### WHOIS API GET Request Example Source: https://whois.whoisxmlapi.com/documentation/making-requests Demonstrates making a WHOIS API request using the GET method with domain name and API key parameters. This is a common way to query registration details. ```curl GET https://www.whoisxmlapi.com/whoisserver/WhoisService?apiKey=API_KEY&domainName=google.com ``` -------------------------------- ### Generate New API Key Source: https://whois.whoisxmlapi.com/documentation/generate-new-api-key This section details the API endpoint for generating a new API key. It specifies the HTTP method, URL, required parameters like 'currentApiKey', optional parameters like 'outputFormat', and provides examples of JSON and XML output. ```APIDOC API endpoint GET https://user.whoisxmlapi.com/user-service/api-key/generate?currentApiKey=API_KEY Parameters: currentApiKey | _Required_. Get your personal API key on the [My products](https://user.whoisxmlapi.com/products) page. outputFormat | _Optional_. Response output format. Acceptable values: _JSON_ | _XML_ Default: _JSON_ Output format examples: ```json { "apiKey": "at_xxxxxxxxxxxxxxxxxxxxxxxxxxxxx" } ``` ```xml at_xxxxxxxxxxxxxxxxxxxxxxxxxxxxx ``` Output parameters: apiKey | Generated API key. Error codes: 400 Bad Request | The API key you entered does not exist or is no longer active. 422 Unprocessable Entity | Input correct request parameters. ``` -------------------------------- ### WhoisXML API Request Structure Source: https://whois.whoisxmlapi.com/documentation/making-requests-old Details the base URL and required parameters for making a WHOIS lookup request to the WhoisXMLAPI.com service. It outlines the GET request format and the essential authentication and query parameters. ```APIDOC GET https://www.whoisxmlapi.com/whoisserver/WhoisService?domainName=google.com Input parameters: required apiKey | Get your personal API key on the [My products](https://user.whoisxmlapi.com/products) page. domainName | The domain/IPv4/IPv6/email address for which WHOIS data is requested. Input parameters: optional outputFormat | Response output format. Acceptable values: _JSON_ | _XML_ Default: _XML_ preferFresh | _1_ results in getting the latest WHOIS record even if it's incomplete. Acceptable values: _0_ | _1_ Default: _0_ da | _1_ results in a quick check on domain availability, _2_ is slower but more accurate. Results are returned under _WhoisRecord → domainAvailability_ (AVAILABLE | UNAVAILABLE | UNDETERMINED) Acceptable values: _0_ | _1_ | _2_ Default: _0_ ip | 1 results in returning IPs for the domain name. Acceptable values: _0_ | _1_ Default: _0_ ipWhois | _1_ results in returning the WHOIS record for the hosting IP if the WHOIS record for the tld of the input domain is not supported. Acceptable values: _0_ | _1_ Default: _0_ checkProxyData | _1_ results in fetching proxy/WHOIS guard data, if it exists, in the _WhoisRecord → privateWhoisProxy_ schema element. Acceptable values: _0_ | _1_ Default: _0_ thinWhois | _1_ results in returning WHOIS data from registry only, without fetching data from registrar. Returned registry data corresponds to the _WhoisRecord → registryData_ schema element. Acceptable values: _0_ | _1_ Default: _0_ ignoreRawTexts | _1_ results in stripping all raw text from the output. Acceptable values: _0_ | _1_ Default: _0_ callback | A javascript function used when _outputFormat_ is JSON; this is an implementation known as JSONP which invokes the callback on the returned response. _parse | _1_ provides parsing for input WHOIS raw texts described below. Acceptable values: _0_ | _1_ Default: _0_ registryRawText | A string representing the registry WHOIS raw text to be parsed; works only when the __parse_ parameter is equal to _1_. registrarRawText | A string representing the registrar WHOIS raw text to be parsed; works only when the __parse_ parameter is equal to _1_. ``` -------------------------------- ### XML Error Response Example Source: https://whois.whoisxmlapi.com/documentation/error-handling Illustrates the structure of an error message returned in XML format by the WhoisXML API. It includes an error code and a descriptive message. ```xml WHOIS_01 The parameter domainName is missing. ``` -------------------------------- ### Account Balance Information API Source: https://whois.whoisxmlapi.com/documentation/account-balance-information Retrieve your current account balance for WhoisXML API services. Supports both GET and POST requests with API key authentication. Optional parameters allow specifying product IDs and output format. ```APIDOC GET https://user.whoisxmlapi.com/user-service/account-balance?apiKey=API_KEY POST https://user.whoisxmlapi.com/user-service/account-balance Parameters: apiKey: string (Required) - Your personal API key. Obtain from the My products page. productId: string (Optional) - Filters balance information for a specific product. Product IDs can be found in the API response. outputFormat: string (Optional) - Specifies the response output format. Acceptable values: JSON (default), XML. Notes: - WHOIS credits are shared between WHOIS API and Bulk WHOIS API. - Domain Research Suite credits are shared across multiple DRS products like Brand Alert API, Registrant Alert API, etc. ``` -------------------------------- ### JSON Error Message Example Source: https://whois.whoisxmlapi.com/documentation/limits An example of an error message returned by the API when the request limit is exceeded, formatted in JSON. ```json { "ErrorMessage": { "errorCode": "AUTHENTICATE_06", "msg": "You are limited to 50 queries per second. The request is rejected." } } ``` -------------------------------- ### Enterprise API Packages Source: https://whois.whoisxmlapi.com/documentation/account-balance-information Bundles domain, IP, and DNS intelligence into comprehensive API packages with predictable annual subscription pricing. ```APIDOC Enterprise API Packages: Purpose: Comprehensive domain, IP, and DNS intelligence via API. Endpoint: https://main.whoisxmlapi.com/api-packages/enterprise-api-package Details: Annual subscription with predictable pricing. ``` -------------------------------- ### Data Feeds Overview Source: https://whois.whoisxmlapi.com/documentation/account-balance-information Lists various data feeds available for download, including WHOIS databases, DNS records, and threat intelligence data. These feeds provide bulk access to historical and real-time information. ```APIDOC Data Feeds: WHOIS Database Download: https://www.whoisxmlapi.com/whois-database-download.php WHOIS History Database Download: https://whois-history.whoisxmlapi.com/database Disposable Email Domains Database: https://emailverification.whoisxmlapi.com/disposable-email-domains DNS Database Download: https://reverse-ip.whoisxmlapi.com/database Early DGA Detection Data Feed: https://threat-prediction.whoisxmlapi.com/early-dga-detection-feed Early Warning Phishing Data Feed: https://threat-prediction.whoisxmlapi.com/early-warning-phishing-feed First Watch Malicious Domains Data Feed: https://firstwatch.whoisxmlapi.com Free Email Domains Database: https://emailverification.whoisxmlapi.com/free-email-domains-list IP Geolocation Database Download: https://ip-geolocation.whoisxmlapi.com/database IP Netblocks WHOIS Database: https://ip-netblocks.whoisxmlapi.com/database MAC Address Vendor Database: https://mac-address.whoisxmlapi.com/database Newly Created Websites: https://newly-created-websites.whoisxmlapi.com Newly Registered Domains: https://newly-registered-domains.whoisxmlapi.com Real-time Domain Registration: https://domain-registration-streaming.whoisxmlapi.com Real-time SSL Certificates Streaming: https://ssl-certificates.whoisxmlapi.com/real-time-streaming SSL Certificates Database: https://ssl-certificates.whoisxmlapi.com/database Subdomains Database Download: https://subdomains.whoisxmlapi.com/database Threat Intelligence Data Feeds: https://threat-intelligence.whoisxmlapi.com Typosquatting Data Feed: https://typosquatting.whoisxmlapi.com Website Categorization Database: https://website-categorization.whoisxmlapi.com/database Description: Access to bulk datasets for various domain and IP-related information, suitable for large-scale analysis and integration. ``` -------------------------------- ### XML Error Message Example Source: https://whois.whoisxmlapi.com/documentation/limits An example of an error message returned by the API when the request limit is exceeded, formatted in XML. ```xml AUTHENTICATE_06 You are limited to 50 queries per second. The request is rejected. ``` -------------------------------- ### Enterprise API Packages Source: https://whois.whoisxmlapi.com/documentation/output Bundles domain, IP, and DNS intelligence into comprehensive API packages with predictable annual subscription pricing. ```APIDOC Enterprise API Packages: Purpose: Comprehensive domain, IP, and DNS intelligence via API. Endpoint: https://main.whoisxmlapi.com/api-packages/enterprise-api-package Details: Annual subscription with predictable pricing. ``` -------------------------------- ### WHOIS API GET Request using cURL Source: https://whois.whoisxmlapi.com/documentation/oauth Demonstrates making a GET request to the WhoisXML API to retrieve WHOIS data for a domain. Requires an access token for authorization and specifies the domain name as a query parameter. ```shell curl --location 'https://www.whoisxmlapi.com/whoisserver/WhoisService?domainName=google.com' \ --header 'Authorization: Bearer %accessToken%' ``` -------------------------------- ### Enterprise API Packages Source: https://whois.whoisxmlapi.com/documentation/making-requests Bundles domain, IP, and DNS intelligence into comprehensive API packages with predictable annual subscription pricing. ```APIDOC Enterprise API Packages: Purpose: Comprehensive domain, IP, and DNS intelligence via API. Endpoint: https://main.whoisxmlapi.com/api-packages/enterprise-api-package Details: Annual subscription with predictable pricing. ``` -------------------------------- ### JSON Error Response Example Source: