Photo ZIP Malware Campaign Targets Booking.com Partner and Hotels
WhoisXML API uncovered 3,200+ additional artifacts linked to the Photo ZIP campaign. Download the threat research materials now.
Continue reading Download reportProvide current and historical ownership information on domains / IPs. Identify all connections between domains, registrants, registrars, and DNS servers.
Look into all current and historical DNS / IP connections between domains and A, MX, NS, and other records. Monitor suspicious changes to DNS records.
Get detailed context on an IP address, including its user’s geolocation, time zone, connected domains, connection type, IP range, ASN, and other network ownership details.
Access our web-based solution to dig into and monitor all domain events of interest.
Get access to a web-based enterprise-grade solution to search and monitor domain registrations and ownership details for branded terms, fuzzy matches, registrants of interest, and more.
Independent, evidence-based DNS and abuse intelligence for applicants, advisors, governments, and counsel participating in the ICANN 2026 New gTLD Program.
Predictive threat intelligence is your best first line of defense. Subscribe to the feeds to strengthen your cybersecurity posture. Contact us today for more information.
Unlock integrated intelligence on Internet properties and their ownership, infrastructure, and other attributes.
Our complete set of domain, IP, and DNS intelligence available via API calls as an annual subscription with predictable pricing.
Offers complete access to WHOIS, IP, DNS, and subdomain data for product enrichment, threat hunting and more.
Uncover entire attack surfaces with this API to embed asset discovery, vulnerability scanning, and technology metadata into your platform. Now in early access.
Talk to our APIs using LLMs. Connect your preferred LLM to WhoisXML API and simply chat about WHOIS, DNS, threat intelligence, and more.
I’m your Domain Intelligence Assistant. I make it easy to explore WHOIS, DNS, and threat data from WhoisXML API — I’m cloud-based, fast, and always ready to help.
A custom GPT for WHOIS, DNS, IP, and threat intelligence research. Connects ChatGPT directly to WhoisXML API to enable fast, conversational investigations and domain insights.
Discover what you really pay for when buying commercial Internet intelligence data.
Download nowThe 2026 FIFA World Cup kicked off on 11 June across the USA, Canada, and Mexico. Major tournaments reliably attract waves of opportunistic domain registrations, and this edition is no exception — registration volume climbed month over month since January and peaked in June.
We compiled all current domain registrations containing strings such as worldcup, fifa, wc2026, or world-cup anywhere in the name and profiled them across creation dates, registrars, registrant emails, name servers, and naming intent. This gave us 68,745 domains for our investigation, which yielded these findings:
These figures should be read as a conservative floor. Expanding the term set to other languages, host cities, and team and player names, along with typo variants and historical WHOIS coverage, would likely push the count well beyond 68,745.
Note(s):
An initial mapping in mid-June identified over 17,000 such names, and as the analysis widened to take in further languages, transliterations and string families the count rose to 68,745 as of 2 July 2026.
This research was cited on:
https://domainnamewire.com/2026/06/18/world-cup-domains/
https://globalgamblingnews.com/world-cup-triggers-surge-in-gambling-domain-registrations/
WhoisXML API uncovered 3,200+ additional artifacts linked to the Photo ZIP campaign. Download the threat research materials now.
Continue reading Download reportWhoisXML API uncovered 880+ additional artifacts linked to NarwhalRAT. Download the threat research materials now.
Continue reading Download reportWhoisXML API uncovered 1,200+ additional artifacts linked to the ErrTraffic ClickFix malware distribution framework. Download the threat research materials now.
Continue reading Download reportWe are here to listen. For a quick response, please select your request type. By submitting a request, you agree to our Terms of Service and Privacy Policy.