Provide current and historical ownership information on domains / IPs. Identify all connections between domains, registrants, registrars, and DNS servers.
Look into all current and historical DNS / IP connections between domains and A, MX, NS, and other records. Monitor suspicious changes to DNS records.
Get detailed context on an IP address, including its user’s geolocation, time zone, connected domains, connection type, IP range, ASN, and other network ownership details.
Access our web-based solution to dig into and monitor all domain events of interest.
Get access to a web-based enterprise-grade solution to search and monitor domain registrations and ownership details for branded terms, fuzzy matches, registrants of interest, and more.
Detect and block access to and from dangerous domain names before malicious actors can weaponize them. Contact us today for more information.
Unlock integrated intelligence on Internet properties and their ownership, infrastructure, and other attributes.
Our complete set of domain, IP, and DNS intelligence available via API calls as an annual subscription with predictable pricing.
Offers complete access to WHOIS, IP, DNS, and subdomain data for product enrichment, threat hunting and more.
Enjoy priority data access with our premium API services topped with extra perks including dedicated team support, enterprise-grade infrastructure, and SLAs for full scalability and high performance.
Multi-Level API User Administration Now Available - Manage individual API keys for team members in your organization.
Learn MoreWe deliver the most comprehensive source of WHOIS domain data to enable a more secure and transparent Internet for all businesses.
Get active WHOIS records for domains registered using gTLDs as well as ccTLDs. Several thousand gTLDs among which popular .com, .org, and .net as well as .us, .biz, .mobi, .info, .pro, .coop, .asia and many other new gTLDs. Click here for the entire list. Hundreds of ccTLDs such as .uk, .jp, .cn, and .de. Click here for the entire list.
Get key data points for domains, including Registrant name, organization, e-mail address, registration address, registrar information, creation date, expiration date, updated date, domain availability, domain age, and more.
Our WHOIS data encompasses 374+ million active domain names, with hundreds of thousands of records added daily to our WHOIS database.
Get both parsed and raw WHOIS data for downloads as database dumps (MYSQL or MYSQL dump) and Comma Separated Values (.CSV) files. You can view a sample here.
All the WHOIS information is well-parsed and normalized to a consistent format for easy integration with your business processes.
Get over 21.0 billion historic WHOIS records.
WHOIS database downloads, also known as "WHOIS data downloads," are repositories of WHOIS records. Each record contains registration dates, contact information, postal addresses, and server details, among other data points.
Download Free SampleTake a look at our product sheet and contact us for pricing and other details.
Request a QuoteCybersecurity professionals use WHOIS download services for reconnaissance needs and security analysis, such as the correlation of domain activity for threat detection and mitigation, as well as for fraud prevention and the identification of Internet assets from high-risk locations.
WHOIS database download can be used to enrich security information and event management (SIEM), Security Orchestration, Automation, and Response (SOAR), Threat Intelligence Platform (TIP), Automation, and Orchestration Tools.
Registrars purchase WHOIS database downloads to keep track of domains.
Digital risk protection products can work with WHOIS intelligence to gather context on hostnames, IPs, and email addresses found on pastebins and forums as part of pivot and enrichment analyses.
Law enforcement agencies use WHOIS data downloads to identify all the connected domains, websites, and IP addresses associated with fraudulent activities and criminals.
WHOIS data downloads help managed security service providers (MSSP) and managed detection and response providers (MDR) to differentiate their threat detection and management services.
Marketing research analysts and contact data warehouses use WHOIS data to examine domain registration trends and create market forecasts.
Utilizing data from billions of WHOIS records helps you offer a greater strategic advantage over competitors. Develop accurate statistical market insights, providing an authoritative market understanding for your marketing and sales clients.
Brand protection agents can rely on WHOIS data downloads to check for registrations that strongly overlap with their brands and trademarks and take action to prevent highly-similar and copycat domain names from confusing customers and visitors.
Digital forensics and incident response (DFIR) consultants can rely on WHOIS data downloads to provide their clients with easy-to-read lists of domains that may have ties to cybercrime, allowing them to beef up their cybersecurity posture.
Fraud solution vendors, payment processing companies, and banks can integrate domain data points from our WHOIS database into their models and applications. By correlating the data with other sources, they can improve their ability to detect inconsistencies indicative of fraud or connections to domain names flagged malicious.
WHOIS database download is also an excellent means to look for domains related to phishing and other malware-instigated attacks.
Contact data warehouses can purchase WHOIS data to enrich, verify and enhance business contact data.
Researchers seeking answers to Internet-user-base-related questions can buy WHOIS database downloads to gauge the maturity of existing markets and identify budding growth areas.
Investment banking institutions use domain registration data to enhance business intelligence on portfolio companies and monitor corporation domain assets.
WHOIS data can help investigate Indicators of Compromise (IOC) and produce Threat Intelligence.
“WhoisXML API’s rich repository of domain records will be invaluable for Cyware and joint customers, as it enables automated enrichment of domain and IP content via Cyware Orchestrate.”
“The WhoisXML History API has been a game changer for our online investigations, trainings, and books. We have uncovered the true owners behind numerous malicious domains, even though they currently possess "private" Whois registration.”
“Whois XML is one of the most important tools we use for domain intelligence in the Bachelor's Degree program in Investigation and Security Sciences at the University of Perugia. In particular, we appreciate the reverse research from IP to Domain and Whois with query filters. The tool is comprehensive, providing detailed information such as phone numbers, names, and other details from Whois records. While many Whois records are now covered by privacy regulations, WhoisXML API provides access to all historical WHOIS records.”
“WhoisXML was the game changer for us. It has revolutionized our ability to disrupt cybercrime in process and at scale by quickly identifying all of the vendors providing material support for scammers using sophisticated website templates that look legitimate. By quickly identifying the vendors unknowingly supporting the criminals, we can provide them with public interest justification to burn down the criminal infrastructure.”
“The consistent and structured data provided by WhoisXML API made it possible to group and identify who is behind suspected fraudulent websites, being able to search by phone number, address or e-mail address used in the domain registration.”
“I appreciate your products that are useful for checking domain expiration dates.”
“WhoisXML API is a responsive and reliable provider of domain intelligence. Whenever there are issues, they are quick to respond and resolve them. Working with them is smooth and straightforward.”
“WhoisXML API’s domain intelligence allows us to quickly integrate WHOIS lookups into our security heuristics and algorithms without having to worry about hosting services, staging and merging data, and the complicated task of normalization.”
“I used WHOIS API and Website Categorization API. Both tools are simple and straightforward to use. Some API providers have extra bells and whistles that they force you to use, but WhoisXML API is really easy to work with. It’s stable, and I can trust that it’s not going to flatline later.”
“Keeping track of new domain registration activity is essential in today's digital economy. We look forward to continuing our collaboration with WhoisXML API to help customer leverage critical domain insights in a secure cloud environment that aligns with their data privacy and governance requirements.”
“WhoisXML API is amazing for checking out the historic registration information of a domain, pivoting to locate the alternate registrations with the same details and also my cyber investigations. The data proved very useful when investigating pig butchering scams and domains that host child abuse material.”
“Very useful for investigations, we can go back in history and see when domains were registered and who owned them at a certain time.”
“WhoisXML API builds out data sets that help users correlate attack infrastructure with related IP and WHOIS information.”
We are here to listen. For a quick response, please select your request type. By submitting a request, you agree to our Terms of Service and Privacy Policy.