How CloudsAnalytics.ai
scaled threat detection with MarketXY

The Challenge

CloudsAnalytics.ai provides a real-time threat intelligence platform used by security operations centres (SOCs) across 28 countries. Their core product flags phishing domains, malicious redirects, and lookalike domain attacks — but as threats grew more sophisticated in 2024, their internal domain scoring model was struggling to keep up.

Their team was spending significant engineering time maintaining their own WHOIS parser, DNS crawler, and IP reputation feed — infrastructure that wasn't their core business. False positive rates were high, customer confidence was dropping, and coverage gaps were leaving enterprise clients exposed.

How MarketXY Helped

In January 2025, CloudsAnalytics.ai integrated the MarketXY Enterprise API. Within 6 weeks, their engineering team had deprecated their internal WHOIS parser and DNS crawler entirely, replacing them with MarketXY's real-time data endpoints.

API Endpoints Used

CloudsAnalytics.ai uses three core MarketXY endpoints in their threat pipeline:

# 1. Real-time domain score + blacklist check
GET /v2/domain/{domain}/score

# 2. WHOIS registrant + registration age
GET /v2/whois/{domain}

# 3. Bulk lookup for batch processing
POST /v2/domain/bulk
Body: { "domains": ["..."], "include": ["score", "whois", "dns"] }

Implementation Timeline

Measurable Impact

After 90 days of full production use, CloudsAnalytics.ai measured the following improvements across their platform:

Other Customer Stories