WhoisXML API

Revision as of 13:41, 19 September 2023 by Anna (talk | contribs)

WhoisXML API is a cyber intelligence provider specializing in domain, IP, and DNS datasets. The company also provides specialized Internet intelligence sources and services, such as predictive threat intelligence, website categorization, IP geolocation, and email verification.

Industry: Internet intelligence
Founded: California, 2014
Founder(s): Jonathan Zhang
Country: USA
Website: whoisxmlapi.com
Blog: WhoisXML API Blog
Facebook: WhoisXML API
LinkedIn: WhoisXML API
Twitter: @whoisxmlapi

WhoisXML API has been an Inc. 5000 honoree from 2017 to 2019 and 2021 to 2023 [1] and has offered its services to more than 52,000 users. Its clients include Fortune 500 companies, security and technology solutions providers, and governmental organizations.

WhoisXML API has extensive domain and DNS data coverage in the market. As of 1 September 2023, its repositories cover more than 16.7 billion WHOIS records and 99.5% of all the IP addresses in use.[2] The company has partnered and continues to collaborate with large data aggregators worldwide, including domain registries, registrars, ISPs, and security agencies.

History and Growth

WhoisXML API was incorporated in 2014. However, it was initially conceptualized in 2010 when its CEO and founder Jonathan Zhang worked on a network security project that required access to structured WHOIS data.[3] Zhang’s struggle to find a unified and readily integrable data source led to the idea of creating a company that would help organizations with that business problem.

WhoisXML API’s overarching goal is to make the Internet safer and more transparent. The company does that by providing comprehensive and in-depth cyber intelligence.

Products and Services

WhoisXML API offers several products and services through various consumption models—APIs, data feeds, and web-based GUIs. Below is a list of the products WhoisXML API offers as of 1 September 2023.

Type Domain/WHOIS DNS/IP Internet Intelligence
APIs WHOIS API

Bulk WHOIS API

Reverse WHOIS API

WHOIS History API

Domains & Subdomains Discovery API

Domain Availability API

DNS Lookup API

Reverse IP API

Reverse MX API

Reverse NS API

Reverse DNS API

Subdomains Lookup API

IP Geolocation API

IP Netblocks API

Website Categorization API

Domain Reputation API

Brand Alert API

Registrant Alert API

Email Verification API

Website Contacts API

MAC Address API

Screenshot API

SSL Certificates API

Premium API Services

Data Feeds WHOIS Database Download

WHOIS History Database

Newly Registered Domains

Real-Time Domain Registration

DNS Database Download

Subdomains Database Download

IP Geolocation Data Feed

IP Netblocks WHOIS Database

Early DGA Detection Feed

Early Warning Phishing Feed

Typosquatting Data Feed

Threat Intelligence Data Feeds

Disposable Email Domains Data Feed

Free Email Domains Data Feed

Website Contacts & Categorization Database

MAC Address Vendor Database

SSL Certificates Database

Real-Time SSL Certificates Streaming

Newly Created Websites

All Registered Domains

Web Tools WHOIS Lookup

Bulk WHOIS Lookup

Reverse WHOIS Lookup

WHOIS History Lookup

Domains & Subdomains Discovery Lookup

Domain Availability Lookup

DNS Lookup

Reverse IP Lookup

Reverse MX Lookup

Reverse NS Lookup

Reverse DNS Lookup

Subdomains Lookup

IP Geolocation Lookup

Bulk IP Geolocation Lookup

IP Netblocks Lookup

Website Categorization Lookup

Domain Reputation Lookup

Brand Alert Lookup

Registrant Alert Lookup

Email Verification Lookup

Bulk Email Verification Lookup

Website Contacts Lookup

MAC Address Lookup

Screenshot Lookup

SSL Certificates Lookup

DNS Database Coverage

In the second quarter of 2023, WhoisXML API released Premium DNS Database, a market-leading passive DNS repository that the company claims has the highest number of fully qualified domain names (FQDNs).[4]

Cyber Threat Intelligence

WhoisXML API supplies a wide range of Threat Intelligence APIs that users can analyze and integrate into existing security solutions. These APIs include:

  • Domain Infrastructure Analysis API
  • SSL Certificates Chain API
  • SSL Configuration Analysis API
  • Domain Malware Check API
  • Connected Domains API
  • Domain Reputation Scoring API

The company also offers Threat Intelligence Data Feeds that list malicious Internet assets involved in phishing, botnets, malware, C&C servers, spam, Tor exit nodes, and other cyber attacks and suspicious web activities.

Domain Research Suite (DRS)

WhoisXML API has a web-based domain search and monitor platform called the “Domain Research Suite (DRS).” It is a 9-in-1 solution designed to look up a domain’s current and historical WHOIS details, pivot off any WHOIS record to find connected properties, and search for domains or subdomains containing specific text strings. DRS also allows users to monitor domain registration activities. DRS includes the following tools:

  • Reverse WHOIS Search
  • WHOIS History Search
  • WHOIS Search
  • Reverse DNS Search
  • Domain Availability Check
  • Domains & Subdomains Discovery
  • Domain Monitor
  • Registrant Monitor
  • Brand Monitor

IP Intelligence

In 2022, WhoisXML API launched the Regulatory Compliance IP Geolocation Data Feeds, which currently contains IP addresses and netblocks tied to the locations restricted by the Office of Foreign Assets Control (OFAC). The company is working on providing separate files for IP addresses linked to areas restricted by the International Traffic in Arms Regulations (ITAR) and the Common Foreign and Security Policy (CFSP).[5]

Partnerships and Collaborations

WhoisXML API has worked with prestigious entities in the cybersecurity, fraud detection, brand protection, and law enforcement sectors. In April 2022, the company was invited to present at Europol’s 13th Operation In Our Sites (IOS) held in Alicante, Spain.[6]

In 2020, WhoisXML API worked with a Bloomberg columnist to raise awareness about coronavirus-themed domains[7] that were likely to figure in malicious activities. Its other collaborations include those with the National Child Protection Task Force (NCPTF),[8] ScamAdviser,[9] and EU DisinfoLab.[10]

WhoisXML API continues its call for partnerships under several programs, namely:

  • Affiliate Programs
  • Data Exchange Program for Internet Abuse Prevention
  • Security Intel Exchange Program
  • Research and Media Collaborations

External Links

References