Provide current and historical ownership information on domains / IPs. Identify all connections between domains, registrants, registrars, and DNS servers.
Look into all current and historical DNS / IP connections between domains and A, MX, NS, and other records. Monitor suspicious changes to DNS records.
Get detailed context on an IP address, including its user’s geolocation, time zone, connected domains, connection type, IP range, ASN, and other network ownership details.
Access our web-based solution to dig into and monitor all domain events of interest.
Get access to a web-based enterprise-grade solution to search and monitor domain registrations and ownership details for branded terms, fuzzy matches, registrants of interest, and more.
Independent, evidence-based DNS and abuse intelligence for applicants, advisors, governments, and counsel participating in the ICANN 2026 New gTLD Program.
Predictive threat intelligence is your best first line of defense. Subscribe to the feeds to strengthen your cybersecurity posture. Contact us today for more information.
Unlock integrated intelligence on Internet properties and their ownership, infrastructure, and other attributes.
Our complete set of domain, IP, and DNS intelligence available via API calls as an annual subscription with predictable pricing.
Offers complete access to WHOIS, IP, DNS, and subdomain data for product enrichment, threat hunting and more.
Uncover entire attack surfaces with this API to embed asset discovery, vulnerability scanning, and technology metadata into your platform. Now in early access.
Talk to our APIs using LLMs. Connect your preferred LLM to WhoisXML API and simply chat about WHOIS, DNS, threat intelligence, and more.
I’m your Domain Intelligence Assistant. I make it easy to explore WHOIS, DNS, and threat data from WhoisXML API — I’m cloud-based, fast, and always ready to help.
A custom GPT for WHOIS, DNS, IP, and threat intelligence research. Connects ChatGPT directly to WhoisXML API to enable fast, conversational investigations and domain insights.
Discover what you really pay for when buying commercial Internet intelligence data.
Download now{ "DNSData": { "domainName": "google.com", "types": [ 1, 6, 16 ], "dnsTypes": "A,SOA,TXT", "audit": { "createdDate": "2019-05-07 14:45:22.916 UTC", "updatedDate": "2019-05-07 14:45:22.916 UTC" }, "dnsRecords": [ { "type": 16, "dnsType": "TXT", "name": "google.com.", "ttl": 299, "rRsetType": 16, "rawText": "google.com.\t\t299\tIN\tTXT\t\"globalsign-smime-dv=CDYX+XFHUw2wml6/Gb8+59BsH31KzUr6c1l2BPvqKX8=\"", "strings": [ "globalsign-smime-dv=CDYX+XFHUw2wml6/Gb8+59BsH31KzUr6c1l2BPvqKX8=" ] }, { "type": 16, "dnsType": "TXT", "name": "google.com.", "ttl": 299, "rRsetType": 16, "rawText": "google.com.\t\t299\tIN\tTXT\t\"v=spf1 include:_spf.google.com ~all\"", "strings": [ "v=spf1 include:_spf.google.com ~all" ] }, { "type": 16, "dnsType": "TXT", "name": "google.com.", "ttl": 299, "rRsetType": 16, "rawText": "google.com.\t\t299\tIN\tTXT\t\"docusign=05958488-4752-4ef2-95eb-aa7ba8a3bd0e\"", "strings": [ "docusign=05958488-4752-4ef2-95eb-aa7ba8a3bd0e" ] }, { "type": 16, "dnsType": "TXT", "name": "google.com.", "ttl": 299, "rRsetType": 16, "rawText": "google.com.\t\t299\tIN\tTXT\t\"facebook-domain-verification=22rm551cu4k0ab0bxsw536tlds4h95\"", "strings": [ "facebook-domain-verification=22rm551cu4k0ab0bxsw536tlds4h95" ] }, { "type": 1, "dnsType": "A", "name": "google.com.", "ttl": 299, "rRsetType": 1, "rawText": "google.com.\t\t299\tIN\tA\t172.217.5.206", "address": "172.217.5.206" }, { "type": 6, "dnsType": "SOA", "name": "google.com.", "ttl": 59, "rRsetType": 6, "rawText": "google.com.\t\t59\tIN\tSOA\tns1.google.com. dns-admin.google.com. 246997594 900 900 1800 60", "admin": "dns-admin.google.com.", "host": "ns1.google.com.", "expire": 1800, "minimum": 60, "refresh": 900, "retry": 900, "serial": 246997594 } ] } }<xml> <DNSData> <domainName>google.com</domainName> <types> <type>1</type> <type>6</type> <type>16</type> </types> <dnsTypes>A,SOA,TXT</dnsTypes> <audit> <createdDate>2019-05-07 14:45:48.363 UTC</createdDate> <updatedDate>2019-05-07 14:45:48.363 UTC</updatedDate> </audit> <dnsRecords> <dnsRecord> <type>16</type> <dnsType>TXT</dnsType> <name>google.com.</name> <ttl>299</ttl> <rRsetType>16</rRsetType> <rawText>google.com. 299 IN TXT "docusign=05958488-4752-4ef2-95eb-aa7ba8a3bd0e"</rawText> <strings> <string>docusign=05958488-4752-4ef2-95eb-aa7ba8a3bd0e</string> </strings> </dnsRecord> <dnsRecord> <type>16</type> <dnsType>TXT</dnsType> <name>google.com.