Provide current and historical ownership information on domains / IPs. Identify all connections between domains, registrants, registrars, and DNS servers.
Look into all current and historical DNS / IP connections between domains and A, MX, NS, and other records. Monitor suspicious changes to DNS records.
Get detailed context on an IP address, including its user’s geolocation, time zone, connected domains, connection type, IP range, ASN, and other network ownership details.
Access our web-based solution to dig into and monitor all domain events of interest.
Get access to a web-based enterprise-grade solution to search and monitor domain registrations and ownership details for branded terms, fuzzy matches, registrants of interest, and more.
Predictive threat intelligence is your best first line of defense. Subscribe to the feeds to strengthen your cybersecurity posture. Contact us today for more information.
Unlock integrated intelligence on Internet properties and their ownership, infrastructure, and other attributes.
Our complete set of domain, IP, and DNS intelligence available via API calls as an annual subscription with predictable pricing.
Offers complete access to WHOIS, IP, DNS, and subdomain data for product enrichment, threat hunting and more.
Multi-Level API User Administration Now Available - Manage individual API keys for team members in your organization.
Learn MoreThis data feed subscription is licensed to you or your organization only, you may not resell or relicense the data without explicit written permission from Whois API, Inc. Any violation will be prosecuted to the fullest extent of the law.
The data is provided immediately after being processed by our system.
$ websocat --no-line -B 1100000 wss://nrd-stream.whoisxmlapi.com/ultimate
[INFO websocat::stdio_threaded_peer] get_stdio_peer (threaded)
[INFO websocat::ws_client_peer] get_ws_client_peer
[INFO websocat::ws_client_peer] Connected to ws
ENTER_YOUR_API_KEY
omitRaw |
If 1, the following raw fields will be empty: registryDataRawText, registrantContact_rawText, whoisRecordRawText, administrativeContact_rawText, billingContact_rawText, technicalContact_rawText, zoneContact_rawText. Example: wss://nrd-stream.whoisxmlapi.com/ultimate?omitRaw=1 Acceptable values: 0 | 1 Default: 0 |
includeCandidates |
If 1, the stream will be enriched with simplified domain records obtained directly from zone files before they undergo complete NRD processing. These candidate records contain only two fields: domainName and reason (which can be either "added" for newly registered domains or "dropped" for recently removed domains). These candidate domains are reported as soon as they are detected in zone files, providing faster notification of domain registrations and removals. Most candidate domains will be reported again after completing the full NRD processing pipeline, potentially with a different reason value based on WHOIS record comparison. Some domains may not appear in the second report if an identical WHOIS record was already identified or if the WHOIS record could not be retrieved. Example: wss://nrd-stream.whoisxmlapi.com/ultimate?includeCandidates=1 Acceptable values: 0 | 1 Default: 0 |
We are here to listen. For a quick response, please select your request type. By submitting a request, you agree to our Terms of Service and Privacy Policy.