WhoisXML API Blog

We are excited to announce that our development team has upgraded Real-Time Domain Registration Streaming to include a feature called “includeCandidates,” an optional Boolean parameter that allows users to immediately obtain simplified domain records directly from zone files before they undergo newly registered domain (NRD) processing.

The candidate records only have two fields, namely, “domainName” and “reason,” where the latter field can be “added” for NRDs or “dropped” for recently removed domains. 

We are excited to share that Enterprise and Ultimate subscribers of the Newly Registered Domains (NRD) Data Feed will now have access to past data feed files, giving security professionals deeper context to help trace threat patterns and evolution. 

In particular, NRD Enterprise users can access files produced in the past 30 days from their subscription date, while NRD Ultimate users can go as far back as 365 days. With this new enhancement, WhoisXML API users can now use NRD data feeds to:

The WhoisXML API research team analyzed 8.2+ million domains registered between 1 and 31 March 2025 to identify the most popular registrars, top-level domain (TLD) extensions, and other global domain registration trends.

We also determined the top TLD extensions used by 59.2+ billion domains from our DNS database’s A record full file dated 6 March 2025.

Next, we studied the top TLDs of 1.1+ million domains detected as indicators of compromise (IoCs) this March.

Finally, we summed up our findings and provided links to the threat reports produced using DNS, IP, and domain intelligence sources during the period.

As an organization’s internet infrastructure grows, it requires more and more configuration, setup, and decision-making—from selecting a reliable name server to determining the right types of DNS records and setting the appropriate time-to-live (TTL) values. One of those decisions is whether or not to create a wildcard DNS record, a feature that most hosting providers, registrars, and DNS providers offer.

In this post, we discuss what a wildcard DNS record is, how it helps, and any risks associated with it.

WhoisXML API is proud to be named by Inc. as one of the companies making an impact in the Pacific, specifically ranking 119th in the Regionals list.

The Inc. Regionals lists acknowledge the achievements of private companies in generating sustainable growth and jobs. Making it to the list means the company has had remarkable revenue growth over a two-year period (2021–2023) and met strict revenue requirements during those years.

“It is an honor to be among the 951 companies on this year’s Inc. Regionals list. This achievement is a clear indication that our team’s commitment to providing high-quality cyber intelligence and helping clients enrich their security solutions is paying off, and that we are making significant contributions toward a safer online environment,” says WhoisXML API CEO Jonathan Zhang.

When you run a WHOIS lookup for a domain name you’re interested in, you may find that some details are redacted for privacy. You can’t see who owns that domain because “Privacy service provided by Withheld for Privacy ehf” is on the registrant organization field. What, exactly, does this mean? And is there a way to find out the actual domain owner’s email address and contact them? 

We’ll talk about registration data redaction in general and Withheld for Privacy ehf in particular in this post, as well as cover how it works, and some of the other most common domain privacy protection companies. We will also demonstrate how you can possibly still uncover domain ownership data despite redaction.