Jump to content

WhoisXML API

From ICANNWiki
Revision as of 16:29, 18 September 2023 by Anna (talk | contribs) (Created new article about WhoisXML API)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

WhoisXML API is a cyber intelligence provider specializing in domain, IP, and DNS datasets. It also provides specialized Internet intelligence sources and services, such as website categorization, IP geolocation, predictive threat intelligence, and email verification.

As an Inc. 5000 honoree from 2017 to 2019 and 2021 to 2023 [1], WhoisXML API has offered its services to more than 52,000 users, including Fortune 500 companies, leading security and technology solutions providers, and organizations in various other sectors to develop advanced cybersecurity systems, map entities’ digital footprints, conduct in-depth cyber investigations, implement brand protection strategies, and enrich competitor and marketing data.

WhoisXML API has one of the most extensive domain and DNS data coverage in the market. As of 1 September 2023, its repositories cover billions of DNS records, more than 16.7 billion WHOIS records, and 99.5% of all the IP addresses in use.[2] Since the company’s foundation over a decade ago, it has partnered and continues to collaborate with major data aggregators worldwide, including domain registries, registrars, ISPs, and security agencies.

History and Growth

WhoisXML API was incorporated in 2014. However, it was initially conceptualized in 2010 when its CEO and founder Jonathan Zhang worked on a network security project that required access to structured WHOIS data.[3] Zhang’s struggle to find a unified and readily integrable data source led to the idea of creating a company that would help organizations with that business problem.

WhoisXML API’s overarching goal is to make the Internet safer and more transparent. The company does that by providing comprehensive and in-depth cyber intelligence.

Products and Services

WhoisXML API offers several products and services through various consumption models—APIs, data feeds, and web-based GUIs. Below is a list of the products WhoisXML API offers as of 1 September 2023.

Type Domain/WHOIS DNS/IP Internet Intelligence
APIs
  • WHOIS API
  • Bulk WHOIS API
  • Reverse WHOIS API
  • WHOIS History API
  • Domains & Subdomains Discovery API
  • Domain Availability API
  • DNS Lookup API
  • Reverse IP API
  • Reverse MX API
  • Reverse NS API
  • Reverse DNS API
  • Subdomains Lookup API
  • IP Geolocation API
  • IP Netblocks API
  • Website Categorization API
  • Domain Reputation API
  • Brand Alert API
  • Registrant Alert API
  • Email Verification API
  • Website Contacts API
  • MAC Address API
  • Screenshot API
  • SSL Certificates API
  • Premium API Services
Data Feeds
  • WHOIS Database Download
  • WHOIS History Database
  • Newly Registered Domains
  • Real-Time Domain Registration
  • DNS Database Download
  • Subdomains Database Download
  • IP Geolocation Data Feed
  • IP Netblocks WHOIS Database
  • Early DGA Detection Feed
  • Early Warning Phishing Feed
  • Typosquatting Data Feed
  • Threat Intelligence Data Feeds
  • Disposable Email Domains Data Feed
  • Free Email Domains Data Feed
  • Website Contacts & Categorization Database
  • MAC Address Vendor Database
  • SSL Certificates Database
  • Real-Time SSL Certificates Streaming
  • Newly Created Websites
  • All Registered Domains
Web Tools
  • WHOIS Lookup
  • Bulk WHOIS Lookup
  • Reverse WHOIS Lookup
  • WHOIS History Lookup
  • Domains & Subdomains Discovery Lookup
  • Domain Availability Lookup
  • DNS Lookup
  • Reverse IP Lookup
  • Reverse MX Lookup
  • Reverse NS Lookup
  • Reverse DNS Lookup
  • Subdomains Lookup
  • IP Geolocation Lookup
  • Bulk IP Geolocation Lookup
  • IP Netblocks Lookup
  • Website Categorization Lookup
  • Domain Reputation Lookup
  • Brand Alert Lookup
  • Registrant Alert Lookup
  • Email Verification Lookup
  • Bulk Email Verification Lookup
  • Website Contacts Lookup
  • MAC Address Lookup
  • Screenshot Lookup
  • SSL Certificates Lookup

DNS Database Coverage

In the second quarter of 2023, WhoisXML API released Premium DNS Database, a market-leading passive DNS database with the highest number of fully qualified domain names (FQDNs).[4]

Cyber Threat Intelligence

WhoisXML API supplies a wide range of Threat Intelligence APIs that users can analyze and integrate into existing security solutions. These APIs include:

  • Domain Infrastructure Analysis API
  • SSL Certificates Chain API
  • SSL Configuration Analysis API
  • Domain Malware Check API
  • Connected Domains API
  • Domain Reputation Scoring API

The company also offers Threat Intelligence Data Feeds that list malicious Internet assets involved in phishing, botnets, malware, C&C servers, spam, Tor exit nodes, and other cyber attacks and suspicious web activities.

Domain Research Suite (DRS)

WhoisXML API has a web-based domain search and monitor platform called the “Domain Research Suite (DRS).” It is a 9-in-1 solution that lets users notably look up a domain’s current and historical WHOIS details, pivot off any WHOIS record to find connected properties, and search for domains or subdomains containing specific text strings. DRS also allows users to monitor domain registration activities. DRS includes the following tools:

  • Reverse WHOIS Search
  • WHOIS History Search
  • WHOIS Search
  • Reverse DNS Search
  • Domain Availability Check
  • Domains & Subdomains Discovery
  • Domain Monitor
  • Registrant Monitor
  • Brand Monitor

These tools are also available as individual APIs. DRS is available for white labeling as well.[5] A white-label variant of Brand Monitor was also launched in 2021.[6]

IP Intelligence

In 2022, WhoisXML API enriched its IP intelligence with regulatory compliance-related IP data. It launched the Regulatory Compliance IP Geolocation Data Feeds, which currently contains IP addresses and netblocks belonging to Office of Foreign Assets Control (OFAC)-restricted locations. The company is working on providing separate files for IP addresses associated with areas covered by the International Traffic in Arms Regulations (ITAR) and the Common Foreign and Security Policy (CFSP).[7]

Partnerships and Collaborations

WhoisXML API has worked with prestigious entities in the cybersecurity, fraud detection, brand protection, and law enforcement sectors. In April 2022, the company was invited to present at Europol’s 13th Operation In Our Sites (IOS) held in Alicante, Spain.[8]

In 2020, WhoisXML API worked with a Bloomberg columnist to raise awareness about coronavirus-themed domains[9] that were likely to figure in malicious activities. Its other collaborations include those with the National Child Protection Task Force (NCPTF),[10] ScamAdviser,[11] and EU DisinfoLab.[12]

WhoisXML API continues its call for partnerships under several programs, namely:

  • Affiliate Programs
  • Data Exchange Program for Internet Abuse Prevention
  • Security Intel Exchange Program
  • Research and Media Collaborations

External Links

References