Provide current and historical ownership information on domains / IPs. Identify all connections between domains, registrants, registrars, and DNS servers.
Look into all current and historical DNS / IP connections between domains and A, MX, NS, and other records. Monitor suspicious changes to DNS records.
Get detailed context on an IP address, including its user’s geolocation, time zone, connected domains, connection type, IP range, ASN, and other network ownership details.
Access our web-based solution to dig into and monitor all domain events of interest.
Get access to a web-based enterprise-grade solution to search and monitor domain registrations and ownership details for branded terms, fuzzy matches, registrants of interest, and more.
Detect and block access to and from dangerous domain names before malicious actors can weaponize them. Contact us today for more information.
Unlock integrated intelligence on Internet properties and their ownership, infrastructure, and other attributes.
Our complete set of domain, IP, and DNS intelligence available via API calls as an annual subscription with predictable pricing.
Offers complete access to WHOIS, IP, DNS, and subdomain data for product enrichment, threat hunting and more.
Multi-Level API User Administration Now Available - Manage individual API keys for team members in your organization.
Learn MoreField | Type | Description |
---|---|---|
whois_record_id | BIGINT(20) PRIMARY KEY NOT NULL | Primary key of whois_record |
created_date | VARCHAR(200) | When the domain name was first registered/created |
updated_date | VARCHAR(200) | When the WHOIS data was updated. |
expires_date | VARCHAR(200) | When the domain name will expire |
admin_contact_id | BIGINT(11) FOREIGN KEY | The foreign key representing the ID of the adminstrative contact for this whois_record. It references the primary key in contact table. The administrative contact is a person in charge of the administrative dealings pertaining to the company of the domain name |
registrant_id | BIGINT(11) FOREIGN KEY | The foreign key representing the ID of the registrant for this whois_record. It references the primary key in contact table. The domain name registrant is the owner of the domain name. They are the ones who are responsible for keeping the entire WHOIS contact information up to date |
technical_contact_id | BIGINT(11) FOREIGN KEY | The foreign key representing the ID of the technical contact for this whois_record. It references the primary key in contact table. The technical contact is the person in charge of all technical questions regarding a particular domain name |
zone_contact_id | BIGINT(11) FOREIGN KEY | The foreign key representing the ID of the zone contact for this whois_record. The zone contact is the person who tends to the technical aspects of maintaining the domain’s name server and resolver software, and database files |
billing_contact_id | BIGINT(11) FOREIGN KEY | The foreign key representing the ID of the billing contact for this whois_record. It references the primary key in the contact table. The billing contact is the person who is authorized by the registrant to receive the invoice for domain name registration and domain name renewal fees |
domain_name | VARCHAR(70) UNIQUE KEY | Domain Name |
name_servers | TEXT | Name servers or DNS servers for the domain name. The most important function of DNS servers is the translation (resolution) of human-readable domain names and hostnames into the corresponding numeric Internet Protocol (IP) addresses |
registry_data_id | BIGINT(11) FOREIGN KEY | The foreign key representing the ID of the registry data. It references the primary key in registry_data table. Registry Data is typically a WHOIS record from a domain name registry. Every domain name usually has up to 2 WHOIS records, one from the registry and one from the registrar. The whois_record table represents the data from the registrar, whilst the registry_data table represents WHOIS data collected from the WHOIS registry. Note that registry_data and whois_record has almost identical data structures. Certain gTLDs (e.g. most of .com and .net) have both types of WHOIS data, while most ccTLDs have only registry_data. Hence, it’s recommended to look under both whois_record and registry_data when searching for a piece of information (e.g. registrant, created_date) |
status | TEXT | The domain name status code see http://www.wdbc.com/domain/status-codes.cfm for details. |
raw_text | LONGTEXT | The full raw text of the WHOIS record |
audit_created_date | TIMESTAMP | The date when the WHOIS record was collected on whoisxmlapi.com; Note that it is different from created_date of whois_record or registry_data tables. |
