Access historical DNS data points based on the data you already have, whether it’s an IP address or a domain name.
Tap into our market-leading passive DNS database with billions of recorded events collected and aggregated for years.
Generate lookup reports within seconds. Copy or download the results in JSON format for deeper analysis.
Quickly review the historical connections of suspicious domains and IP addresses interacting with your network.
Obtain a full list of domains and subdomains historically linked to known IP addresses and could represent forgotten or shadow assets.
Analyze the DNS activity timeline of known malicious domains and IP addresses to uncover their connections over a specific period.
Audit your domain’s IP connections over time, and look for unusual or unauthorized changes that may indicate misconfigurations or compromise.
“We want to provide all Cyberscape users the ability to integrate relevant data for their cyber threat investigations. WhoisXML API provides unique data that will be helpful to the cyber threat investigation community, allowing analysts to shorten the cycle of understanding and mitigating threats.”
“WhoisXML API’s passive DNS database, even the lite version for academic purposes, has much better subdomain data coverage compared with other commercial and free databases.”
“WhoisXML was the game changer for us. It has revolutionized our ability to disrupt cybercrime in process and at scale by quickly identifying all of the vendors providing material support for scammers using sophisticated website templates that look legitimate. By quickly identifying the vendors unknowingly supporting the criminals, we can provide them with public interest justification to burn down the criminal infrastructure.”
“After thorough testing, we were thrilled to find that Chronicle DNS Database consistently identified 10 times more 'active' subdomains compared to other options in the market.”
















We provide complete and relevant domain WHOIS data which can be customized and easily integrated as per your business needs.
Learn more
Easily identify malicious resources and retrieve their threat information.
Learn more
Get the most relevant data to be ahead of emerging security threats.
Learn more
Find out the exact physical location of any IP address, email or domain name.
Learn more
Monitor exact matches, variations and common misspellings of your brand name & trademarks.
Learn more
Get the most comprehensive database of SSL (Secure Sockets Layer) Certificates.
Learn more
Find out which domains were added or dropped by registrants, with given search criteria.
Learn more
Get data feeds of new registered domains along with their WHOIS data generated in real time.
Learn more
Get the most comprehensive database of registered MAC address blocks, also referred to as OUIs (Organizationally Unique Identifiers).
Learn more
Enhance your domain research toolkit by our enterprise-grade web-based solution that helps you in searching...
Learn more
Easily detect all typosquatting domain names as soon as they are registered each day.
Learn more
Assess the domain's or IP addresses reputation and risk profile with a simple score based on a comprehensive...
Learn more
Get data feeds of SSL certificates along with their well parsed fields in real time. Accurate. Up-to-date.
Learn more
Find domains and subdomains related by specific terms in their hostnames.
Learn more
Get well-parsed and normalized WHOIS information for any domain name, IP address or email.
Learn more
Get vendor information, detect virtual machines, manufacturer, location, read the information encoded in the MAC address.
Learn more
Give the list of domain names tied to the specified DNS records via API calls with outputs in JSON and XML.
Learn more
Get insights for the new business registered on the web.
Learn more