Domain to IP, IP to domain—Unlock historical connections instantly

DNS Chronicle Lookup lets you perform a forward search for any FQDN to find its historically connected IP addresses or a reverse search for an IP address’s past connected FQDNs—all within seconds. Test it now.

50 Billion+Domains and subdomains

116 Billion+DNS records

7,596+gTLDs and ccTLDs tracked

52,000+Satisfied customers

Why use DNS Chronicle Lookup?

Bidirectional lookups

Access historical DNS data points based on the data you already have, whether it’s an IP address or a domain name.
Deep DNS history

Tap into our market-leading passive DNS database with billions of recorded events collected and aggregated for years.
Fast and easy

Generate lookup reports within seconds. Copy or download the results in JSON format for deeper analysis.

Ready to automate your workflows with API access?

Start API Trial

Practical Usage

Threat detection

Quickly review the historical connections of suspicious domains and IP addresses interacting with your network.
Attack surface discovery

Obtain a full list of domains and subdomains historically linked to known IP addresses and could represent forgotten or shadow assets.
Malicious infrastructure tracking

Analyze the DNS activity timeline of known malicious domains and IP addresses to uncover their connections over a specific period.
Domain monitoring

Audit your domain’s IP connections over time, and look for unusual or unauthorized changes that may indicate misconfigurations or compromise.

Get 500 free API credits. No credit card required.

Get started

Kim Kok

Vice President

Core4ce

“We want to provide all Cyberscape users the ability to integrate relevant data for their cyber threat investigations. WhoisXML API provides unique data that will be helpful to the cyber threat investigation community, allowing analysts to shorten the cycle of understanding and mitigating threats.”

Shahnoor Kiani

Volunteer

CyberPeace Institute

“WhoisXML API’s passive DNS database, even the lite version for academic purposes, has much better subdomain data coverage compared with other commercial and free databases.”

Michael Roberts

Founder & Private Investigator

Rexxfield

“WhoisXML was the game changer for us. It has revolutionized our ability to disrupt cybercrime in process and at scale by quickly identifying all of the vendors providing material support for scammers using sophisticated website templates that look legitimate. By quickly identifying the vendors unknowingly supporting the criminals, we can provide them with public interest justification to burn down the criminal infrastructure.”

VP of Engineering

EASM company

“After thorough testing, we were thrilled to find that Premium DNS 365 consistently identified 10 times more 'active' subdomains compared to other options in the market.”

WHOIS / WHOIS History

DNS / DNS History

IP Geolocation / IP Netblocks

Domain Research Suite (DRS)

Domain/WHOIS

DNS/IP

Intelligence

Other

Domain/WHOIS

DNS/IP

Intelligence

Other

Domain/WHOIS

DNS/IP

Intelligence

Other

Domain Research Suite (DRS)

Research

Monitoring

White-Label

Predictive Threat Intelligence Feeds

Internet Infrastructure

Enterprise API Packages

Security Intelligence (SI) Suite

Domain to IP, IP to domain—Unlock historical connections instantly

Why use DNS Chronicle Lookup?

Bidirectional lookups

Deep DNS history

Fast and easy

Ready to automate your workflows with API access?

Practical Usage

Threat detection

Attack surface discovery

Malicious infrastructure tracking

Domain monitoring

Get 500 free API credits. No credit card required.

Have questions?