Provide current and historical ownership information on domains / IPs. Identify all connections between domains, registrants, registrars, and DNS servers.
Look into all current and historical DNS / IP connections between domains and A, MX, NS, and other records. Monitor suspicious changes to DNS records.
Get detailed context on an IP address, including its user’s geolocation, time zone, connected domains, connection type, IP range, ASN, and other network ownership details.
Access our web-based solution to dig into and monitor all domain events of interest.
Get access to a web-based enterprise-grade solution to search and monitor domain registrations and ownership details for branded terms, fuzzy matches, registrants of interest, and more.
Detect and block access to and from dangerous domain names before malicious actors can weaponize them. Contact us today for more information.
Unlock integrated intelligence on Internet properties and their ownership, infrastructure, and other attributes.
Our complete set of domain, IP, and DNS intelligence available via API calls as an annual subscription with predictable pricing.
Offers complete access to WHOIS, IP, DNS, and subdomain data for product enrichment, threat hunting and more.
Multi-Level API User Administration Now Available - Manage individual API keys for team members in your organization.
Learn MoreOur hosted WHOIS API service provides the registration details, also known as the WHOIS record data, of a domain name, an IP address, or an email address. All of the WHOIS information we offer is adequately parsed and normalized to a consistent format so it can easily fit in with your business operations.
Get started500 free API requests. No credit card required.
WHOIS API is a consumption model variant that gathers a variety of domain ownership and registration data points from a comprehensive WHOIS database. Developers can integrate WHOIS API into existing internal systems and commercial applications using client libraries and integration modules.
Our WHOIS repository contains information from millions of active domain and subdomain records that cover more than 7,596 generic (gTLDs) and country-code top-level domains (ccTLDs) and second-level domains (ccSLDs).
Our WHOIS data can be quickly integrated into different internal systems to speed up its use by various stakeholders.
Need data viewable in either Extensible Markup Language (XML) or JavaScript Object Notation (JSON)? Our API provides both output types.
Our WHOIS data is gathered in near-real-time, giving you exclusive access to accurate and updated information for better decision-making.
Digital forensics and incident response (DFIR) and other cybersecurity consultants can rely on WHOIS API to provide clients with easy-to-read lists of domains that may have ties to cybercrime, thus allowing them to enhance their cyber defense. This information could be particularly useful in mitigating phishing and other malware-enabled attacks.
Infosec professionals can work with WHOIS API to enhance their solutions and services and protect users against spam, dangerous websites, network infiltrations, and other online misdeeds as well as to investigate third-party risks.
Law enforcement agents can use WHOIS API as a tool for investigations to find IP addresses, websites, and domains sharing attributes with criminals’ online networks.
Domainers can determine if a domain name is available and keep up with registration changes by working with WHOIS API. They can see all historical changes to particular domains with a simple search while the monitoring functionality lets them stay updated on the most recent domain changes.
Domain investors find WHOIS information helpful when tracking the competition and looking for new investment opportunities.
Domain brokers and registrars can rely on WHOIS API to efficiently manage domain name ownership transfers.
DevOps professionals can use WHOIS data to build new features and enrich other data sources as part of their software development and IT operations.
Payment processors and banks can prevent transaction fraud by looking out for customer information discrepancies and thwart malicious actors with the help of WHOIS API.
WHOIS API simplifies marketing research by allowing you to gather domain ownership information for statistical analyses. It also helps you make tailor-fit marketing strategies and campaigns for various user bases and identify otherwise-untapped opportunities.
WHOIS data enables brand agents to spot potential instances of trademark infringement like using blatantly similar, copycat, or duplicate domain names. This information can also be used with Website Categorization products to gather greater context around a domain.
Know your customers and prospects better with WHOIS API’s domain ownership information. Make your outreach efforts easier by using the contact details in domain records.
Our database comes in the form of CSV files and MySQL dumps for maximum compatibility and fast integration into existing systems.
Request a QuoteWe provide extensions for major open-source threat intelligence platforms. Integrate WHOIS API into your applications in minutes.
Go to integrations“WhoisXML API’s rich repository of domain records will be invaluable for Cyware and joint customers, as it enables automated enrichment of domain and IP content via Cyware Orchestrate.”
“The WhoisXML History API has been a game changer for our online investigations, trainings, and books. We have uncovered the true owners behind numerous malicious domains, even though they currently possess "private" Whois registration.”
“Whois XML is one of the most important tools we use for domain intelligence in the Bachelor's Degree program in Investigation and Security Sciences at the University of Perugia. In particular, we appreciate the reverse research from IP to Domain and Whois with query filters. The tool is comprehensive, providing detailed information such as phone numbers, names, and other details from Whois records. While many Whois records are now covered by privacy regulations, WhoisXML API provides access to all historical WHOIS records.”
“WhoisXML was the game changer for us. It has revolutionized our ability to disrupt cybercrime in process and at scale by quickly identifying all of the vendors providing material support for scammers using sophisticated website templates that look legitimate. By quickly identifying the vendors unknowingly supporting the criminals, we can provide them with public interest justification to burn down the criminal infrastructure.”
“The consistent and structured data provided by WhoisXML API made it possible to group and identify who is behind suspected fraudulent websites, being able to search by phone number, address or e-mail address used in the domain registration.”
“I appreciate your products that are useful for checking domain expiration dates.”
“WhoisXML API is a responsive and reliable provider of domain intelligence. Whenever there are issues, they are quick to respond and resolve them. Working with them is smooth and straightforward.”
“WhoisXML API’s domain intelligence allows us to quickly integrate WHOIS lookups into our security heuristics and algorithms without having to worry about hosting services, staging and merging data, and the complicated task of normalization.”
“I used WHOIS API and Website Categorization API. Both tools are simple and straightforward to use. Some API providers have extra bells and whistles that they force you to use, but WhoisXML API is really easy to work with. It’s stable, and I can trust that it’s not going to flatline later.”
“Keeping track of new domain registration activity is essential in today's digital economy. We look forward to continuing our collaboration with WhoisXML API to help customer leverage critical domain insights in a secure cloud environment that aligns with their data privacy and governance requirements.”
“WhoisXML API is amazing for checking out the historic registration information of a domain, pivoting to locate the alternate registrations with the same details and also my cyber investigations. The data proved very useful when investigating pig butchering scams and domains that host child abuse material.”
“Very useful for investigations, we can go back in history and see when domains were registered and who owned them at a certain time.”
“WhoisXML API builds out data sets that help users correlate attack infrastructure with related IP and WHOIS information.”
We are here to listen. For a quick response, please select your request type. By submitting a request, you agree to our Terms of Service and Privacy Policy.