WhoisXML API is a cyber intel provider that has been gathering, analyzing, and correlating domain, IP, and DNS data for a more secure and transparent Internet.

Covina CA
Joined March 2011
From domains and IPs to DNS records and historical WHOIS, investigations often depend on being able to pivot quickly across connected infrastructure. That’s why we’re proud to have WhoisXML API integrated into @MalforsHQ giving threat intelligence analysts, SOC teams, and incident responders direct access to domain ownership and DNS intelligence within their existing workflow. Know more about the integration here: main.whoisxmlapi.com/success… #ThreatIntelligence #ThreatHunting #OSINT #CyberSecurity
1
38
What if BigBear 2.0 could hijack Microsoft 365 sessions even after MFA? Thanks to @cloudsek for the 38 network IoCs, investigating which we uncovered 1,656 new potential artifacts → 81 potential victim IPs, 1,048 email-connected domains, 8 additional IPs, 592 IP-connected domains, and 8 string-connected domains. Download report → main.whoisxmlapi.com/threat-… #BigBear2 #ThreatIntelligence #Cybersecurity #DNSintel #M365 #Phishing #InfoSec #ThreatReport
52
What happens when cyber threats move faster than traditional threat intelligence can keep up? At WXA Tokyo Forum 2026, we’re exploring The Next Generation of Threat Intelligence in the AI / Agentic Era — and how defenders can move from reacting to known threats to anticipating what comes next. Request an invitation: join.whoisxmlapi.com/wxa-for… #WXATokyoForum #WXATokyo2026 #ThreatIntelligence
36
How much attack surface can a single AI prompt expose? Jake AI maps subdomains, traces IP infrastructure, and connects DNS and TLS data to uncover hidden relationships and leads worth investigating. Explore Jake AI for free: jake.whoisxmlapi.com/ #JakeAI #CyberSecurity
69
🚨 September 2026 Domain Activity Highlights: main.whoisxmlapi.com/blog/se… We analyzed 12.3M+ new domains: • 3.2M+ flagged with malicious intent • 1.07M+ confirmed malicious See how #TLD trends and attacker behavior are evolving! #threatintelligence #cybersecurity #domainintel #infosec
43
We’re excited to be heading to #BSidesPDX 2026! Our VP, Alex Ronquillo, will be joining the cybersecurity community in Portland and presenting “VibeCheck: Failed,” a session on the security challenges of AI-generated websites. Attending @BSidesPDX? We’d love to connect: join.whoisxmlapi.com/upcomin… #CyberSecurity #ThreatHunting #ThreatIntelligence #PDXTech #AISecurity #Bsides
35
WhoisXML API has launched VPN & Proxy Detection API, a new tool that classifies IP addresses as VPN, proxy, residential proxy, Tor, relay, hosting, or CDN in real time. For residential-proxy exit IPs, it also names the network behind the connection. Learn more in: whoisxmlapi.com/blog/introdu… #FraudPrevention #CyberSecurity #IPIntelligence
1
1
2
139
Not every #cybersecurity conversation needs a stage. Some need the right people in the room. That’s the idea behind WXA Tokyo Forum 2026 — a smaller, invitation-only setting for sharper discussion on where threat intelligence is heading next. Request an invitation: join.whoisxmlapi.com/wxa-for… @attaxion #WXATokyoForum #WXATokyo2026 #ThreatIntelligence
49
Heading to #ICANN87 in Bali? WhoisXML API will be there as the @ICANN community comes together to discuss #DNS, Internet governance, abuse mitigation, and the infrastructure behind a safer, more resilient Internet. If you’re attending, let’s connect: join.whoisxmlapi.com/upcomin… #ICANN #InternetGovernance #DomainNames #ThreatIntelligence
72
We're proud to be a data partner of Ardence, @trmlabs' new AI investigation platform. Learn more: trmlink.info/4y9vYwT #cybersecurity #ThreatIntelligence #AI
62
