Provide current and historical ownership information on domains / IPs. Identify all connections between domains, registrants, registrars, and DNS servers.
Look into all current and historical DNS / IP connections between domains and A, MX, NS, and other records. Monitor suspicious changes to DNS records.
Get detailed context on an IP address, including its user’s geolocation, time zone, connected domains, connection type, IP range, ASN, and other network ownership details.
Access our web-based solution to dig into and monitor all domain events of interest.
Get access to a web-based enterprise-grade solution to search and monitor domain registrations and ownership details for branded terms, fuzzy matches, registrants of interest, and more.
Detect and block access to and from dangerous domain names before malicious actors can weaponize them. Contact us today for more information.
Unlock integrated intelligence on Internet properties and their ownership, infrastructure, and other attributes.
Our complete set of domain, IP, and DNS intelligence available via API calls as an annual subscription with predictable pricing.
Offers complete access to WHOIS, IP, DNS, and subdomain data for product enrichment, threat hunting and more.
Multi-Level API User Administration Now Available - Manage individual API keys for team members in your organization.
Learn MoreWe provide a variety of WHOIS data consumption models, including APIs, lookup tools, and direct access to our 21.0B+ historical WHOIS records via database downloads.
Get started500 free API requests. No credit card required.
Despite the capital letters in “WHOIS”, it is not an acronym. Yet as the name suggests, a WHOIS record tells you all about a domain name’s registrant. Each WHOIS record gives pertinent details about the domain, including its age, registration status (creation, last update, and expiration dates), registrar, and owner. It allows users to obtain a domain owner’s contact details for reasons that include cyber investigation, market research, domain purchase, competitor monitoring, and more.
Our WHOIS database contains more than a billion records spanning domains and subdomains scattered across 7,596+ gTLDs, ccTLDs and ccSLDs.
We parse and normalize all of our WHOIS data so it can be used as is or quickly integrated into a variety of internal systems.
We provide query results in convenient formats across all of our products. API outputs are available in XML and JSON, database downloads in CSV and MySQL, and lookup reports are hosted using a custom URL and are shareable.
Near real-time data gathering means instantaneous access to accurate information, enabling better decision-making. Our WHOIS information is updated daily.
Need domain data points such as registrant name, organization, email address, location, registrar information, creation/last update/expiration dates, availability, age, and more? WHOIS Lookup can help with web-hosted shareable reports.
A single API call is all you need to obtain WHOIS information for your various business requirements. Get the first 500 WHOIS API calls free of charge if you sign up for an account.
Our bulk WHOIS processing tools provide WHOIS records for an entire list of domains/IP addresses made via a single RESTful API or graphical user interface (GUI) query. Upload your existing data and download the results in comma-separated values (CSV) format.
We provide complete and relevant domain WHOIS data that can be customized and easily integrated into systems for all your business needs. We do our best to widen the scope of our database and boost its accuracy to offer data that is as well-structured as possible.
Enable your digital forensics and incident response (DFIR) and other cybersecurity teams to collate domain ownership information to enhance their solutions and find ties, if any, to ongoing malicious campaigns.
Allow payment processors to look out for customer information discrepancies in WHOIS records to potentially catch fraudsters. Protect online shop owners from risks related to identity theft.
Carefully screen domains based on their WHOIS records to keep your potential attack surface to a minimum. Ward off domains that don’t belong to legitimate companies from your network as early as the discovery stage.
Make sure you are talking only to the authorized representatives of any third party you’re planning to do business with by scrutinizing their WHOIS record details.
Simplify investigations by obtaining domain ownership information to spot signs of potential cybersquatting. Arm your brand protection agents with WHOIS data so they can pinpoint potential instances of trademark infringement.
Be the first to obtain a potentially high-demand domain name by keeping track of all registration changes. Domains that changed hands could clue you into what your competitors are up to as well.
“WhoisXML API’s rich repository of domain records will be invaluable for Cyware and joint customers, as it enables automated enrichment of domain and IP content via Cyware Orchestrate.”
“The WhoisXML History API has been a game changer for our online investigations, trainings, and books. We have uncovered the true owners behind numerous malicious domains, even though they currently possess "private" Whois registration.”
“Whois XML is one of the most important tools we use for domain intelligence in the Bachelor's Degree program in Investigation and Security Sciences at the University of Perugia. In particular, we appreciate the reverse research from IP to Domain and Whois with query filters. The tool is comprehensive, providing detailed information such as phone numbers, names, and other details from Whois records. While many Whois records are now covered by privacy regulations, WhoisXML API provides access to all historical WHOIS records.”
“WhoisXML was the game changer for us. It has revolutionized our ability to disrupt cybercrime in process and at scale by quickly identifying all of the vendors providing material support for scammers using sophisticated website templates that look legitimate. By quickly identifying the vendors unknowingly supporting the criminals, we can provide them with public interest justification to burn down the criminal infrastructure.”
“The consistent and structured data provided by WhoisXML API made it possible to group and identify who is behind suspected fraudulent websites, being able to search by phone number, address or e-mail address used in the domain registration.”
“I appreciate your products that are useful for checking domain expiration dates.”
“WhoisXML API is a responsive and reliable provider of domain intelligence. Whenever there are issues, they are quick to respond and resolve them. Working with them is smooth and straightforward.”
“WhoisXML API’s domain intelligence allows us to quickly integrate WHOIS lookups into our security heuristics and algorithms without having to worry about hosting services, staging and merging data, and the complicated task of normalization.”
“I used WHOIS API and Website Categorization API. Both tools are simple and straightforward to use. Some API providers have extra bells and whistles that they force you to use, but WhoisXML API is really easy to work with. It’s stable, and I can trust that it’s not going to flatline later.”
“Keeping track of new domain registration activity is essential in today's digital economy. We look forward to continuing our collaboration with WhoisXML API to help customer leverage critical domain insights in a secure cloud environment that aligns with their data privacy and governance requirements.”
“WhoisXML API is amazing for checking out the historic registration information of a domain, pivoting to locate the alternate registrations with the same details and also my cyber investigations. The data proved very useful when investigating pig butchering scams and domains that host child abuse material.”
“Very useful for investigations, we can go back in history and see when domains were registered and who owned them at a certain time.”
“WhoisXML API builds out data sets that help users correlate attack infrastructure with related IP and WHOIS information.”
We are here to listen. For a quick response, please select your request type. By submitting a request, you agree to our Terms of Service and Privacy Policy.