Gain a 360-degree view of the DNS by accessing intelligence for billions of FQDNs and their IP resolutions and other DNS records, collected and verified over years of continuous monitoring.
We offer DNS data organized by record type and delivery method, making processing and integration easier across both downloadable files and real-time streams.
Access DNS datasets with broad historical coverage and added clarity from active and wildcard checks, giving you both wide visibility and precise, noise-reduced intelligence.
Access our most extensive DNS database, with full historical coverage across all major record types (A, AAAA, MX, NS, TXT, CNAME, SOA, PTR). Data is delivered through regularly published full datasets and incremental record updates.
Access continuous DNS resolution data through two endpoints: the Passive Endpoint for rapid, large-scale visibility into all observed queries, and the Active Endpoint for a filtered, validated feed of resolvable records across all major types.
Maps a domain name to an IPv4 address.
Designates the mail server where emails should be sent.
Points to the authoritative server for the given domain name.
Contains information about a domain in text format.
Maps a domain name to a canonical name.
Contains data for a given domain or DNS zone.
Maps a name to an IPv6 address.
Maps an IP address to a domain name.
Stay one step ahead by analyzing DNS data, from long-term historical records to real-time resolution activity, to detect and mitigate potential threats, such as new and existing malware variants and evolving attack patterns.
Don’t lose sight of threat actors and their tactics, techniques, and procedures (TTPs) on the Internet. Intensify threat actor monitoring by tracking their historical and active DNS footprints and exposing malicious connections and infrastructures.
Reduce cyber blind spots by feeding security applications with the most extensive DNS intelligence, combining long-term depth, verified accuracy, and live visibility, allowing users to leverage otherwise hidden and untapped insights.
Widen asset discovery and vulnerability management—find suspicious and malicious DNS patterns and connections by combining scale, accuracy, and timeliness, helping ensure you or your clients are not vulnerable.
“We want to provide all Cyberscape users the ability to integrate relevant data for their cyber threat investigations. WhoisXML API provides unique data that will be helpful to the cyber threat investigation community, allowing analysts to shorten the cycle of understanding and mitigating threats.”
“WhoisXML API’s passive DNS database, even the lite version for academic purposes, has much better subdomain data coverage compared with other commercial and free databases.”
“WhoisXML was the game changer for us. It has revolutionized our ability to disrupt cybercrime in process and at scale by quickly identifying all of the vendors providing material support for scammers using sophisticated website templates that look legitimate. By quickly identifying the vendors unknowingly supporting the criminals, we can provide them with public interest justification to burn down the criminal infrastructure.”
“After thorough testing, we were thrilled to find that Chronicle DNS Database consistently identified 10 times more 'active' subdomains compared to other options in the market.”
















Give the list of domain names tied to the specified DNS records via API calls with outputs in JSON and XML.
Learn more
Assess the domain's or IP addresses reputation and risk profile with a simple score based on a comprehensive...
Learn more
Easily identify malicious resources and retrieve their threat information.
Learn more
Get insights for the new business registered on the web.
Learn more
Find out the exact physical location of any IP address, email or domain name.
Learn more
Get well-parsed and normalized WHOIS information for any domain name, IP address or email.
Learn more
Get data feeds of new registered domains along with their WHOIS data generated in real time.
Learn more
Get vendor information, detect virtual machines, manufacturer, location, read the information encoded in the MAC address.
Learn more
Get data feeds of SSL certificates along with their well parsed fields in real time. Accurate. Up-to-date.
Learn more
We provide complete and relevant domain WHOIS data which can be customized and easily integrated as per your business needs.
Learn more
Get the most relevant data to be ahead of emerging security threats.
Learn more
Monitor exact matches, variations and common misspellings of your brand name & trademarks.
Learn more
Get the most comprehensive database of SSL (Secure Sockets Layer) Certificates.
Learn more
Enhance your domain research toolkit by our enterprise-grade web-based solution that helps you in searching...
Learn more
Find domains and subdomains related by specific terms in their hostnames.
Learn more
Easily detect all typosquatting domain names as soon as they are registered each day.
Learn more
Find out which domains were added or dropped by registrants, with given search criteria.
Learn more
Get the most comprehensive database of registered MAC address blocks, also referred to as OUIs (Organizationally Unique Identifiers).
Learn more