Provide current and historical ownership information on domains / IPs. Identify all connections between domains, registrants, registrars, and DNS servers.
Look into all current and historical DNS / IP connections between domains and A, MX, NS, and other records. Monitor suspicious changes to DNS records.
Get detailed context on an IP address, including its user’s geolocation, time zone, connected domains, connection type, IP range, ASN, and other network ownership details.
Access our web-based solution to dig into and monitor all domain events of interest.
Get access to a web-based enterprise-grade solution to search and monitor domain registrations and ownership details for branded terms, fuzzy matches, registrants of interest, and more.
Detect and block access to and from dangerous domain names before malicious actors can weaponize them. Contact us today for more information.
Unlock integrated intelligence on Internet properties and their ownership, infrastructure, and other attributes.
Our complete set of domain, IP, and DNS intelligence available via API calls as an annual subscription with predictable pricing.
Offers complete access to WHOIS, IP, DNS, and subdomain data for product enrichment, threat hunting and more.
Multi-Level API User Administration Now Available - Manage individual API keys for team members in your organization.
Learn MorePerform a forward search for any FQDN to retrieve all of its historical A and AAAA records or a reverse DNS search for an IP address to obtain a list of all associated FQDNs.
Get started500 free API credits. No credit card required.
DNS Chronicle API allows you to access past A and AAAA records for an FQDN, or retrieve a list of FQDNs historically associated with an IP address. This ability enables you to perform searches based on the data you currently have.
Clear and comprehensive API documentation is available to facilitate your integration and usage of DNS Chronicle API. API results are provided in JSON or XML format, making it compatible with most systems.
The API retrieves data from a market-leading historical DNS record database with billions of recorded events, allowing you to uncover the deep DNS history of any web property and its connections.
Identify unusual changes in domains’ DNS records, such as rapid IP address shifts, which may indicate malicious activity.
Discover outdated or previously unknown domains and subdomains linked to historical company IP addresses.
Track the historical DNS activity of known malicious domain names to uncover links to threat actors and detect suspicious patterns.
Analyze the past IP address resolutions of domain names to support investigations into infrastructure and usage patterns.
Our comprehensive database of historical DNS records contains information on billions of domains and subdomains, enabling users to gather all available DNS data points.
Request a Quote“WhoisXML API’s passive DNS database, even the lite version for academic purposes, has much better subdomain data coverage compared with other commercial and free databases.”
“WhoisXML was the game changer for us. It has revolutionized our ability to disrupt cybercrime in process and at scale by quickly identifying all of the vendors providing material support for scammers using sophisticated website templates that look legitimate. By quickly identifying the vendors unknowingly supporting the criminals, we can provide them with public interest justification to burn down the criminal infrastructure.”
“After thorough testing, we were thrilled to find that Premium DNS 365 consistently identified 10 times more 'active' subdomains compared to other options in the market.”
Get free access to our API. 500 free credits. No credit card required.
We are here to listen. For a quick response, please select your request type. By submitting a request, you agree to our Terms of Service and Privacy Policy.