WhoisXML API
WhoisXML API is a cyber intelligence provider specializing in domain, IP, and DNS datasets. It also provides specialized Internet intelligence sources and services, such as website categorization, IP geolocation, predictive threat intelligence, and email verification.
 | |
| Industry: | Internet intelligence |
| Founded: | California, 2014 |
| Founder(s): | Jonathan Zhang |
| Country: | USA |
| Website: | whoisxmlapi.com |
| Blog: | WhoisXML API Blog |
| Facebook: | WhoisXML API |
| LinkedIn: | WhoisXML API |
| Twitter: |  @whoisxmlapi
|
As an Inc. 5000 honoree from 2017 to 2019 and 2021 to 2023 [1], WhoisXML API has offered its services to more than 52,000 users, including Fortune 500 companies, security and technology solutions providers, and organizations in various other sectors to develop cybersecurity systems, map entities’ digital footprints, conduct in-depth cyber investigations, implement brand protection strategies, and enrich competitor and marketing data.
WhoisXML API has extensive domain and DNS data coverage in the market. As of 1 September 2023, its repositories cover more than 16.7 billion WHOIS records, and 99.5% of all the IP addresses in use.[2] Since the company’s foundation over a decade ago, it has partnered and continues to collaborate with major data aggregators worldwide, including domain registries, registrars, ISPs, and security agencies.
History and Growth
WhoisXML API was incorporated in 2014. However, it was initially conceptualized in 2010 when its CEO and founder Jonathan Zhang worked on a network security project that required access to structured WHOIS data.[3] Zhang’s struggle to find a unified and readily integrable data source led to the idea of creating a company that would help organizations with that business problem.
WhoisXML API’s overarching goal is to make the Internet safer and more transparent. The company does that by providing comprehensive and in-depth cyber intelligence.
Products and Services
WhoisXML API offers several products and services through various consumption models—APIs, data feeds, and web-based GUIs. Below is a list of the products WhoisXML API offers as of 1 September 2023.
| Type | Domain/WHOIS | DNS/IP | Internet Intelligence |
|---|---|---|---|
| APIs | WHOIS API
Bulk WHOIS API Reverse WHOIS API WHOIS History API Domains & Subdomains Discovery API Domain Availability API |
DNS Lookup API
Reverse IP API Reverse MX API Reverse NS API Reverse DNS API Subdomains Lookup API IP Geolocation API IP Netblocks API |
Website Categorization API
Domain Reputation API Brand Alert API Registrant Alert API Email Verification API Website Contacts API MAC Address API Screenshot API SSL Certificates API Premium API Services |
| Data Feeds | WHOIS Database Download
WHOIS History Database Newly Registered Domains Real-Time Domain Registration |
DNS Database Download
Subdomains Database Download IP Geolocation Data Feed IP Netblocks WHOIS Database |
Early DGA Detection Feed
Early Warning Phishing Feed Typosquatting Data Feed Threat Intelligence Data Feeds Disposable Email Domains Data Feed Free Email Domains Data Feed Website Contacts & Categorization Database MAC Address Vendor Database SSL Certificates Database Real-Time SSL Certificates Streaming Newly Created Websites All Registered Domains |
| Web Tools | WHOIS Lookup
Bulk WHOIS Lookup Reverse WHOIS Lookup WHOIS History Lookup Domains & Subdomains Discovery Lookup Domain Availability Lookup |
DNS Lookup
Reverse IP Lookup Reverse MX Lookup Reverse NS Lookup Reverse DNS Lookup Subdomains Lookup IP Geolocation Lookup Bulk IP Geolocation Lookup IP Netblocks Lookup |
Website Categorization Lookup
Domain Reputation Lookup Brand Alert Lookup Registrant Alert Lookup Email Verification Lookup Bulk Email Verification Lookup Website Contacts Lookup MAC Address Lookup Screenshot Lookup SSL Certificates Lookup |
DNS Database Coverage
In the second quarter of 2023, WhoisXML API released Premium DNS Database, a market-leading passive DNS database with the highest number of fully qualified domain names (FQDNs).[4]
Cyber Threat Intelligence
WhoisXML API supplies a wide range of Threat Intelligence APIs that users can analyze and integrate into existing security solutions. These APIs include:
- Domain Infrastructure Analysis API
- SSL Certificates Chain API
- SSL Configuration Analysis API
- Domain Malware Check API
- Connected Domains API
- Domain Reputation Scoring API
The company also offers Threat Intelligence Data Feeds that list malicious Internet assets involved in phishing, botnets, malware, C&C servers, spam, Tor exit nodes, and other cyber attacks and suspicious web activities.
