Output formats | Specifications | First Watch Malicious Domains Data Feed | WhoisXML API
Products APIs Data Feeds Web Tools Domain Research & Monitoring Enterprise Packages
WHOIS / WHOIS History
WHOIS / WHOIS History

Provide current and historical ownership information on domains / IPs. Identify all connections between domains, registrants, registrars, and DNS servers.

DNS / DNS History
DNS / DNS History

Look into all current and historical DNS / IP connections between domains and A, MX, NS, and other records. Monitor suspicious changes to DNS records.

IP Geolocation / IP Netblocks
IP Geolocation / IP Netblocks

Get detailed context on an IP address, including its user’s geolocation, time zone, connected domains, connection type, IP range, ASN, and other network ownership details.

Domain Research Suite (DRS)
Domain Research Suite (DRS)

Access our web-based solution to dig into and monitor all domain events of interest.

Domain Research Suite (DRS)
Domain Research Suite (DRS)

Get access to a web-based enterprise-grade solution to search and monitor domain registrations and ownership details for branded terms, fuzzy matches, registrants of interest, and more.

Research
Monitoring
White-Label
WhoisXML API Predictive Threat Intelligence
Predictive Threat Intelligence

Detect and block access to and from dangerous domain names before malicious actors can weaponize them. Contact us today for more information.

WhoisXML API Internet Infrastructure
Internet Infrastructure

Unlock integrated intelligence on Internet properties and their ownership, infrastructure, and other attributes.

Enterprise API Packages
Enterprise API Packages

Our complete set of domain, IP, and DNS intelligence available via API calls as an annual subscription with predictable pricing.

Security Intelligence (SI) Suite
Security Intelligence (SI) Suite

Offers complete access to WHOIS, IP, DNS, and subdomain data for product enrichment, threat hunting and more.

Premium API Services
Premium API Services

Enjoy priority data access with our premium API services topped with extra perks including dedicated team support, enterprise-grade infrastructure, and SLAs for full scalability and high performance.

Multi-Level API User Administration Now Available - Manage individual API keys for team members in your organization.

Learn More
×
Contact Us
For SOCs For OEMs / MSSPs Specifications Pricing
Datafeed files Output format

Output formats

Domain names only files

domainName
ankaraefeturizm.com
endometriosisklinik.com
raweat-sama-diyala.iq
payas.com.mx
iwx2618.cn
...

Output field description

domainName

The associated domain name.

