Provide current and historical ownership information on domains / IPs. Identify all connections between domains, registrants, registrars, and DNS servers.
Look into all current and historical DNS / IP connections between domains and A, MX, NS, and other records. Monitor suspicious changes to DNS records.
Get detailed context on an IP address, including its user’s geolocation, time zone, connected domains, connection type, IP range, ASN,
and other network ownership details.
Access our web-based solution to dig into
and monitor all domain events of interest.
Get access to a web-based enterprise-grade solution to search and monitor domain registrations and ownership details for branded terms, fuzzy matches, registrants of interest, and more.
New gTLD Intelligence Services (NGIS)
Independent, evidence-based DNS and abuse intelligence for applicants, advisors, governments, and counsel participating in the ICANN 2026 New gTLD Program.
Predictive Threat Intelligence Feeds
Predictive threat intelligence is your best first line of defense. Subscribe to the feeds to strengthen your cybersecurity posture. Contact us today for more information.
Unlock integrated intelligence on Internet properties and their ownership, infrastructure, and other attributes.
Our complete set of domain, IP, and DNS intelligence available via API calls as an annual subscription with predictable pricing.
Security Intelligence (SI) Suite
Offers complete access to WHOIS, IP, DNS, and subdomain data for product enrichment, threat hunting and more.
Uncover entire attack surfaces with this API to embed asset discovery, vulnerability scanning, and technology metadata into your platform. Now in early access.
Talk to our APIs using LLMs. Connect your preferred LLM to WhoisXML API and simply chat about WHOIS, DNS, threat intelligence, and more.
I’m your Domain Intelligence Assistant. I make it easy to explore WHOIS, DNS, and threat data from WhoisXML API — I’m cloud-based, fast, and always ready to help.
WhoisXML API Domain Intelligence Advisor (via ChatGPT)
A custom GPT for WHOIS, DNS, IP, and threat intelligence research. Connects ChatGPT directly to WhoisXML API to enable fast, conversational investigations and domain insights.
Access our latest research and insights on WHOIS, IP, and DNS data for cybersecurity, data science, and other business purposes through our webinars, podcasts, white papers, threat reports, and videos from the Academy.
Have questions?
Comprehensive insights into global domain registrations, TLD trends, registrars, and malicious activity.
Global domain activity continues to evolve at scale, with shifting registration patterns and persistent malicious use shaping the landscape.
Global Domain Activity Report: Q1 2026 focused on registrant behaviors connected to 26.5M+ NRDs, 6.7M+ of which may have been registered with malicious intent. The analysis further included 2.7B+ and 5.0B+ MX and NS domains, respectively, along with 3.3M+ confirmed malicious domains.
Our research team leveraged WhoisXML API’s extensive domain, DNS, and threat intelligence to uncover:
WhoisXML API analyzed 10.2+ million domains registered between 1 and 31 December 2025, along with 27.3+ billion domains from our DNS database’s A record full file dated 4 December 2025 and 1.1+ million IoCs detected in the same period.
Our research team uncovered:
WhoisXML API analyzed 8.7+ million domains registered between 1 and 30 November 2025, along with 31.9+ billion domains from our DNS database’s A record full file dated 6 November 2025 and 1.0+ million IoCs detected in the same period.
Our research team uncovered:
WhoisXML API analyzed 9.6+ million domains registered between 1 and 31 October 2025, 38.7+ billion domains from our DNS database’s A record full file dated 4 October 2025, and 1.1+ million IoCs detected in the same period.
Our research team uncovered:
The latter half of 2025 brought to light new global domain activity trends aided by the Global Domain Activity Report for Q3 focusing on registrant behaviors connected to 25.7+ million newly registered domains (NRDs). We also analyzed 2.1+ billion mail exchange (MX) resolutions, 4.2+ billion name server (NS) resolutions, and 3.2+ million indicators of compromise (IoCs) detected in the same period.
Our research team leveraged WhoisXML API’s extensive domain, DNS, and threat intelligence to uncover:
WhoisXML API analyzed 8.7+ million domains registered between 1 and 30 September 2025, 42.1+ billion domains from our DNS database’s A record full file dated 4 September 2025, and 1.0+ million IoCs detected in the same period.
Our research team uncovered:
WhoisXML API analyzed 8.5+ million domains registered between 1 and 31 August 2025, 45.1+ billion domains from our DNS database’s A record full file dated 7 August 2025, and 1.0+ million IoCs detected in the same period.
Our research team uncovered:
We are here to listen. For a quick response, please select your request type. By submitting a request, you agree to our Terms of Service and Privacy Policy.
