Provide current and historical ownership information on domains / IPs. Identify all connections between domains, registrants, registrars, and DNS servers.
Look into all current and historical DNS / IP connections between domains and A, MX, NS, and other records. Monitor suspicious changes to DNS records.
Get detailed context on an IP address, including its user’s geolocation, time zone, connected domains, connection type, IP range, ASN,
and other network ownership details.
Access our web-based solution to dig into
and monitor all domain events of interest.
Get access to a web-based enterprise-grade solution to search and monitor domain registrations and ownership details for branded terms, fuzzy matches, registrants of interest, and more.
New gTLD Intelligence Services (NGIS)
Independent, evidence-based DNS and abuse intelligence for applicants, advisors, governments, and counsel participating in the ICANN 2026 New gTLD Program.
Predictive Threat Intelligence Feeds
Detect and block access to and from dangerous domain names before malicious actors can weaponize them. Contact us today for more information.
Unlock integrated intelligence on Internet properties and their ownership, infrastructure, and other attributes.
Our complete set of domain, IP, and DNS intelligence available via API calls as an annual subscription with predictable pricing.
Security Intelligence (SI) Suite
Offers complete access to WHOIS, IP, DNS, and subdomain data for product enrichment, threat hunting and more.
Uncover entire attack surfaces with this API to embed asset discovery, vulnerability scanning, and technology metadata into your platform. Now in early access.
Talk to our APIs using LLMs. Connect your preferred LLM to WhoisXML API and simply chat about WHOIS, DNS, threat intelligence, and more.
I’m your Domain Intelligence Assistant. I make it easy to explore WHOIS, DNS, and threat data from WhoisXML API — I’m cloud-based, fast, and always ready to help.
WhoisXML API Domain Intelligence Advisor (via ChatGPT)
A custom GPT for WHOIS, DNS, IP, and threat intelligence research. Connects ChatGPT directly to WhoisXML API to enable fast, conversational investigations and domain insights.
We are excited to announce that we recently upgraded our Typosquatting Data Feed. This innovative release provides improved typosquatting detection and extended coverage to further empower the identification of suspicious domain registrations.
The specific improvements and changes made to this version of Typosquatting Data Feed include:
We are excited to introduce Email Verification API V3, the latest upgrade to our Email Verification product line. This innovative release is set to provide better stability and more accurate results with enhanced checks to empower substantially improved email validation processes.
This new version of Email Verification API will further enable a variety of use cases, including:
WhoisXML API continues to improve its products and services as part of its commitment to a safer and more transparent Internet through the delivery of high-quality and reliable domain, IP, and DNS intelligence sources.
Among our most recent developments is the massive increase in the country-code top-level domain (ccTLD) coverage of the Newly Registered Domains V2 (NRD2) Data Feed. Specifically, we recorded a 153.95% increase in the number of domain activity for the top 10 ccTLDs in 2023 compared to 2022.
We are excited to introduce Threat Intelligence API and Threat Intelligence Lookup, the latest additions to our Threat Intelligence product line. These innovative releases are set to improve threat detection and response and broaden threat insight sources by providing instant and accurate threat information about any domain, URL, IP address, CIDR number, or hash.
Threat Intelligence API and Threat Intelligence Lookup let users stay ahead of the latest threats by providing:
We are excited to introduce Website Categorization API V3, the latest addition to our Website Categorization product line. This innovative release enables more accurate website classification with its enhanced website categorization model and additional output data points.
Specific improvements to this version of Website Categorization API include:
As part of WhoisXML API’s efforts to continuously improve its products and services, the coverage and quality of the Newly Registered Domains (NRD2) Data Feed significantly improved over the past months. More precisely, the latest Q3 2023 measurements show that the data feed’s coverage increased by 89% since the last quarter of 2022.
Within the next months, we will stop supporting Newly Registered Domain (NRD) 1.0 and steadily continue user migration to NRD 2.0, an upgraded version with more comprehensive data coverage and event monitoring than ever before.
To facilitate this transition, we divided the process into two parts. The end of support for NRD 1.0 is scheduled for 1 March 2024. That means our development team will stop providing fixes and technical support for this version by that date. By 31 December 2024, we will entirely discontinue NRD 1.0 and will thus no longer provide any related service files or updates, except for NRD quarterly files that will remain accessible using NRD1 credentials after the EOL period.
WhoisXML API recently launched the Early Warning Phishing Feed (EWPF), a new predictive intelligence source that provides daily lists of domains likely to figure in phishing attacks. It aims to supplement and enhance existing phishing detection, brand protection, domain filtering, and law enforcement processes.
“Our Early Warning Phishing Feed provides predictive threat intelligence to help organizations stay ahead of phishing attacks amid today’s fast-moving cybercrime landscape. This new product rightly aligns with the company’s commitment to make the Internet safer,” says Jonathan Zhang, WhoisXML API CEO.
We are here to listen. For a quick response, please select your request type. By submitting a request, you agree to our Terms of Service and Privacy Policy.
