Gather information on a user’s city, postal code, region, country, and ISO country code.
Complement the location information of a user with his corresponding time zone (+10:00).
Get geographical coordinates to measure the straight line distance from a given point to another.
Check the Internet service provider (ISP) that allocated a user’s IP address.
Parameters include Autonomous System (AS) number, name, and route.
Check a user’s connection type (e.g., modem, mobile, broadband, etc.) to assess his network quality.
Identify the network type of an IP address—educational/research, ISP, enterprise, nonprofit, etc.
Keep an eye on up to five domain names resolving to an IP address.
IP Geolocation Lookup covers 99.5% of all IPv4 and IPv6 addresses in use, spanning 250 countries and over 250,000 cities. Our data is updated every day for freshness and relevance.
IP Geolocation Lookup’s reports give a clear overview of relevant geo data points, along with value-added network information, a list of connected entities, and a location map.
“ We’ve used WhoisXML API’s data in our own investigations, and it is one of the most popular integrations among Malfors users. It is the best source we’ve found for WHOIS data, including WHOIS history and Reverse WHOIS. Analysts can pivot on DNS records or WHOIS text to uncover more infrastructure and support threat actor attribution. Our users, from SOC teams to incident responders, can access that data in just a few clicks. ”
“We want to provide all Cyberscape users the ability to integrate relevant data for their cyber threat investigations. WhoisXML API provides unique data that will be helpful to the cyber threat investigation community, allowing analysts to shorten the cycle of understanding and mitigating threats.”
“WhoisXML API builds out data sets that help users correlate attack infrastructure with related IP and WHOIS information.”
















Assess the domain's or IP addresses reputation and risk profile with a simple score based on a comprehensive...
Learn more
Find out which domains were added or dropped by registrants, with given search criteria.
Learn more
Get the most comprehensive database of SSL (Secure Sockets Layer) Certificates.
Learn more
Easily detect all typosquatting domain names as soon as they are registered each day.
Learn more
Get data feeds of new registered domains along with their WHOIS data generated in real time.
Learn more
Find domains and subdomains related by specific terms in their hostnames.
Learn more
We provide complete and relevant domain WHOIS data which can be customized and easily integrated as per your business needs.
Learn more
Get data feeds of SSL certificates along with their well parsed fields in real time. Accurate. Up-to-date.
Learn more
Get the most relevant data to be ahead of emerging security threats.
Learn more
Enhance your domain research toolkit by our enterprise-grade web-based solution that helps you in searching...
Learn more
Easily identify malicious resources and retrieve their threat information.
Learn more
Monitor exact matches, variations and common misspellings of your brand name & trademarks.
Learn more
Get well-parsed and normalized WHOIS information for any domain name, IP address or email.
Learn more
Get insights for the new business registered on the web.
Learn more
Give the list of domain names tied to the specified DNS records via API calls with outputs in JSON and XML.
Learn more
Find out the exact physical location of any IP address, email or domain name.
Learn more