https://whois.whoisxmlapi.com/documentation/error-handling Illustrates the structure of an error message returned in JSON format by the WhoisXML API. It includes an error code and a descriptive message. ```json { "ErrorMessage": { "errorCode": "WHOIS_01", "msg": "The parameter domainName is missing." } } ``` -------------------------------- ### Enterprise API Packages Source: https://whois.whoisxmlapi.com/documentation/resources Bundles domain, IP, and DNS intelligence into comprehensive API packages with predictable annual subscription pricing. ```APIDOC Enterprise API Packages: Purpose: Comprehensive domain, IP, and DNS intelligence via API. Endpoint: https://main.whoisxmlapi.com/api-packages/enterprise-api-package Details: Annual subscription with predictable pricing. ``` -------------------------------- ### Enterprise API Packages Source: https://whois.whoisxmlapi.com/documentation/error-handling Bundles domain, IP, and DNS intelligence into comprehensive API packages with predictable annual subscription pricing. ```APIDOC Enterprise API Packages: Purpose: Comprehensive domain, IP, and DNS intelligence via API. Endpoint: https://main.whoisxmlapi.com/api-packages/enterprise-api-package Details: Annual subscription with predictable pricing. ``` -------------------------------- ### Data Feeds Overview Source: https://whois.whoisxmlapi.com/documentation/output Lists various data feeds available for download, including WHOIS databases, DNS records, and threat intelligence data. These feeds provide bulk access to historical and real-time information. ```APIDOC Data Feeds: WHOIS Database Download: https://www.whoisxmlapi.com/whois-database-download.php WHOIS History Database Download: https://whois-history.whoisxmlapi.com/database Disposable Email Domains Database: https://emailverification.whoisxmlapi.com/disposable-email-domains DNS Database Download: https://reverse-ip.whoisxmlapi.com/database Early DGA Detection Data Feed: https://threat-prediction.whoisxmlapi.com/early-dga-detection-feed Early Warning Phishing Data Feed: https://threat-prediction.whoisxmlapi.com/early-warning-phishing-feed First Watch Malicious Domains Data Feed: https://firstwatch.whoisxmlapi.com Free Email Domains Database: https://emailverification.whoisxmlapi.com/free-email-domains-list IP Geolocation Database Download: https://ip-geolocation.whoisxmlapi.com/database IP Netblocks WHOIS Database: https://ip-netblocks.whoisxmlapi.com/database MAC Address Vendor Database: https://mac-address.whoisxmlapi.com/database Newly Created Websites: https://newly-created-websites.whoisxmlapi.com Newly Registered Domains: https://newly-registered-domains.whoisxmlapi.com Real-time Domain Registration: https://domain-registration-streaming.whoisxmlapi.com Real-time SSL Certificates Streaming: https://ssl-certificates.whoisxmlapi.com/real-time-streaming SSL Certificates Database: https://ssl-certificates.whoisxmlapi.com/database Subdomains Database Download: https://subdomains.whoisxmlapi.com/database Threat Intelligence Data Feeds: https://threat-intelligence.whoisxmlapi.com Typosquatting Data Feed: https://typosquatting.whoisxmlapi.com Website Categorization Database: https://website-categorization.whoisxmlapi.com/database Description: Access to bulk datasets for various domain and IP-related information, suitable for large-scale analysis and integration. ``` -------------------------------- ### Data Feeds Overview Source: https://whois.whoisxmlapi.com/documentation/making-requests Lists various data feeds available for download, including WHOIS databases, DNS records, and threat intelligence data. These feeds provide bulk access to historical and real-time information. ```APIDOC Data Feeds: WHOIS Database Download: https://www.whoisxmlapi.com/whois-database-download.php WHOIS History Database Download: https://whois-history.whoisxmlapi.com/database Disposable Email Domains Database: https://emailverification.whoisxmlapi.com/disposable-email-domains DNS Database Download: https://reverse-ip.whoisxmlapi.com/database Early DGA Detection Data Feed: https://threat-prediction.whoisxmlapi.com/early-dga-detection-feed Early Warning Phishing Data Feed: https://threat-prediction.whoisxmlapi.com/early-warning-phishing-feed First Watch Malicious Domains Data Feed: https://firstwatch.whoisxmlapi.com Free Email Domains Database: https://emailverification.whoisxmlapi.com/free-email-domains-list IP Geolocation Database Download: https://ip-geolocation.whoisxmlapi.com/database IP Netblocks WHOIS Database: https://ip-netblocks.whoisxmlapi.com/database MAC Address Vendor Database: https://mac-address.whoisxmlapi.com/database Newly Created Websites: https://newly-created-websites.whoisxmlapi.com Newly Registered Domains: https://newly-registered-domains.whoisxmlapi.com Real-time Domain Registration: https://domain-registration-streaming.whoisxmlapi.com Real-time SSL Certificates Streaming: https://ssl-certificates.whoisxmlapi.com/real-time-streaming SSL Certificates Database: https://ssl-certificates.whoisxmlapi.com/database Subdomains