Provide current and historical ownership information on domains / IPs. Identify all connections between domains, registrants, registrars, and DNS servers.
Look into all current and historical DNS / IP connections between domains and A, MX, NS, and other records. Monitor suspicious changes to DNS records.
Get detailed context on an IP address, including its user’s geolocation, time zone, connected domains, connection type, IP range, ASN, and other network ownership details.
Access our web-based solution to dig into and monitor all domain events of interest.
Get access to a web-based enterprise-grade solution to search and monitor domain registrations and ownership details for branded terms, fuzzy matches, registrants of interest, and more.
Our complete set of domain, IP, and DNS intelligence available via API calls as an annual subscription with predictable pricing.
Offers complete access to WHOIS, IP, DNS, and subdomain data for product enrichment, threat hunting and more.
Enjoy priority data access with our premium API services topped with extra perks including dedicated team support, enterprise-grade infrastructure, and SLAs for full scalability and high performance.
Carry a complete threat intelligence analysis for a given domain or IP address and get access to a report covering 120+ parameters including IP resolutions, website analysis, SSL vulnerabilities, malware detection, domain ownership, mail servers, name servers, and more.
Gather threat intelligence via API calls covering Domain’s Infrastructure analysis, SSL Certificates Chain, SSL Configuration Analysis, Domain Malware Check, Connected Domains, and Domain Reputation Scoring.
Bolster enterprise security with our feeds covering Typosquatting domains, Disposable domains, Phishing URLs, Domain & IP reputation, Malicious URLs, Botnet C&C, and DDoS URLs.
We offer comprehensive services for the integration of our data – from consultations to the precise definition of the basic needs of the business to increase the work efficiency.
Set up and manage public WHOIS servers for your business. Our WHOIS parsing system is a utility that collects extensive information about any given domain by sending series of DNS and WHOIS queries. The report is generated in raw as well as in parsed format.
Regardless of whether you are a startup, a small business or a global one, our team is always ready to help you. Enterprises operating on a scale can also choose special premium support management with high priority 24/7 email and telephone responses and other professional services.
Fuse Internet-wide visibility into your ecosystem for deeper identity verification and cyber risk monitoring.
Contact us at 
Every day, you connect with suppliers, vendors, resellers, distributors, customers, users, and countless other parties to cultivate relationships with multiple entities through different digital channels. But the inherent and emerging blind spots of the Internet, alongside persistent and resourceful threat actors, make these virtual relationships potentially risky and untrustworthy. That’s why you have to unmask the digital identities of everyone you’re talking to and tackle the challenge of fragmented and widely spread-out data sources.
Implementing a zero-trust security framework calls for a unified view of the DNS for continuous and accurate identification, certification, and verification of digital identities—suppliers, vendors, resellers, distributors, customers, users, employees, or anyone really. WHOIS, domain, IP, and other Internet intelligence sources can complement and enrich sophisticated security solutions and strategies, helping you tread the fine line between relationship cultivation and network protection.
Scalable data access. Flexible licensing models. Better coverage and higher total value delivered. Those are just a few differentiators of our enterprise data solutions and packages tailored to your business priorities.
| Tier | Product | Frequency/updates |
|---|---|---|
| P | Real-time & Historic Whois Streaming | Real-time Stream, Daily & Quarterly Feed, Real-time API Lookups |
| P | Real-time & Historic Passive DNS Coverage | Daily + Weekly Feed, Real-time API Lookups |
| P | Enterprise APIs & Threat Intelligence APIs | Enterprise APIs T5 & Threat Intelligence APIs (1M CPM) |
| 1 | Real-time Whois Data Coverage | Daily & Quarterly Feed, Real-time API |
| 1 | Real-time DNS Coverage | Weekly Feeds, Real-time API |
| 1 | IP Geolocation & Netblocks Data Coverage | Daily Feeds |
| 1 | Website Contacts & Categorization Feed | Daily Feed |
| 2 | Subdomains Database Feed | Daily Feed |
| 2 | IP Netblocks (IPv4 + IPv6) | Daily Feed |
| 2 | IP Geolocation Database | Daily Feed |
| 2 | Typosquatting Data Feed (Enriched) | Daily Feed |
| 2 | Disposable Email Domains Feed | Daily Feed |
| 2 | MAC Address Vendor Database | Daily Feed |
See what complete domain and DNS intelligence looks like in practice.
Download Data SampleTalk to us. We’re eager to listen and find innovative ways to contribute to your success.
Contact UsThe WhoisXML API data engine is built and frequently upgraded to offer you the most complete, updated, and unique Internet intelligence footprints since 2010. Don’t get lost in all the red tape and unforeseen technical complexities of finding your own domain and DNS data. Our technology is ready to give back months or years of development cycle time to your most pressing and mission-critical projects and deployments.
Our Internet intelligence footprints have enabled a variety of use cases, among which:
Help insurers, reinsurers, and brokers assess and quantify the cyber risks of insurance buyers by identifying and attributing possible cyber attack vectors and risk exposures.
Determine, validate, and monitor customer identities by scrutinizing their WHOIS, IP, and DNS footprints. Deepen due diligence by exposing suspicious and malicious connections.
Strengthen cybersecurity measures by determining the trustworthiness of domains, IP addresses, and email addresses through WHOIS, DNS and IP intelligence enrichment.
Create and enrich the digital risk profiles of suppliers, resellers, distributors, and other third parties. Monitor their DNS activities, including domain registrations and IP connections, and assess DNS and domain infrastructure configurations.
Enable multifaceted brand protection, including assessing and monitoring distribution channels, preventing brand abuse, and supporting trademark prosecution and Uniform Domain-Name Dispute-Resolution Policy (UDRP) complaints.
Intensify financial transaction verification and monitoring by examining IP addresses and uncovering all relevant details, such as geolocation, connection type, ISP, and netblock.
Learn how WhoisXML API's data can help companies unmask customers by supplementing their existing KYC data source stack with relevant DNS, domain, WHOIS, and IP information.
DownloadLearn about four aspects of cyber risk insurance, along with use cases and data points you can extract from WhoisXMLAPI’s intelligence sources in this use case sheet.
DownloadDownload the use case sheet to learn about three KWYTT processes that WHOIS, IP, and Domain Name System (DNS) intelligence can help with.
DownloadWe are here to listen. For a quick response, please select your request type or check our Contact us page for more information. By submitting a request, you agree to our Terms of Service and Privacy Policy.
What Our Clients Say
"Companies can’t afford to break the speed at which they enlist new business partners. But it’d be foolish to blindly trust every unknown party on the Web. WhoisXML API brought in new perspectives on overlooked Internet properties and DNS configurations to add value to our third-party verification criteria and mechanisms."
Director of Product
Identify Verification Platform Provider
"We’re excited to get the data, as it’s above our expectations in terms of accuracy. We haven’t used data feeds from providers like WhoisXML API before. They were among the main components that we used to spin up our business."
Candan Bolukbas, Co-Founder and CTO
NormShield (now Black Kyte)