WhoisXML API is a cyber intel provider that has been gathering, analyzing, and correlating domain, IP, and DNS data for a more secure and transparent Internet.

Covina CA
Joined March 2011
From domains and IPs to DNS records and historical WHOIS, investigations often depend on being able to pivot quickly across connected infrastructure. That’s why we’re proud to have WhoisXML API integrated into @MalforsHQ giving threat intelligence analysts, SOC teams, and incident responders direct access to domain ownership and DNS intelligence within their existing workflow. Know more about the integration here: main.whoisxmlapi.com/success… #ThreatIntelligence #ThreatHunting #OSINT #CyberSecurity
1
43
What if BigBear 2.0 could hijack Microsoft 365 sessions even after MFA? Thanks to @cloudsek for the 38 network IoCs, investigating which we uncovered 1,656 new potential artifacts → 81 potential victim IPs, 1,048 email-connected domains, 8 additional IPs, 592 IP-connected domains, and 8 string-connected domains. Download report → main.whoisxmlapi.com/threat-… #BigBear2 #ThreatIntelligence #Cybersecurity #DNSintel #M365 #Phishing #InfoSec #ThreatReport
52
What happens when cyber threats move faster than traditional threat intelligence can keep up? At WXA Tokyo Forum 2026, we’re exploring The Next Generation of Threat Intelligence in the AI / Agentic Era — and how defenders can move from reacting to known threats to anticipating what comes next. Request an invitation: join.whoisxmlapi.com/wxa-for… #WXATokyoForum #WXATokyo2026 #ThreatIntelligence
36
How much attack surface can a single AI prompt expose? Jake AI maps subdomains, traces IP infrastructure, and connects DNS and TLS data to uncover hidden relationships and leads worth investigating. Explore Jake AI for free: jake.whoisxmlapi.com/ #JakeAI #CyberSecurity
70
🚨 September 2026 Domain Activity Highlights: main.whoisxmlapi.com/blog/se… We analyzed 12.3M+ new domains: • 3.2M+ flagged with malicious intent • 1.07M+ confirmed malicious See how #TLD trends and attacker behavior are evolving! #threatintelligence #cybersecurity #domainintel #infosec
43
We’re excited to be heading to #BSidesPDX 2026! Our VP, Alex Ronquillo, will be joining the cybersecurity community in Portland and presenting “VibeCheck: Failed,” a session on the security challenges of AI-generated websites. Attending @BSidesPDX? We’d love to connect: join.whoisxmlapi.com/upcomin… #CyberSecurity #ThreatHunting #ThreatIntelligence #PDXTech #AISecurity #Bsides
35
WhoisXML API has launched VPN & Proxy Detection API, a new tool that classifies IP addresses as VPN, proxy, residential proxy, Tor, relay, hosting, or CDN in real time. For residential-proxy exit IPs, it also names the network behind the connection. Learn more in: whoisxmlapi.com/blog/introdu… #FraudPrevention #CyberSecurity #IPIntelligence
1
1
2
139
Not every #cybersecurity conversation needs a stage. Some need the right people in the room. That’s the idea behind WXA Tokyo Forum 2026 — a smaller, invitation-only setting for sharper discussion on where threat intelligence is heading next. Request an invitation: join.whoisxmlapi.com/wxa-for… @attaxion #WXATokyoForum #WXATokyo2026 #ThreatIntelligence
49
Heading to #ICANN87 in Bali? WhoisXML API will be there as the @ICANN community comes together to discuss #DNS, Internet governance, abuse mitigation, and the infrastructure behind a safer, more resilient Internet. If you’re attending, let’s connect: join.whoisxmlapi.com/upcomin… #ICANN #InternetGovernance #DomainNames #ThreatIntelligence
72
We're proud to be a data partner of Ardence, @trmlabs' new AI investigation platform. Learn more: trmlink.info/4y9vYwT #cybersecurity #ThreatIntelligence #AI
62
WhoisXML API is heading to #HITCON CISO Summit 2026 in Taipei. We’re joining security leaders to talk Internet intelligence, threat investigations, and what stronger defense looks like in practice. 👉 Request a meeting: join.whoisxmlapi.com/upcomin… @HacksInTaiwan #HITCONCISOSummit #ThreatIntelligence #CyberSecurity #CISO #CISOSummit #CISOSummit2026
47
What if a fake software installer opened the door to a Silver Fox campaign? #SilverFox impersonated trusted software vendors to deliver malicious installers, primarily targeting China-based operations and Chinese-speaking users. Thanks to @msftsecurity for the 9 network IoCs, expanding which we uncovered 1,570 new artifacts→ 1,474 email-connected domains, 3 additional IPs, 74 IP-connected domains, and 19 string-connected domains. Download the full report → main.whoisxmlapi.com/threat-… #Malware #ThreatIntel #Cybersecurity #DNSintel
107