Threat Intelligence Lookup | WhoisXML API
Products APIs Data Feeds Web Tools Domain Research & Monitoring Enterprise Packages
WHOIS / WHOIS History
WHOIS / WHOIS History

Provide current and historical ownership information on domains / IPs. Identify all connections between domains, registrants, registrars, and DNS servers.

DNS / DNS History
DNS / DNS History

Look into all current and historical DNS / IP connections between domains and A, MX, NS, and other records. Monitor suspicious changes to DNS records.

IP Geolocation / IP Netblocks
IP Geolocation / IP Netblocks

Get detailed context on an IP address, including its user’s geolocation, time zone, connected domains, connection type, IP range, ASN, and other network ownership details.

Domain Research Suite (DRS)
Domain Research Suite (DRS)

Access our web-based solution to dig into and monitor all domain events of interest.

Domain Research Suite (DRS)
Domain Research Suite (DRS)

Get access to a web-based enterprise-grade solution to search and monitor domain registrations and ownership details for branded terms, fuzzy matches, registrants of interest, and more.

Research
Monitoring
White-Label
WhoisXML API Predictive Threat Intelligence
Predictive Threat Intelligence

Detect and block access to and from dangerous domain names before malicious actors can weaponize them. Contact us today for more information.

WhoisXML API Internet Infrastructure
Internet Infrastructure

Unlock integrated intelligence on Internet properties and their ownership, infrastructure, and other attributes.

Enterprise API Packages
Enterprise API Packages

Our complete set of domain, IP, and DNS intelligence available via API calls as an annual subscription with predictable pricing.

Security Intelligence (SI) Suite
Security Intelligence (SI) Suite

Offers complete access to WHOIS, IP, DNS, and subdomain data for product enrichment, threat hunting and more.

Multi-Level API User Administration Now Available - Manage individual API keys for team members in your organization.

Learn More
×
Contact Us
API docs Pricing

Obtain threat intelligence for an IoC in seconds

Get instant access to pertinent threat data about domains, URLs, IP addresses, CIDR numbers, and hashes tagged as indicators of compromise (IoCs) for attacks involving malware, phishing, botnets, C&C servers, spam, and other threats. Test our lookup tool now.

6.8M+Domains
1M+URLs
1.5M+IP addresses
600K+File hashes

Benefits of Threat Intelligence IoC Lookup

  • Extensive Coverage

    Retrieve threat intelligence for a wide range of IoCs involved in various suspicious and malicious activities.

  • Reliable and Accurate

    Threat Intelligence IoC Lookup obtains data from multiple sources to ensure accuracy and freshness.

  • Easy-to-Use

    Retrieve the threat intelligence related to an IoC in seconds—simply type the IoC and click Lookup.

Threat Intelligence Lookup | WhoisXML API

Download a comprehensive threat intelligence database to increase your threat visibility.

Our Threat Intelligence Data Feeds comes with 10 different data types downloadable in various standardized file formats for seamless integration into your systems.

Request a Quote

Practical usage

Investigate Suspicious Resources

Quickly check if a domain, URL, IP address, CIDR number, or hash communicating with your network is associated with a specific suspicious or malicious activity.

Get Additional Context for Known Threat Indicators

Enrich your knowledge about known IoCs by obtaining relevant details, such as threat type and first and last seen dates.

Broaden Threat Research Sources

Security researchers can use Threat Intelligence IoC Lookup to learn more about the malicious resources associated with a threat or cyber attack they may be investigating.

Threat Intelligence Lookup | WhoisXML API

Got an IoC? Register for free to check it on Threat Intelligence API now.

Get started