WhoisXML API is heading to #HITCON CISO Summit 2026 in Taipei. We’re joining security leaders to talk Internet intelligence, threat investigations, and what stronger defense looks like in practice. 👉 Request a meeting: join.whoisxmlapi.com/upcomin… @HacksInTaiwan #HITCONCISOSummit #ThreatIntelligence #CyberSecurity #CISO #CISOSummit #CISOSummit2026
47
What if a fake software installer opened the door to a Silver Fox campaign? #SilverFox impersonated trusted software vendors to deliver malicious installers, primarily targeting China-based operations and Chinese-speaking users. Thanks to @msftsecurity for the 9 network IoCs, expanding which we uncovered 1,570 new artifacts→ 1,474 email-connected domains, 3 additional IPs, 74 IP-connected domains, and 19 string-connected domains. Download the full report → main.whoisxmlapi.com/threat-… #Malware #ThreatIntel #Cybersecurity #DNSintel
107
What can #AI uncover when it connects the dots across #InternetIntelligence? See how Jake AI investigates bank impersonation attempts, analyzes suspicious domains and homoglyph variants, and adds context using domain and #threatintelligence. Try Jake AI for FREE: jake.whoisxmlapi.com/ #JakeAI #CyberSecurity #BrandSecurity
95
WhoisXML API is heading to #BSidesGöteborg 2026! David Hagberg will be there representing WXA, joining the security community for a day of technical talks, shared ideas, and practitioner-led conversations. Going too? Request to connect: join.whoisxmlapi.com/upcomin… #BSidesGothenburg #Cybersecurity #InfoSec
45
Tokyo, the WXA leadership team is coming back. On Nov. 19, #cybersecurity leaders from across Japan and APAC will come together for new research, real-world cases, and candid discussion on where threat intelligence goes next in the AI era. Request an invitation: join.whoisxmlapi.com/wxa-for… #WXATokyoForum #WXATokyo2026 #ThreatIntelligence #CyberSecurity #APAC #DNS
66
#Jewelbug’s single control panel powered both #cyberespionage and #cryptofraud across the Middle East and Asia. Thanks to @symantec and Carbon Black Threat Hunter Team for the 27 network IoCs, building on which we uncovered 5,412 new artifacts → 670 potential victim IPs, 5,331 email-connected domains, 3 additional IPs, 4 IP-connected domains, and 74 string-connected domains. Download report → main.whoisxmlapi.com/threat-… #ThreatIntel #Cybersecurity #DNSintel #ThreatReport
1
70
WhoisXML API is joining #HITCON CISO Summit 2026 as a Silver Sponsor — for a day of sharp conversations around #cybersecurity, #threatintelligence, and what’s shaping defense across the region. @HacksInTaiwan 👉 Request a meeting: join.whoisxmlapi.com/upcomin… #HITCON2026 #HITCONCISOSummit #HITCONCISOSUMMIT2026 #CISO
68
What if one #DNS record could uncover a broader web of connected domains? Reverse DNS Lookup lets security teams start with an SOA, TXT, or CNAME record and find domain names associated with it. Get Free Instant Access: reverse-dns.whoisxmlapi.com/… #ReverseDNS #ThreatIntelligence
125
The Internet doesn’t govern itself — its naming systems, policies, and security are shaped in rooms like #ICANN87, and WhoisXML API will be in Bali for the conversations that move them forward. Connect with Ching at @ICANN87: join.whoisxmlapi.com/upcomin… #ICANN #InternetGovernance #DomainNames #ThreatIntelligence
1
74
Trump called it “super intelligence” at the UN. Hours later, the domains started piling up. Our researchers mapped 1,677 superintelligence-related domains registered in September — including 739 on September 22 alone and 752 more over the next five days. Download Full Report: threat-news.whoisxmlapi.com/… #superintelligence #ArtificialIntelligence #ThreatIntelligence #ThreatResearch #DomainIntelligence #DNSIntelligence #CyberSecurity #OSINT #InfoSec
49