Provide current and historical ownership information on domains / IPs. Identify all connections between domains, registrants, registrars, and DNS servers.
Look into all current and historical DNS / IP connections between domains and A, MX, NS, and other records. Monitor suspicious changes to DNS records.
Get detailed context on an IP address, including its user’s geolocation, time zone, connected domains, connection type, IP range, ASN, and other network ownership details.
Access our web-based solution to dig into and monitor all domain events of interest.
Get access to a web-based enterprise-grade solution to search and monitor domain registrations and ownership details for branded terms, fuzzy matches, registrants of interest, and more.
Detect and block access to and from dangerous domain names before malicious actors can weaponize them. Contact us today for more information.
Unlock integrated intelligence on Internet properties and their ownership, infrastructure, and other attributes.
Our complete set of domain, IP, and DNS intelligence available via API calls as an annual subscription with predictable pricing.
Offers complete access to WHOIS, IP, DNS, and subdomain data for product enrichment, threat hunting and more.
Enjoy priority data access with our premium API services topped with extra perks including dedicated team support, enterprise-grade infrastructure, and SLAs for full scalability and high performance.
Multi-Level API User Administration Now Available - Manage individual API keys for team members in your organization.
Learn MoreReverse domain queries via lookups or API calls are useful to identify all domain records that correspond to search terms like a name, an email address, a phone number, etc.
Get started500 free API requests. No credit card required.
Use our handy lookup web interface to query your search term of interest and get a list of all domain names found in the last 7 days (i.e., for which the term appears in the domains’ WHOIS records). Include and exclude certain terms with the advanced lookup option.
You can use Reverse WHOIS API to list linked domain names via API calls. We provide documentation and client libraries to facilitate integration.
Establish all known domain name associations with individuals and organizations. Learn more about domain footprints with the consumption model — lookup or API — of your choice.
Narrow down your search results by employing filtering parameters to exclude terms that are not relevant to your query.
Go with any WHOIS detail you have on hand to run queries via Reverse WHOIS Lookup and make API calls with Reverse WHOIS API. You can use exact-match terms or fuzzy ones for broader results.
Results from our lookup tool and API are gathered from the most comprehensive historical WHOIS database on the market with daily updates. All the data returned is parsed, normalized, and consistently formatted.
Keep an eye out for domain names registered by known cybersquatters and brand infringers by uncovering all web properties tied to public WHOIS details—either current or historical—on record.
Using public WHOIS record details as starting points, learn more about threat actors’ current or historical domain footprints and possibly their cybercrime tactics and Indicators of Compromise (IoCs)’ domain infrastructure setup.
Use our reverse WHOIS solutions to know about upcoming product launches, mergers and acquisitions (M&As), and strategic digital events related to your competitors. Their most recent domain acquisitions can clue you into their future plans.
Find out how trustworthy the company you’re hoping to do business with is. Their domains and accompanying WHOIS records may help you confirm claims regarding location, size of operations, and how long a potential partner has been in business.
Gauge how large an organization’s potential attack surface is. The entirety of their domain footprint over time obtained via our reverse WHOIS solutions can uncover forgotten domains that could serve as attack vectors.
“Whois XML is one of the most important tools we use for domain intelligence in the Bachelor's Degree program in Investigation and Security Sciences at the University of Perugia. In particular, we appreciate the reverse research from IP to Domain and Whois with query filters. The tool is comprehensive, providing detailed information such as phone numbers, names, and other details from Whois records. While many Whois records are now covered by privacy regulations, WhoisXML API provides access to all historical WHOIS records.”
“WhoisXML was the game changer for us. It has revolutionized our ability to disrupt cybercrime in process and at scale by quickly identifying all of the vendors providing material support for scammers using sophisticated website templates that look legitimate. By quickly identifying the vendors unknowingly supporting the criminals, we can provide them with public interest justification to burn down the criminal infrastructure.”
“WhoisXML API is amazing for checking out the historic registration information of a domain, pivoting to locate the alternate registrations with the same details and also my cyber investigations. The data proved very useful when investigating pig butchering scams and domains that host child abuse material.”
“Very useful for investigations, we can go back in history and see when domains were registered and who owned them at a certain time.”
“WhoisXML API builds out data sets that help users correlate attack infrastructure with related IP and WHOIS information.”
We are here to listen. For a quick response, please select your request type. By submitting a request, you agree to our Terms of Service and Privacy Policy.