Database Download: https://subdomains.whoisxmlapi.com/database Threat Intelligence Data Feeds: https://threat-intelligence.whoisxmlapi.com Typosquatting Data Feed: https://typosquatting.whoisxmlapi.com Website Categorization Database: https://website-categorization.whoisxmlapi.com/database Description: Access to bulk datasets for various domain and IP-related information, suitable for large-scale analysis and integration. ``` -------------------------------- ### Data Feeds Overview Source: https://whois.whoisxmlapi.com/documentation/generate-new-api-key Lists various data feeds available for download, including WHOIS databases, DNS records, and threat intelligence data. These feeds provide bulk access to historical and real-time information. ```APIDOC Data Feeds: WHOIS Database Download: https://www.whoisxmlapi.com/whois-database-download.php WHOIS History Database Download: https://whois-history.whoisxmlapi.com/database Disposable Email Domains Database: https://emailverification.whoisxmlapi.com/disposable-email-domains DNS Database Download: https://reverse-ip.whoisxmlapi.com/database Early DGA Detection Data Feed: https://threat-prediction.whoisxmlapi.com/early-dga-detection-feed Early Warning Phishing Data Feed: https://threat-prediction.whoisxmlapi.com/early-warning-phishing-feed First Watch Malicious Domains Data Feed: https://firstwatch.whoisxmlapi.com Free Email Domains Database: https://emailverification.whoisxmlapi.com/free-email-domains-list IP Geolocation Database Download: https://ip-geolocation.whoisxmlapi.com/database IP Netblocks WHOIS Database: https://ip-netblocks.whoisxmlapi.com/database MAC Address Vendor Database: https://mac-address.whoisxmlapi.com/database Newly Created Websites: https://newly-created-websites.whoisxmlapi.com Newly Registered Domains: https://newly-registered-domains.whoisxmlapi.com Real-time Domain Registration: https://domain-registration-streaming.whoisxmlapi.com Real-time SSL Certificates Streaming: https://ssl-certificates.whoisxmlapi.com/real-time-streaming SSL Certificates Database: https://ssl-certificates.whoisxmlapi.com/database Subdomains Database Download: https://subdomains.whoisxmlapi.com/database Threat Intelligence Data Feeds: https://threat-intelligence.whoisxmlapi.com Typosquatting Data Feed: https://typosquatting.whoisxmlapi.com Website Categorization Database: https://website-categorization.whoisxmlapi.com/database Description: Access to bulk datasets for various domain and IP-related information, suitable for large-scale analysis and integration. ``` -------------------------------- ### Whois Record Schema: Registrant and Admin Contact Source: https://whois.whoisxmlapi.com/documentation/output Defines the JSON schema structure for WHOIS record registrant and administrative contact information. It specifies fields such as name, organization, address components (street, city, state, postal code), and country, along with their data types and examples. This schema is crucial for parsing and validating WHOIS data obtained from APIs. ```APIDOC { "properties": { "WhoisRecord": { "properties": { "registryData": { "properties": { "registrant": { "properties": { "street1": { "$id": "#/properties/WhoisRecord/properties/registryData/properties/registrant/properties/street1", "type": "string" }, "street2": { "$id": "#/properties/WhoisRecord/properties/registryData/properties/registrant/properties/street2", "type": "string" }, "street3": { "$id": "#/properties/WhoisRecord/properties/registryData/properties/registrant/properties/street3", "type": "string" }, "street4": { "$id": "#/properties/WhoisRecord/properties/registryData/properties/registrant/properties/street4", "type": "string" }, "city": { "$id": "#/properties/WhoisRecord/properties/registryData/properties/registrant/properties/city", "type": "string" }, "state": { "$id": "#/properties/WhoisRecord/properties/registryData/properties/registrant/properties/state", "type": "string", "examples": [ "CA" ] }, "postalCode": { "$id": "#/properties/WhoisRecord/properties/registryData/properties/registrant/properties/postalCode", "type": "integer", "examples": [ 12555 ] }, "rawText": { "$id": "#/properties/WhoisRecord/properties/registryData/properties/registrant/properties/rawText", "type": "string", "examples": [ "" ] }, "unparsable": { "$id": "#/properties/WhoisRecord/properties/registryData/properties/registrant/properties/unparsable", "type": "string", "examples": [ "" ] } }, "required": [ "rawText" ] }, "administrativeContact": { "$id": "#/properties/WhoisRecord/properties/registryData/properties/administrativeContact", "type": "object", "required": [ "rawText" ], "properties": { "name": { "$id": "#/properties/WhoisRecord/properties/registryData/properties/administrativeContact/properties/name", "type": "string" }, "organization": { "$id": "#/properties/WhoisRecord/properties/registryData/properties/administrativeContact/properties/organization", "type": "string", "examples": [ "Google