Provide current and historical ownership information on domains / IPs. Identify all connections between domains, registrants, registrars, and DNS servers.
Look into all current and historical DNS / IP connections between domains and A, MX, NS, and other records. Monitor suspicious changes to DNS records.
Get detailed context on an IP address, including its user’s geolocation, time zone, connected domains, connection type, IP range, ASN, and other network ownership details.
Access our web-based solution to dig into and monitor all domain events of interest.
Get access to a web-based enterprise-grade solution to search and monitor domain registrations and ownership details for branded terms, fuzzy matches, registrants of interest, and more.
Predictive threat intelligence is your best first line of defense. Subscribe to the feeds to strengthen your cybersecurity posture. Contact us today for more information.
Unlock integrated intelligence on Internet properties and their ownership, infrastructure, and other attributes.
Our complete set of domain, IP, and DNS intelligence available via API calls as an annual subscription with predictable pricing.
Offers complete access to WHOIS, IP, DNS, and subdomain data for product enrichment, threat hunting and more.
Multi-Level API User Administration Now Available - Manage individual API keys for team members in your organization.
Learn MoreReverse domain queries via lookups or API calls are useful to identify all domain records that correspond to search terms like a name, an email address, a phone number, etc.
Get started500 free API requests. No credit card required.
Integrate our Reverse WHOIS API into existing security platforms, workflows, and other tools to find domain names connected by a registrant identifier.
Explore APIEasily retrieve a list of domains linked by a specific WHOIS detail via our GUI.
Explore LookupConduct Reverse WHOIS searches and enhance investigations using the smart interface and powerful pivoting tools of our Domain Research Suite (DRS) platform.
Explore SuiteEstablish all known domain name associations with individuals and organizations. Learn more about domain footprints with the consumption model — lookup or API — of your choice.
Narrow down your search results by employing filtering parameters to exclude terms that are not relevant to your query.
Go with any WHOIS detail you have on hand to run queries via Reverse WHOIS Lookup and make API calls with Reverse WHOIS API. You can use exact-match terms or fuzzy ones for broader results.
Results from our lookup tool and API are gathered from the most comprehensive historical WHOIS database on the market with daily updates. All the data returned is parsed, normalized, and consistently formatted.
Keep an eye out for domain names registered by known cybersquatters and brand infringers by uncovering all web properties tied to public WHOIS details—either current or historical—on record.
Using public WHOIS record details as starting points, learn more about threat actors’ current or historical domain footprints and possibly their cybercrime tactics and Indicators of Compromise (IoCs)’ domain infrastructure setup.
Use our reverse WHOIS solutions to know about upcoming product launches, mergers and acquisitions (M&As), and strategic digital events related to your competitors. Their most recent domain acquisitions can clue you into their future plans.
Find out how trustworthy the company you’re hoping to do business with is. Their domains and accompanying WHOIS records may help you confirm claims regarding location, size of operations, and how long a potential partner has been in business.
Gauge how large an organization’s potential attack surface is. The entirety of their domain footprint over time obtained via our reverse WHOIS solutions can uncover forgotten domains that could serve as attack vectors.
“WhoisXML API builds out data sets that help users correlate attack infrastructure with related IP and WHOIS information.”
“We want to provide all Cyberscape users the ability to integrate relevant data for their cyber threat investigations. WhoisXML API provides unique data that will be helpful to the cyber threat investigation community, allowing analysts to shorten the cycle of understanding and mitigating threats.”
“Whois XML is one of the most important tools we use for domain intelligence in the Bachelor's Degree program in Investigation and Security Sciences at the University of Perugia. In particular, we appreciate the reverse research from IP to Domain and Whois with query filters. The tool is comprehensive, providing detailed information such as phone numbers, names, and other details from Whois records. While many Whois records are now covered by privacy regulations, WhoisXML API provides access to all historical WHOIS records.”
“WhoisXML was the game changer for us. It has revolutionized our ability to disrupt cybercrime in process and at scale by quickly identifying all of the vendors providing material support for scammers using sophisticated website templates that look legitimate. By quickly identifying the vendors unknowingly supporting the criminals, we can provide them with public interest justification to burn down the criminal infrastructure.”
“WhoisXML API is amazing for checking out the historic registration information of a domain, pivoting to locate the alternate registrations with the same details and also my cyber investigations. The data proved very useful when investigating pig butchering scams and domains that host child abuse material.”
“Very useful for investigations, we can go back in history and see when domains were registered and who owned them at a certain time.”
“WhoisXML API builds out data sets that help users correlate attack infrastructure with related IP and WHOIS information.”
“We want to provide all Cyberscape users the ability to integrate relevant data for their cyber threat investigations. WhoisXML API provides unique data that will be helpful to the cyber threat investigation community, allowing analysts to shorten the cycle of understanding and mitigating threats.”
“Whois XML is one of the most important tools we use for domain intelligence in the Bachelor's Degree program in Investigation and Security Sciences at the University of Perugia. In particular, we appreciate the reverse research from IP to Domain and Whois with query filters. The tool is comprehensive, providing detailed information such as phone numbers, names, and other details from Whois records. While many Whois records are now covered by privacy regulations, WhoisXML API provides access to all historical WHOIS records.”
“WhoisXML was the game changer for us. It has revolutionized our ability to disrupt cybercrime in process and at scale by quickly identifying all of the vendors providing material support for scammers using sophisticated website templates that look legitimate. By quickly identifying the vendors unknowingly supporting the criminals, we can provide them with public interest justification to burn down the criminal infrastructure.”
“WhoisXML API is amazing for checking out the historic registration information of a domain, pivoting to locate the alternate registrations with the same details and also my cyber investigations. The data proved very useful when investigating pig butchering scams and domains that host child abuse material.”
“Very useful for investigations, we can go back in history and see when domains were registered and who owned them at a certain time.”
“WhoisXML API builds out data sets that help users correlate attack infrastructure with related IP and WHOIS information.”
We are here to listen. For a quick response, please select your request type. By submitting a request, you agree to our Terms of Service and Privacy Policy.