Provide current and historical ownership information on domains / IPs. Identify all connections between domains, registrants, registrars, and DNS servers.
Look into all current and historical DNS / IP connections between domains and A, MX, NS, and other records. Monitor suspicious changes to DNS records.
Get detailed context on an IP address, including its user’s geolocation, time zone, connected domains, connection type, IP range, ASN, and other network ownership details.
Access our web-based solution to dig into and monitor all domain events of interest.
Get access to a web-based enterprise-grade solution to search and monitor domain registrations and ownership details for branded terms, fuzzy matches, registrants of interest, and more.
Our complete set of domain, IP, and DNS intelligence available via API calls as an annual subscription with predictable pricing.
Offers complete access to WHOIS, IP, DNS, and subdomain data for product enrichment, threat hunting and more.
Enjoy priority data access with our premium API services topped with extra perks including dedicated team support, enterprise-grade infrastructure, and SLAs for full scalability and high performance.
Carry a complete threat intelligence analysis for a given domain or IP address and get access to a report covering 120+ parameters including IP resolutions, website analysis, SSL vulnerabilities, malware detection, domain ownership, mail servers, name servers, and more.
Gather threat intelligence via API calls covering Domain’s Infrastructure analysis, SSL Certificates Chain, SSL Configuration Analysis, Domain Malware Check, Connected Domains, and Domain Reputation Scoring.
Bolster enterprise security with our feeds covering Typosquatting domains, Disposable domains, Phishing URLs, Domain & IP reputation, Malicious URLs, Botnet C&C, and DDoS URLs.
We offer comprehensive services for the integration of our data – from consultations to the precise definition of the basic needs of the business to increase the work efficiency.
Set up and manage public WHOIS servers for your business. Our WHOIS parsing system is a utility that collects extensive information about any given domain by sending series of DNS and WHOIS queries. The report is generated in raw as well as in parsed format.
Regardless of whether you are a startup, a small business or a global one, our team is always ready to help you. Enterprises operating on a scale can also choose special premium support management with high priority 24/7 email and telephone responses and other professional services.
The Enriched database is an add-on to the Basic database and contains WHOIS records for each row.
Subscription type | Description |
---|---|
Daily updates | Are available normally at 8 p.m. the next day. Depending on the domain registration activity, up to 8 hours of delay is possible. |
Weekly updates | Weeks start on Sunday. The data files for the last week become available on Monday 8 p.m. UTC every week. |
Monthly updates | The data files for the last month are available on the second day of the month at 8 p.m. UTC. |
Subscription type | Description |
---|---|
Daily updates | typosquatting.YYYY-MM-DD.daily.enriched.csv |
Weekly updates | typosquatting.YYYY-MM-DD.weekly.enriched.csv, where the date corresponds to a Sunday which is the last day whose data are included in the file; thus a week is considered to start with the previous Monday, end with the Sunday in the file name, and the file is published the next Monday after the date in the file name. |
Monthly updates | typosquatting.YYYY-MM-DD.monthly.enriched.csv, where the date corresponds to the first day of the next month, thus e.g. data for July 2020 are in the file typosquatting.2020-08-01.monthly.enriched.csv. |
Note that the weekly and monthly data are derived from the concatenation of the respective daily data and the addition of the first field, the date.
The enriched data files are comma-separated value-files with quotation marks (") as text delimiters. Numeric fields are not delimited. The files use DOS/Windows-style line terminators (CR+LF). The first line is a header line with the field names.
Field | Description |
---|---|
date | The day when the group was detected (only in weekly and monthly files). |
group_number | Ordinal number of the group within the given day (in case of daily subscription, within the file). |
group_member_number | Ordinal number of the domain within the group. |
total_no_of_grp_members | Number of group members within the group. |
domain | Domain name |
domain_utf | Domain name transcribed to Unicode; only for domains with national (non-English) characters. |
registrant_name | From the WHOIS record. |
registrant_organization | From the WHOIS record. |
registrant_country | From the WHOIS record. |
registrant_state | From the WHOIS record. |
registrant_city | From the WHOIS record. |
registrant_email | From the WHOIS record. |
registrarName | From the WHOIS record. |
registrarIANAID | From the WHOIS record. |
whoisServer | The server the WHOIS record was obtained from. |
nameServers | From the WHOIS record. |
status | From the WHOIS record; EPP status codes of the domain. |
createdDate | Registration datetime from the WHOIS record. Note: the date in the WHOIS record may differ from the file date. The file date corresponds to the day when the domain appears as new in the DNS, i.e. starts to resolve. It may not be the same day as the date administered in the WHOIS record, which has no technical implication. |
updatedDate | Last update datetime from the WHOIS record. |
expiresDate | Expiry datetime from the WHOIS record. |
standardRegCreatedDate | Registration datetime in standard format (see the comment at "createdDate"). |
standardRegUpdatedDate | Update datetime in standard format. |
standardRegExpiresDate | Expiry datetime in standard format. |
IPs | A space-separated list of IPv4 addresses assigned to the domain according to a DNS lookup on the day or the day after the file date. |
We are here to listen. For a quick response, please select your request type or check our Contact us page for more information. By submitting a request, you agree to our Terms of Service and Privacy Policy.
WhoisXML API uses cookies to provide you with the best user experience on our website. They also help us understand how our site is being used. Find out more here. By continuing to use our site you consent to the use of cookies.