LLC" ] }, "street1": { "$id": "#/properties/WhoisRecord/properties/registryData/properties/administrativeContact/properties/street1", "type": "string" }, "street2": { "$id": "#/properties/WhoisRecord/properties/registryData/properties/administrativeContact/properties/street2", "type": "string" }, "street3": { "$id": "#/properties/WhoisRecord/properties/registryData/properties/administrativeContact/properties/street3", "type": "string" }, "street4": { "$id": "#/properties/WhoisRecord/properties/registryData/properties/administrativeContact/properties/street4", "type": "string" }, "city": { "$id": "#/properties/WhoisRecord/properties/registryData/properties/administrativeContact/properties/city", "type": "string" }, "state": { "$id": "#/properties/WhoisRecord/properties/registryData/properties/administrativeContact/properties/state", "type": "string", "examples": [ "CA" ] }, "postalCode": { "$id": "#/properties/WhoisRecord/properties/registryData/properties/administrativeContact/properties/postalCode", "type": "integer", "examples": [ 12555 ] }, "country": { "$id": "#/properties/WhoisRecord/properties/registryData/properties/administrativeContact/properties/country", "type": "string", "examples": [ "UNITED STATES" ] } } } } } } } } } ``` -------------------------------- ### Enterprise API Packages Source: https://whois.whoisxmlapi.com/documentation/generate-new-api-key Bundles domain, IP, and DNS intelligence into comprehensive API packages with predictable annual subscription pricing. ```APIDOC Enterprise API Packages: Purpose: Comprehensive domain, IP, and DNS intelligence via API. Endpoint: https://main.whoisxmlapi.com/api-packages/enterprise-api-package Details: Annual subscription with predictable pricing. ``` -------------------------------- ### Data Feeds Overview Source: https://whois.whoisxmlapi.com/documentation/resources Lists various data feeds available for download, including WHOIS databases, DNS records, and threat intelligence data. These feeds provide bulk access to historical and real-time information. ```APIDOC Data Feeds: WHOIS Database Download: https://www.whoisxmlapi.com/whois-database-download.php WHOIS History Database Download: https://whois-history.whoisxmlapi.com/database Disposable Email Domains Database: https://emailverification.whoisxmlapi.com/disposable-email-domains DNS Database Download: https://reverse-ip.whoisxmlapi.com/database Early DGA Detection Data Feed: https://threat-prediction.whoisxmlapi.com/early-dga-detection-feed Early Warning Phishing Data Feed: https://threat-prediction.whoisxmlapi.com/early-warning-phishing-feed First Watch Malicious Domains Data Feed: https://firstwatch.whoisxmlapi.com Free Email Domains Database: https://emailverification.whoisxmlapi.com/free-email-domains-list IP Geolocation Database Download: https://ip-geolocation.whoisxmlapi.com/database IP Netblocks WHOIS Database: https://ip-netblocks.whoisxmlapi.com/database MAC Address Vendor Database: https://mac-address.whoisxmlapi.com/database Newly Created Websites: https://newly-created-websites.whoisxmlapi.com Newly Registered Domains: https://newly-registered-domains.whoisxmlapi.com Real-time Domain Registration: https://domain-registration-streaming.whoisxmlapi.com Real-time SSL Certificates Streaming: https://ssl-certificates.whoisxmlapi.com/real-time-streaming SSL Certificates Database: https://ssl-certificates.whoisxmlapi.com/database Subdomains Database Download: https://subdomains.whoisxmlapi.com/database Threat Intelligence Data Feeds: https://threat-intelligence.whoisxmlapi.com Typosquatting Data Feed: https://typosquatting.whoisxmlapi.com Website Categorization Database: https://website-categorization.whoisxmlapi.com/database Description: Access to bulk datasets for various domain and IP-related information, suitable for large-scale analysis and integration. ``` -------------------------------- ### Enterprise API Packages Source: https://whois.whoisxmlapi.com/documentation/oauth Bundles domain, IP, and DNS intelligence into comprehensive API packages with predictable annual subscription pricing. ```APIDOC Enterprise API Packages: Purpose: Comprehensive domain, IP, and DNS intelligence via API. Endpoint: https://main.whoisxmlapi.com/api-packages/enterprise-api-package Details: Annual subscription with predictable pricing. ``` -------------------------------- ### Enterprise API Packages Source: https://whois.whoisxmlapi.com/documentation/limits Bundles domain, IP, and DNS intelligence into comprehensive API packages with predictable annual subscription pricing. ```APIDOC Enterprise API Packages: Purpose: Comprehensive domain, IP, and DNS intelligence via API. Endpoint: https://main.whoisxmlapi.com/api-packages/enterprise-api-package Details: Annual subscription with predictable pricing. ``` -------------------------------- ### Enterprise API Packages Source: https://whois.whoisxmlapi.com/documentation/making-requests-old Bundles domain, IP, and DNS intelligence into comprehensive API packages with predictable annual subscription pricing. ```APIDOC Enterprise API Packages: Purpose: Comprehensive