audit_updated_date | TIMESTAMP | The date when the WHOIS record was updated on whoismlxapi.com; Note that it is different from updated_date of whois_record or registry_data tables |
unparsable | LONGTEXT | The part of the raw text which hasn't been parsed by our WHOIS parser |
parse_code | SMALLINT(6) | A bit mask indicating which fields have been parsed in the record; a binary value of 1 at position i points to a non-empty value field at that position; the fields from the least significant bit to the most significant one are following: "createdDate", "expiresDate", "referralURL" (exists in "registryData" only), "registrarName", "status", "updatedDate", "whoisServer" (exists in "registryData" only), "nameServers", "administrativeContact", "billingContact", "registrant", "technicalContact", and "zoneContact"; for example, parse code 310 (112) means that the only non-empty fields are "createdDate" and "expiresDate", and parse code 810 (10002) means that the only non-empty field is "registrarName". if you need to ascertain that a WHOIS record contains ownership information, compare parse code to 00100000000002 (51210). It stands for non-empty field "registrant"; To check the parse code value, use bit operators. (In MySQL it will be parse_code & 00100000000002 = 00100000000002) |
header_text | LONGTEXT | The header of the WHOIS record is part of the raw text up until the first identifiable field |
clean_text | LONGTEXT | The stripped text of the WHOIS record which includes a part of the raw text except the header and the footer. Typically, it only contains identifiable fields |
footer_text | LONGTEXT | The footer of the WHOIS record is part of the raw after the last identifiable field |
registrar_name | VARCHAR(512) | The organization or commercial entity which manages the reservation of Internet domain names |
data_error | SMALLINT(6) |
|
Field | Type | Description |
---|---|---|
registry_data_id | BIGINT(20) PRIMARY KEY NOT NULL | Primary key of registry_data |
created_date | VARCHAR(200) | Same as in the whois_record table |
updated_date | VARCHAR(200) | Same as in the whois_record table |
expires_date | VARCHAR(200) | Same as in the whois_record table |
admin_contact_id | BIGINT(11) FOREIGN KEY | Same as in the whois_record table |
registrant_id | BIGINT(11) FOREIGN KEY | Same as in the whois_record table |
technical_contact_id | BIGINT(11) FOREIGN KEY | Same as in the whois_record table |
zone_contact_id | BIGINT(11) FOREIGN KEY | Same as in the whois_record table |
billing_contact_id | BIGINT(11) FOREIGN KEY | Same as in the whois_record table |
domain_name | VARCHAR(70) UNIQUE KEY | Same as in the whois_record table |
name_servers | TEXT | Same as in the whois_record table |
status | TEXT | Same as in the whois_record table |
raw_text | LONGTEXT | Same as in the whois_record table |
audit_created_date | TIMESTAMP | Same as in the whois_record table |
audit_updated_date | TIMESTAMP | Same as in the whois_record table |
unparsable | LONGTEXT | Same as in the whois_record table |
parse_code | SMALLINT(6) | Same as in the whois_record table |
header_text | LONGTEXT | Same as in the whois_record table |
clean_text | LONGTEXT | Same as in the whois_record table |
footer_text | LONGTEXT | Same as in the whois_record table |
registrar_name | VARCHAR(512) | Same as in the whois_record table |
whois_server | VARCHAR(512) | WHOIS server |
referral_url | VARCHAR(512) | The URL of the WHOIS server which contains extra information regarding the domain name |
data_error | SMALLINT(6) | Same as in the whois_record table |
Field | Type | Description |
---|---|---|
contact_id | BIGINT(20) PRIMARY KEY NOT NULL | Primary key |
name | VARCHAR(256) | Name |
organization | VARCHAR(256) | Organization |
street1 | VARCHAR(256) | Street |
street2 | VARCHAR(256) | Street |
street3 | VARCHAR(256) | Street |
street4 | VARCHAR(256) | Street |
city | VARCHAR(64) | City |
state | VARCHAR(45) | State |
postal_code | VARCHAR(45) | Postal code |
country | VARCHAR(45) | Country |
VARCHAR(256) | ||
telephone | VARCHAR(45) | Telephone |
telephone_ext | VARCHAR(45) | Telephone extension |
fax | VARCHAR(45) | Fax |
fax_ext | VARCHAR(45) | Fax extension |
parse_code | SMALLINT(6) | Same as in the whois_record table |
raw_text | LONGTEXT | The slice of the corresponding raw WHOIS record containing contact data |
unparsable | LONGTEXT | Same as in the whois_record table |
audit_created_date | VARCHAR(45) | Same as in the whois_record table |
audit_updated_date | VARCHAR(45) | Same as in the whois_record table |
We are here to listen. For a quick response, please select your request type. By submitting a request, you agree to our Terms of Service and Privacy Policy.