</name> <ttl>299</ttl> <rRsetType>16</rRsetType> <rawText>google.com. 299 IN TXT "facebook-domain-verification=22rm551cu4k0ab0bxsw536tlds4h95"</rawText> <strings> <string>facebook-domain-verification=22rm551cu4k0ab0bxsw536tlds4h95</string> </strings> </dnsRecord> <dnsRecord> <type>16</type> <dnsType>TXT</dnsType> <name>google.com.</name> <ttl>299</ttl> <rRsetType>16</rRsetType> <rawText>google.com. 299 IN TXT "globalsign-smime-dv=CDYX+XFHUw2wml6/Gb8+59BsH31KzUr6c1l2BPvqKX8="</rawText> <strings> <string>globalsign-smime-dv=CDYX+XFHUw2wml6/Gb8+59BsH31KzUr6c1l2BPvqKX8=</string> </strings> </dnsRecord> <dnsRecord> <type>16</type> <dnsType>TXT</dnsType> <name>google.com.</name> <ttl>299</ttl> <rRsetType>16</rRsetType> <rawText>google.com. 299 IN TXT "v=spf1 include:_spf.google.com ~all"</rawText> <strings> <string>v=spf1 include:_spf.google.com ~all</string> </strings> </dnsRecord> <dnsRecord> <type>1</type> <dnsType>A</dnsType> <name>google.com.</name> <ttl>299</ttl> <rRsetType>1</rRsetType> <rawText>google.com. 299 IN A 172.217.14.110</rawText> <address>172.217.14.110</address> </dnsRecord> <dnsRecord> <type>6</type> <dnsType>SOA</dnsType> <name>google.com.</name> <ttl>59</ttl> <rRsetType>6</rRsetType> <rawText>google.com. 59 IN SOA ns1.google.com. dns-admin.google.com. 246997594 900 900 1800 60</rawText> <admin>dns-admin.google.com.</admin> <host>ns1.google.com.</host> <expire>1800</expire> <minimum>60</minimum> <refresh>900</refresh> <retry>900</retry> <serial>246997594</serial> </dnsRecord> </dnsRecords> </DNSData> </xml>
|
DNSData
|
The root element representing information about the domain's DNS records
|
|
domainName
|
The domain name being queried (e.g., google.com)
|
|
types
|
List of numeric DNS record types (e.g., A=1, SOA=6, TXT=16). Supported types are listed in the
Supported DNS Types section.
-1 indicates that all types are returned.
|
|
dnsTypes
|
Comma-separated list of DNS record types. _all indicates all types are returned.
|
|
audit
|
Audit information about when the data was created and updated
|
|
audit.createdDate
|
The timestamp when the data was created
|
|
audit.updatedDate
|
The timestamp when the data was last updated
|
|
dnsRecords
|
List of DNS records for the domain
|
|
dnsRecords[0].type
|
Numeric identifier for the DNS record type
|
|
dnsRecords[0].dnsType
|
Textual representation of the DNS record type (e.g., A, AAAA, CNAME, MX, TXT, NS, SOA, CAA, PTR, SRV)
|
|
dnsRecords[0].name
|
Domain or subdomain associated with the record
|
|
dnsRecords[0].ttl
|
Time-to-live (TTL) value in seconds
|
|
dnsRecords[0].rRsetType
|
Numeric identifier for the resource record set type
|
|
dnsRecords[0].rawText
|
Raw text representation of the DNS record
|
|
dnsRecords[0].strings
|
List of string values for TXT records
|
|
dnsRecords[0].address
|
IP address for A and AAAA records
|
|
dnsRecords[0].admin
|
Administrative contact for the SOA record
|
|
dnsRecords[0].host
|
Primary name server for the SOA record
|
|
dnsRecords[0].expire
|
Expiration time (seconds) for the SOA record. Indicates when secondary name servers should stop answering requests for this zone if the primary server is unavailable.
|
|
dnsRecords[0].minimum
|
Minimum TTL (seconds) for the SOA record. Used as the default TTL for negative caching.
|
|
dnsRecords[0].refresh
|
Refresh interval (seconds) for the SOA record. Indicates how often secondary name servers should check for updates.
|
|
dnsRecords[0].retry
|
Retry interval (seconds) for the SOA record. Indicates how long secondary name servers should wait before retrying a failed zone transfer.
|
|
dnsRecords[0].serial
|
Serial number for the SOA record. Used by secondary name servers to determine if zone data has changed.
|
|
dnsRecords[0].priority
|
Priority value for MX records
|
|
dnsRecords[0].target
|
Target server for MX, CNAME, SRV, and NS records
|
|
dnsRecords[0].tag
|
Tag used in CAA records (e.g., issue, issuewild, iodef)
|
|
dnsRecords[0].value
|
Value associated with CAA records (e.g., domain names, mailto addresses)
|
|
dnsRecords[0].service
|
Service identifier for SRV records
|
|
dnsRecords[0].proto
|
Protocol for SRV records (e.g., _tcp, _udp)
|
|
dnsRecords[0].port
|
Port number for SRV records
|
We are here to listen. For a quick response, please select your request type. By submitting a request, you agree to our Terms of Service and Privacy Policy.