domain, IP, and DNS intelligence via API. Endpoint: https://main.whoisxmlapi.com/api-packages/enterprise-api-package Details: Annual subscription with predictable pricing. ``` -------------------------------- ### Data Feeds Overview Source: https://whois.whoisxmlapi.com/documentation/oauth Lists various data feeds available for download, including WHOIS databases, DNS records, and threat intelligence data. These feeds provide bulk access to historical and real-time information. ```APIDOC Data Feeds: WHOIS Database Download: https://www.whoisxmlapi.com/whois-database-download.php WHOIS History Database Download: https://whois-history.whoisxmlapi.com/database Disposable Email Domains Database: https://emailverification.whoisxmlapi.com/disposable-email-domains DNS Database Download: https://reverse-ip.whoisxmlapi.com/database Early DGA Detection Data Feed: https://threat-prediction.whoisxmlapi.com/early-dga-detection-feed Early Warning Phishing Data Feed: https://threat-prediction.whoisxmlapi.com/early-warning-phishing-feed First Watch Malicious Domains Data Feed: https://firstwatch.whoisxmlapi.com Free Email Domains Database: https://emailverification.whoisxmlapi.com/free-email-domains-list IP Geolocation Database Download: https://ip-geolocation.whoisxmlapi.com/database IP Netblocks WHOIS Database: https://ip-netblocks.whoisxmlapi.com/database MAC Address Vendor Database: https://mac-address.whoisxmlapi.com/database Newly Created Websites: https://newly-created-websites.whoisxmlapi.com Newly Registered Domains: https://newly-registered-domains.whoisxmlapi.com Real-time Domain Registration: https://domain-registration-streaming.whoisxmlapi.com Real-time SSL Certificates Streaming: https://ssl-certificates.whoisxmlapi.com/real-time-streaming SSL Certificates Database: https://ssl-certificates.whoisxmlapi.com/database Subdomains Database Download: https://subdomains.whoisxmlapi.com/database Threat Intelligence Data Feeds: https://threat-intelligence.whoisxmlapi.com Typosquatting Data Feed: https://typosquatting.whoisxmlapi.com Website Categorization Database: https://website-categorization.whoisxmlapi.com/database Description: Access to bulk datasets for various domain and IP-related information, suitable for large-scale analysis and integration. ``` -------------------------------- ### Data Feeds Overview Source: https://whois.whoisxmlapi.com/documentation/error-handling Lists various data feeds available for download, including WHOIS databases, DNS records, and threat intelligence data. These feeds provide bulk access to historical and real-time information. ```APIDOC Data Feeds: WHOIS Database Download: https://www.whoisxmlapi.com/whois-database-download.php WHOIS History Database Download: https://whois-history.whoisxmlapi.com/database Disposable Email Domains Database: https://emailverification.whoisxmlapi.com/disposable-email-domains DNS Database Download: https://reverse-ip.whoisxmlapi.com/database Early DGA Detection Data Feed: https://threat-prediction.whoisxmlapi.com/early-dga-detection-feed Early Warning Phishing Data Feed: https://threat-prediction.whoisxmlapi.com/early-warning-phishing-feed First Watch Malicious Domains Data Feed: https://firstwatch.whoisxmlapi.com Free Email Domains Database: https://emailverification.whoisxmlapi.com/free-email-domains-list IP Geolocation Database Download: https://ip-geolocation.whoisxmlapi.com/database IP Netblocks WHOIS Database: https://ip-netblocks.whoisxmlapi.com/database MAC Address Vendor Database: https://mac-address.whoisxmlapi.com/database Newly Created Websites: https://newly-created-websites.whoisxmlapi.com Newly Registered Domains: https://newly-registered-domains.whoisxmlapi.com Real-time Domain Registration: https://domain-registration-streaming.whoisxmlapi.com Real-time SSL Certificates Streaming: https://ssl-certificates.whoisxmlapi.com/real-time-streaming SSL Certificates Database: https://ssl-certificates.whoisxmlapi.com/database Subdomains Database Download: https://subdomains.whoisxmlapi.com/database Threat Intelligence Data Feeds: https://threat-intelligence.whoisxmlapi.com Typosquatting Data Feed: https://typosquatting.whoisxmlapi.com Website Categorization Database: https://website-categorization.whoisxmlapi.com/database Description: Access to bulk datasets for various domain and IP-related information, suitable for large-scale analysis and integration. ``` -------------------------------- ### Data Feeds Overview Source: https://whois.whoisxmlapi.com/documentation/limits Lists various data feeds available for download, including WHOIS databases, DNS records, and threat intelligence data. These feeds provide bulk access to historical and real-time information. ```APIDOC Data Feeds: WHOIS Database Download: https://www.whoisxmlapi.com/whois-database-download.php WHOIS History Database Download: https://whois-history.whoisxmlapi.com/database Disposable Email Domains Database: https://emailverification.whoisxmlapi.com/disposable-email-domains DNS Database Download: https://reverse-ip.whoisxmlapi.com/database