Domain Research Suite (DRS)
WhoisXML API has a web-based domain search and monitor platform called the “Domain Research Suite (DRS).” It is a 9-in-1 solution that lets users notably look up a domain’s current and historical WHOIS details, pivot off any WHOIS record to find connected properties, and search for domains or subdomains containing specific text strings. DRS also allows users to monitor domain registration activities. DRS includes the following tools:
- Reverse WHOIS Search
- WHOIS History Search
- WHOIS Search
- Reverse DNS Search
- Domain Availability Check
- Domains & Subdomains Discovery
- Domain Monitor
- Registrant Monitor
- Brand Monitor
These tools are also available as individual APIs. DRS is available for white labeling as well.[5] A white-label variant of Brand Monitor was also launched in 2021.[6]
IP Intelligence
In 2022, WhoisXML API enriched its IP intelligence with regulatory compliance-related IP data. It launched the Regulatory Compliance IP Geolocation Data Feeds, which currently contains IP addresses and netblocks belonging to Office of Foreign Assets Control (OFAC)-restricted locations. The company is working on providing separate files for IP addresses associated with areas covered by the International Traffic in Arms Regulations (ITAR) and the Common Foreign and Security Policy (CFSP).[7]
Partnerships and Collaborations
WhoisXML API has worked with prestigious entities in the cybersecurity, fraud detection, brand protection, and law enforcement sectors. In April 2022, the company was invited to present at Europol’s 13th Operation In Our Sites (IOS) held in Alicante, Spain.[8]
In 2020, WhoisXML API worked with a Bloomberg columnist to raise awareness about coronavirus-themed domains[9] that were likely to figure in malicious activities. Its other collaborations include those with the National Child Protection Task Force (NCPTF),[10] ScamAdviser,[11] and EU DisinfoLab.[12]
WhoisXML API continues its call for partnerships under several programs, namely:
- Affiliate Programs
- Data Exchange Program for Internet Abuse Prevention
- Security Intel Exchange Program
- Research and Media Collaborations
External Links
References
- ↑ Inc.com
- ↑ WhoisXML API in Figures
- ↑ WhoisXML API: Jonathan Zhang explains everything about the service. (19 October 2022). SecNews.
- ↑ WhoisXML API Releases Premium DNS Database with Market-Leading DNS Coverage. (3 July 2023). EIN Newswires.
- ↑ White-Label Domain Research Suite
- ↑ WhoisXML API Launches White-Label Brand Monitor to Make Brand Protection More Accessible. (16 August 2021). CircleID.
- ↑ WhoisXML API’s IP Intelligence Now Includes Regulatory Compliance IP Data Feeds. (14 December 2022). EIN Newswires.
- ↑ WhoisXML API Presents Global DNS Trends at Europol
- ↑ Don’t Click That Link! It Might Be Viral. (2 April 2020). Bloomberg.
- ↑ The National Child Protection Task Force (NCPTF) & WhoisXML API—OSINT Tech That Saves Lives
- ↑ Domain Registration Data Aids in Understanding the State of Online Scams
- ↑ EU DisinfoLab Uses Historical WHOIS Data to Cast a Light on Indian Chronicles