomains and subdomains

What Data Can You Provide?



Our collection of domain, DNS, IP, and threat intelligence data sources cover:

Domain names

Domain history

R

Brands

Registrants

Email addresses

IP addresses

net org com

DNS History

Threat Intelligence

Let’s Start Collaborating

FAQs

How extensive is your data coverage?

Our main coverage stats include:

  • 11.5B+ historical WHOIS records
  • 2,864+ TLDs, including ccTLDs
  • 2.3B+ subdomains
  • 500B+ historical DNS lookup data
  • >99.68% of all IP addresses in use
  • 32M+ netblocks for 215K+ ISPs

Should I credit WhoisXML API when using your data?

Yes, please. Check our Data Policy for Online Publication / Influencer or Data Policy for Print Publications / News Organizations.

Let us know if you are working on an investigation or research where referencing WhoisXML API is not possible and why.

How can you help with my research or investigation?

We can help enrich security data strings; investigate domain footprints related to a particular event or trend for news reporting (e.g., COVID-19, BlackLiveMatters, etc.); expose malicious / C&C infrastructure; lookup Internet properties linked to phishing, scams, disinformation, typosquatting, etc.

How do we get started?

Please fill up form or contact us at [email protected].

Past Research and Collaborations

Mapping Malicious Coronavirus Domain Footprints

Learn how ProPrivacy, VirusTotal, and WhoisXML API partnered to create and maintain a list of suspicious domain names linked to the COVID-19 pandemic.

Read full story

OSINT Tech That Saves Lives

Learn how the National Child Protection Task Force (NCPTF) teamed up with WhoisXML API and dozens of OSINT technology partners and law enforcement investigators to work on missing person cases.

Read full story

Clearing the Road towards Effective Web Vulnerability Alerts

Learn how academic researchers partnered with WhoisXML API and used our WHOIS database to lay the groundwork for more effective vulnerability notifications.

Read full story

Scoping Suspicious Covid-related Domain Registrations

Learn how WhoisXML API and a Bloomberg columnist raised awareness of coronavirus-related domain names possibly used in suspicious or malicious online activities.

Read full story