Early DGA Detection Data Feed: https://threat-prediction.whoisxmlapi.com/early-dga-detection-feed Early Warning Phishing Data Feed: https://threat-prediction.whoisxmlapi.com/early-warning-phishing-feed First Watch Malicious Domains Data Feed: https://firstwatch.whoisxmlapi.com Free Email Domains Database: https://emailverification.whoisxmlapi.com/free-email-domains-list IP Geolocation Database Download: https://ip-geolocation.whoisxmlapi.com/database IP Netblocks WHOIS Database: https://ip-netblocks.whoisxmlapi.com/database MAC Address Vendor Database: https://mac-address.whoisxmlapi.com/database Newly Created Websites: https://newly-created-websites.whoisxmlapi.com Newly Registered Domains: https://newly-registered-domains.whoisxmlapi.com Real-time Domain Registration: https://domain-registration-streaming.whoisxmlapi.com Real-time SSL Certificates Streaming: https://ssl-certificates.whoisxmlapi.com/real-time-streaming SSL Certificates Database: https://ssl-certificates.whoisxmlapi.com/database Subdomains Database Download: https://subdomains.whoisxmlapi.com/database Threat Intelligence Data Feeds: https://threat-intelligence.whoisxmlapi.com Typosquatting Data Feed: https://typosquatting.whoisxmlapi.com Website Categorization Database: https://website-categorization.whoisxmlapi.com/database Description: Access to bulk datasets for various domain and IP-related information, suitable for large-scale analysis and integration. ``` -------------------------------- ### Data Feeds Overview Source: https://whois.whoisxmlapi.com/documentation/making-requests-old Lists various data feeds available for download, including WHOIS databases, DNS records, and threat intelligence data. These feeds provide bulk access to historical and real-time information. ```APIDOC Data Feeds: WHOIS Database Download: https://www.whoisxmlapi.com/whois-database-download.php WHOIS History Database Download: https://whois-history.whoisxmlapi.com/database Disposable Email Domains Database: https://emailverification.whoisxmlapi.com/disposable-email-domains DNS Database Download: https://reverse-ip.whoisxmlapi.com/database Early DGA Detection Data Feed: https://threat-prediction.whoisxmlapi.com/early-dga-detection-feed Early Warning Phishing Data Feed: https://threat-prediction.whoisxmlapi.com/early-warning-phishing-feed First Watch Malicious Domains Data Feed: https://firstwatch.whoisxmlapi.com Free Email Domains Database: https://emailverification.whoisxmlapi.com/free-email-domains-list IP Geolocation Database Download: https://ip-geolocation.whoisxmlapi.com/database IP Netblocks WHOIS Database: https://ip-netblocks.whoisxmlapi.com/database MAC Address Vendor Database: https://mac-address.whoisxmlapi.com/database Newly Created Websites: https://newly-created-websites.whoisxmlapi.com Newly Registered Domains: https://newly-registered-domains.whoisxmlapi.com Real-time Domain Registration: https://domain-registration-streaming.whoisxmlapi.com Real-time SSL Certificates Streaming: https://ssl-certificates.whoisxmlapi.com/real-time-streaming SSL Certificates Database: https://ssl-certificates.whoisxmlapi.com/database Subdomains Database Download: https://subdomains.whoisxmlapi.com/database Threat Intelligence Data Feeds: https://threat-intelligence.whoisxmlapi.com Typosquatting Data Feed: https://typosquatting.whoisxmlapi.com Website Categorization Database: https://website-categorization.whoisxmlapi.com/database Description: Access to bulk datasets for various domain and IP-related information, suitable for large-scale analysis and integration. ``` -------------------------------- ### Intelligence and Monitoring APIs Source: https://whois.whoisxmlapi.com/documentation/account-balance-information Provides advanced intelligence services for website categorization, domain reputation, brand monitoring, and threat analysis. Helps in identifying potential risks and monitoring brand presence. ```APIDOC Website Categorization API: Categorizes websites based on their content. Domain Reputation API: Assesses the reputation of domain names. Brand Alert API: Monitors for the usage of specific brands across domains. Registrant Alert API: Tracks changes related to domain registrants. Email Verification API: Verifies the validity and deliverability of email addresses. Threat Intelligence API: Provides data related to cybersecurity threats and malicious activities. ``` -------------------------------- ### WHOIS API Input Parameters Source: https://whois.whoisxmlapi.com/documentation/making-requests Details the required and optional parameters for requesting WHOIS data, specifying their purpose, acceptable values, and default settings. ```APIDOC Input Parameters: Required: - domainName: The domain/IPv4/IPv6/email address for which WHOIS data is requested. Optional: - outputFormat: Response output format. Acceptable values: JSON | XML. Default: XML. - rdap: Protocol selection for data retrieval. 0 for Auto, 1 for RDAP, 2 for WHOIS. Default: 0. (RDAP not supported for all TLDs. Auto retrieves best available data). - preferFresh: Get the latest WHOIS record even if incomplete. 