WHOIS-enriched files

reason,domainName,registrarName,registrarIANAID,whoisServer,nameServers,createdDateRaw,updatedDateRaw,expiresDateRaw,createdDateParsed,updatedDateParsed,expiresDateParsed,status,registryDataRawText,whoisRecordRawText,auditUpdatedDate,contactEmail,registrant_rawText,registrant_email,registrant_name,registrant_organization,registrant_street1,registrant_street2,registrant_street3,registrant_street4,registrant_city,registrant_state,registrant_postalCode,registrant_country,registrant_fax,registrant_faxExt,registrant_telephone,registrant_telephoneExt,administrativeContact_rawText,administrativeContact_email,administrativeContact_name,administrativeContact_organization,administrativeContact_street1,administrativeContact_street2,administrativeContact_street3,administrativeContact_street4,administrativeContact_city,administrativeContact_state,administrativeContact_postalCode,administrativeContact_country,administrativeContact_fax,administrativeContact_faxExt,administrativeContact_telephone,administrativeContact_telephoneExt,billingContact_rawText,billingContact_email,billingContact_name,billingContact_organization,billingContact_street1,billingContact_street2,billingContact_street3,billingContact_street4,billingContact_city,billingContact_state,billingContact_postalCode,billingContact_country,billingContact_fax,billingContact_faxExt,billingContact_telephone,billingContact_telephoneExt,technicalContact_rawText,technicalContact_email,technicalContact_name,technicalContact_organization,technicalContact_street1,technicalContact_street2,technicalContact_street3,technicalContact_street4,technicalContact_city,technicalContact_state,technicalContact_postalCode,technicalContact_country,technicalContact_fax,technicalContact_faxExt,technicalContact_telephone,technicalContact_telephoneExt,zoneContact_rawText,zoneContact_email,zoneContact_name,zoneContact_organization,zoneContact_street1,zoneContact_street2,zoneContact_street3,zoneContact_street4,zoneContact_city,zoneContact_state,zoneContact_postalCode,zoneContact_country,zoneContact_fax,zoneContact_faxExt,zoneContact_telephone,zoneContact_telephoneExt
discovered,ankaraefeturizm.com,Atak Domain,1601,whois.apiname.com,ns31.guzelhosting.com|ns32.guzelhosting.com|ns33.guzelhosting.com|ns34.guzelhosting.com,2024-10-17T15:42:16Z,2024-10-17T15:44:16Z,2025-10-17T15:42:16Z,2024-10-17 15:42:16 UTC,2024-10-17 15:44:16 UTC,2025-10-17 15:42:16 UTC,,,,2024-10-30 08:17:47 UTC,[email protected],,[email protected],Domain Administrator,Registrant of ankaraefeturizm.com,"72 Chase Side, Suite 2, London, United Kingdom, N14 5PH",,,,London,Chase Side,N14 5PH,UNITED KINGDOM,,,447520644531,,,[email protected],Domain Administrator,Admin of ankaraefeturizm.com,"72 Chase Side, Suite 2, London, United Kingdom, N14 5PH",,,,London,Chase Side,N14 5PH,UNITED KINGDOM,,,447520644531,,,,,,,,,,,,,,,,,,,[email protected],Domain Techistrator,Tech of ankaraefeturizm.com,"72 Chase Side, Suite 2, London, United Kingdom, N14 5PH",,,,London,Chase Side,N14 5PH,UNITED KINGDOM,,,447520644531,,,,,,,,,,,,,,,,,
discovered,endometriosisklinik.com,Atak Domain,1601,whois.apiname.com,ns1.guzelhosting.com|ns2.guzelhosting.com|ns11.guzelhosting.com|ns12.guzelhosting.com,2024-10-18T14:37:59Z,2024-10-18T14:39:32Z,2025-10-18T14:37:59Z,2024-10-18 14:37:59 UTC,2024-10-18 14:39:32 UTC,2025-10-18 14:37:59 UTC,,,,2024-10-30 08:17:48 UTC,[email protected],,[email protected],Gonet Bilisim Internet Reklam Hizmetleri Ticaret Ltd Sti,n/a,318 sk. No:12 Kat:4 D:4,,,,Izmir,Konak,35000,TURKEY,9005332760666,,9005332760666,,,[email protected],Gonet Bilisim Internet Reklam Hizmetleri Ticaret Ltd Sti,n/a,318 sk. No:12 Kat:4 D:4,,,,Izmir,Konak,35000,TURKEY,9005332760666,,9005332760666,,,,,,,,,,,,,,,,,,,[email protected],Gonet Bilisim Internet Reklam Hizmetleri Ticaret Ltd Sti,n/a,318 sk. No:12 Kat:4 D:4,,,,Izmir,Konak,35000,TURKEY,9005332760666,,9005332760666,,,,,,,,,,,,,,,,,
added,raweat-sama-diyala.iq,,0,,ns1417.websitewelcome.com|ns1418.websitewelcome.com,,,,,,,,,,2024-10-30 08:53:16 UTC,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,

Output field description

reason

The reason why the domain name was included in the data feed.

Possible reasons: discovered | added

added: new domain created less than 7 days ago.

discovered: domain previously unknown and created more than 7 days ago.
domainName

The associated domain name.
registrarName

Registrar name
registrarIANAID

Registrar ID assigned by ICANN.
whoisServer

Whois server
nameServers

Name servers separated by "|", with trailing "|".
createdDateRaw

The date the WHOIS record for the domain was created initially, in raw format.
updatedDateRaw

The last date the WHOIS record for the domain was updated, in raw format.
expiresDateRaw

The date the WHOIS record for the domain is expired, in raw format.
createdDateParsed

The parsed date the WHOIS record for the domain was created initially.
updatedDateParsed

The parsed last date the WHOIS record for the domain was updated.
expiresDateParsed

The parsed date the WHOIS record for the domain is expired.
status
registryDataRawText

The raw registry data.
whoisRecordRawText

The raw WHOIS record data.
auditUpdatedDate

The last the domains was checked by our system.
contactEmail

The best available email address to contact the domain owner. This is a calculated field: the first non-redacted and non-empty valid email from the list: registrant_email, administrativeContact_email, billingContact_email, technicalContact_email, zoneContact_email.
registrant_rawText

Registrant contact information raw text.
registrant_email

Registrant email
registrant_name

Registrant name
registrant_organization

Registrant organization
registrant_street1

Registrant street - 1
registrant_street2

Registrant street - 2
registrant_street3

Registrant street - 3
registrant_street4

Registrant street - 4
registrant_city

Registrant city
registrant_state

Registrant state
registrant_postalCode

Registrant postal code
registrant_country

Registrant country
registrant_fax

Registrant fax
registrant_faxExt

Registrant fax extension
registrant_telephone

Registrant telephone
registrant_telephoneExt

Registrant telephone extension
administrativeContact

Contains administrative contact information. The structure is the same as for the registrant_* fields.
technicalContact

Contains technical contact information. The structure is the same as for the registrant_* fields.
billingContact

Contains billing contact information. The structure is the same as for the registrant_* fields.
zoneContact

Contains zone contact information. The structure is the same as for the registrant_* fields.