Case Study: Georgia Tech achieves early threat detection with WhoisXML API WHOIS History API

Georgia Institute of Technology & WhoisXML API Early Threat Detection

Georgia Tech researcher Vinny Adjibi at the Georgia Institute of Technology was looking for a way to predict which domains might be used in malicious campaigns by analyzing WHOIS history as a threat signal. The challenge was that historical WHOIS data is often unparsed and difficult to work with, so he turned to WhoisXML API and its WHOIS History API to access normalized domain registration records.

With WhoisXML API’s WHOIS History API, Adjibi was able to query well-parsed historical WHOIS data with helpful parameters that simplified analysis and reduced the need to check current WHOIS records. The result was a streamlined threat detection workflow, access to more than 15 years of historical domain data, and a 94% improvement in domain query precision, saving several days of manual parsing work.

Georgia Tech