1 for yes, 0 for no. Default: 0. - da: Domain availability check. 1 for quick check, 2 for more accurate. Results in WhoisRecord → domainAvailability. Acceptable values: 0 | 1 | 2. Default: 0. - ip: Return IPs for the domain name. 1 to return IPs, 0 otherwise. Default: 0. - ipWhois: Return WHOIS record for hosting IP if TLD record is not supported. 1 to return, 0 otherwise. Default: 1. - checkProxyData: Fetch proxy/WHOIS guard data. 1 to fetch, 0 otherwise. Results in WhoisRecord → privateWhoisProxy. Default: 0. - thinWhois: Return WHOIS data from registry only. 1 for registry data only, 0 otherwise. Results in WhoisRecord → registryData. Default: 0. - ignoreRawTexts: Strip all raw text from the output. 1 to strip, 0 otherwise. Default: 0. - callback: Javascript function name for JSONP when outputFormat is JSON. - registryRawText: String representing registry WHOIS raw text to be parsed (requires _parse=1). - registrarRawText: String representing registrar WHOIS raw text to be parsed (requires _parse=1). - multiIdIana: Enable multi ID IANA match for parsing registrarName to get registrarIANAID when not a strict match. 1 for enabled, 0 otherwise. Default: 0. - _parse: Enable parsing for input WHOIS raw texts. 1 to parse, 0 otherwise. Default: 0. - _hardRefresh: Provide real-time data at the cost of 5 WHOIS API credits. 1 for enabled, 0 otherwise. Default: 0. ``` -------------------------------- ### WHOIS Data Field Explanations Source: https://whois.whoisxmlapi.com/documentation/output Provides detailed explanations for common fields found within WHOIS records, covering registration details, contact information, and technical data. ```APIDOC Field Explanations: createdDate: Description: When the domain name was first registered/created. Type: string updatedDate: Description: When the WHOIS data was last updated. Type: string expiresDate: Description: When the domain name will expire. Type: string registrant: Description: The owner of the domain name, responsible for keeping contact information up-to-date. Type: ContactDetails (See ContactDetails structure for sub-fields) administrativeContact: Description: The person in charge of administrative dealings pertaining to the domain name. Type: ContactDetails (Same structure as registrant) technicalContact: Description: The person in charge of all technical questions regarding the domain name. Type: ContactDetails (Same structure as registrant) billingContact: Description: The person in charge of all billing questions regarding the domain name. Type: ContactDetails (Same structure as registrant) zoneContact: Description: The person tending to the technical aspects of maintaining the domain's name server and resolver software. Type: ContactDetails (Same structure as registrant) domainName: Description: The target domain name being queried. Type: string nameServers: Description: A list of computer servers that host the domain's name service and resolver software. Type: array of strings status: Description: An array of EPP status codes indicating the domain's current state. See https://www.icann.org/resources/pages/epp-status-codes-2014-06-16-en for details. Type: array of strings rawText: Description: The complete, unparsed text of the WHOIS record. Type: string parseCode: Description: A bitmask indicating which fields were parsed. A binary value at index i means the field at that index is non-empty. The order is: createdDate, expiresDate, referralURL (registryData only), registrarName, status, updatedDate, whoisServer (registryData only), nameServers, administrativeContact, billingContact, registrant, technicalContact, zoneContact. Type: integer header: Description: The portion of the raw WHOIS text up to the first identifiable field. Type: string strippedText: Description: The raw text excluding header and footer, containing only identifiable fields. Type: string footer: Description: The portion of the raw WHOIS text after the last identifiable field. Type: string audit: Description: Audit information related to the WHOIS record. Type: object registrarName: Description: The name of the domain registrar. Type: string registrarIANAID: Description: The registrar's ID assigned by ICANN. Type: string createdDateNormalized: Description: The creation date formatted into a standard, normalized string. Type: string updatedDateNormalized: Description: The update date formatted into a standard, normalized string. Type: string expiresDateNormalized: Description: The expiration date formatted into a standard, normalized string. Type: string contactEmail: Description: The most appropriate contact email address available for the domain. Type: string domainNameExt: Description: The top-level domain (TLD) or extension of the domain name. Type: string estimatedDomainAge: Description: An estimation of the domain's age in days. Type: integer ips: Description: An array containing IP addresses associated with the domain name. Type: array of strings ```