Provide current and historical ownership information on domains / IPs. Identify all connections between domains, registrants, registrars, and DNS servers.
Look into all current and historical DNS / IP connections between domains and A, MX, NS, and other records. Monitor suspicious changes to DNS records.
Get detailed context on an IP address, including its user’s geolocation, time zone, connected domains, connection type, IP range, ASN, and other network ownership details.
Access our web-based solution to dig into and monitor all domain events of interest.
Get access to a web-based enterprise-grade solution to search and monitor domain registrations and ownership details for branded terms, fuzzy matches, registrants of interest, and more.
Detect and block access to and from dangerous domain names before malicious actors can weaponize them. Contact us today for more information.
Unlock integrated intelligence on Internet properties and their ownership, infrastructure, and other attributes.
Our complete set of domain, IP, and DNS intelligence available via API calls as an annual subscription with predictable pricing.
Offers complete access to WHOIS, IP, DNS, and subdomain data for product enrichment, threat hunting and more.
Enjoy priority data access with our premium API services topped with extra perks including dedicated team support, enterprise-grade infrastructure, and SLAs for full scalability and high performance.
Multi-Level API User Administration Now Available - Manage individual API keys for team members in your organization.
Learn MoreGet a list of all domains associated with an IP address via API calls with outputs in JSON and XML formats.
Get started500 free API credits. No credit card required.
Determine infrastructure connections between hostnames and IP addresses using one of the biggest archives of Domain Name System (DNS) records today.
Reverse IP & DNS API lets you query up to 10 IPs per second so you can quickly identify which domains are connected.
Our Reverse IP & DNS API comes with code samples for easy integration in several programming languages. It’s also available as a Splunk Enterprise application.
A reverse IP API is an intelligence consumption model with data delivery via API calls. The API establishes which domains might be using the same IP to host their websites’ contents. It allows website owners to check if their IP address is shared or dedicated and serves several purposes.
Identify all potentially dangerous domains that share the same IP with known malicious websites.
Identify your attack surface by discovering all the hosts and IPs related to a given target website/IP address. You can also check if you have the same IP addresses as vulnerable websites with Reverse IP API. Further analysis is possible, too, with Reverse WHOIS API and Reverse WHOIS Search.
During or after an intrusion or incident, you can use Reverse IP capabilities to identify the attackers’ hostnames.
You can also use Reverse IP API to ensure that your website’s IP address is not being used by any other domain. That may lower your search engine ranking and move your site to a less reputable area of the Internet.
Hosting your website on a crowded IP address or one with a bad reputation due to malicious neighboring domains can negatively affect your website performance and how you are perceived on the web. It may even land you on a blacklist.
Our Reverse IP API enables you to conduct an inventory of all your websites or those of your competitors hosted on the same IP address. The API also helps with brand protection, as it can find other domains that potential attackers own and pinpoint otherwise-unknown related web properties that can cause harm.
DNS Database Download is a large historical DNS record repository with several billions of historical DNS events as specified in our files covering A, MX, NS, TXT, CNAME, and SOA records.
Request a Quote“WhoisXML API’s passive DNS database, even the lite version for academic purposes, has much better subdomain data coverage compared with other commercial and free databases.”
“WhoisXML was the game changer for us. It has revolutionized our ability to disrupt cybercrime in process and at scale by quickly identifying all of the vendors providing material support for scammers using sophisticated website templates that look legitimate. By quickly identifying the vendors unknowingly supporting the criminals, we can provide them with public interest justification to burn down the criminal infrastructure.”
“After thorough testing, we were thrilled to find that Premium DNS 365 consistently identified 10 times more 'active' subdomains compared to other options in the market.”
Our APIs are available in an enhanced version that offers better performance with a dedicated load balancer and a premium endpoint to enable faster throttling for large-scale API deployments.
Learn moreReverse IP/DNS capabilities are only a part of our extensive set of APIs. Get complete access to domain, IP, and DNS intelligence with an annual WhoisXML API subscription.
Learn moreWe are here to listen. For a quick response, please select your request type. By submitting a request, you agree to our Terms of Service and Privacy Policy.