Whoxy
Current WHOIS, ownership history, and reverse WHOIS from Whoxy.
Whoxy returns parsed WHOIS for a domain (registrar, contacts, nameservers, dates) plus historical ownership snapshots. Reverse WHOIS maps an email or registrant name to the domains they appear on. Its public database lists 725,300,921 monitored domains and 3,085,597,696 WHOIS records, across 1,596 TLDs.
Capabilities
- Live WHOIS lookup across 1,596 TLDs
- Historical WHOIS snapshots for ownership changes
- Reverse WHOIS by email address or person / company name
- Parsed registrar, registrant, admin, and technical contacts
- Registered-domain WHOIS only — subdomains fold to the parent automatically
Data
Whoxy’s WHOIS database page, checked 22 September 2026, lists 725,300,921 monitored domains and 3,085,597,696 WHOIS records across 1,596 TLDs. The largest slices it publishes are .COM (325,084,703 domains) and domains registered from the United States (231,993,433). History recording started in November 2012, and Whoxy says history is available for about 75% of the domains in that database. The database is domains Whoxy has monitored, not every domain ever registered.
What you get back
- Current registration card with dates and nameservers
- Ownership history timeline
- Reverse-WHOIS domain portfolio with registrant fields
- Full JSON export for automation
UI workflow
Open SearchIn and choose Domain, Email, or Name.
Select Whoxy as the provider.
Enter a registered domain (example.com). A subdomain such as mail.example.com is converted to the parent automatically.
Review the current record, history snapshots, or reverse-WHOIS domain list.
Sample queries
| Input type | Query | Notes |
|---|---|---|
domain | example.com | Current WHOIS + history |
email | admin@example.com | Domains tied to an email |
name | Alex Rivera | Domains tied to a registrant name |
Domain lookups are registered-domain only. Hostnames such as www.example.com, mail.example.co.uk, and badri313.is-great.org are folded to example.com, example.co.uk, and is-great.org before Whoxy is called. Subdomains share that WHOIS record — use SecurityTrails or Shodan for DNS on the host itself.
Pricing
email $0.25 · domain $0.15 · name $0.25
Best for
- Infrastructure and brand ownership investigations
- Finding related domains from a known email or name
- Tracking registrar and contact changes over time
How it works & why through OSINTverse
How the request runs
- 1Choose domain, email, or name and select Whoxy.
- 2Domain queries must be a registered domain. Hostnames like mail.example.com are folded to example.com because WHOIS is the parent record, not the subdomain.
- 3Domain queries return the live parsed WHOIS record plus historical ownership snapshots.
- 4Email and name queries run reverse WHOIS and return the domain portfolio tied to that registrant.
- 5SearchIn renders a registration card, an ownership timeline, and a portfolio list, with raw JSON kept for export.
Coverage. Whoxy’s public database lists 725,300,921 monitored domains and 3,085,597,696 WHOIS records across 1,596 TLDs. History recording started in November 2012, and Whoxy says history is available for about 75% of those domains.
Why route Whoxy through OSINTverse
- ·At $0.15 per domain lookup it is the cheapest WHOIS path on the desk — run it before paying for WhoisXML.
- ·Current record, ownership history, and reverse WHOIS come back through one call and one normalised panel.
- ·Reverse-WHOIS portfolios drop into the graph, so a registrant email can pivot into DNS or breach providers.
| Whoxy directly | Through OSINTverse | |
|---|---|---|
| Getting started | Whoxy sells prepaid API credits from its own dashboard, priced separately per lookup type. | Sign in, top up from $10, and run Whoxy the same minute — no vendor contract, seat, or sales call. |
| What a query costs | Plan, credit pack, or contract pricing set by the vendor and paid up front. | Pay per query from your prepaid balance — Whoxy starts at $0.15 for domain lookups, with the exact price shown before you run it. |
| Failed lookups | Handled under the vendor's own credit and refund policy. | Automatically refunded to your wallet — a search that fails upstream after billing is not charged. |
| Output format | A vendor-specific response shape you normalise and render yourself. | Normalised result panels plus the raw JSON, returned by the same POST /v1/search contract as every other integration. |
| Cross-source work | Copy-paste between vendor dashboards to follow a lead into another dataset. | Results join one case graph, so you can pivot an entity into any of the other 16 integrations in a click. |
| Running it for a team | Per-seat or per-account access, billed and administered per analyst. | One shared team wallet with roles, provider allowlists, enforced MFA, and audit history — no per-seat fee. |
| Volume work | Script the vendor API yourself, including retries, polling, and rate handling. | Bulk search takes up to 50 queries across selected providers in one submission (max 100 jobs), with per-job status and partial-failure handling. |
One wallet, no subscriptions
Top up prepaid USD from $10 and spend it a query at a time across all 17 integrations. No monthly fee, no seat count — and the balance never expires.
Failed searches are refunded
If an upstream provider errors or times out after the charge, the search is marked refunded and the money goes back to your wallet automatically.
One API for every source
The same POST /v1/search contract and x-api-key header work for every integration, so adding a source to your automation is a one-word change.
Cases and pivot graph
Results land in a named case you can reopen. Entities become graph nodes you can pivot from into any other integration without retyping.
Team wallets and controls
Share one balance with roles, provider allowlists, enforced MFA, and audit history — instead of buying a vendor seat for every analyst.
Exports built in
Download any result as JSON, CSV, or PDF, and export the case graph as PNG, SVG, entities CSV, or graph JSON.
Good to know
- Fields hidden by the registrar stay redacted — WhoisXML last-known data can fill some of those gaps.
- Whoxy’s database is domains it has monitored since November 2012. It does not include every domain ever registered, and history exists for about 75% of the domains it lists.
- History depth varies by TLD and registrar.
- Subdomains are not separately registered. WHOIS is the parent domain; use SecurityTrails or Shodan for DNS on a hostname.
API example
$0.25 per query. The Example tab is free sample data. The Try it tab runs a real search and charges the active workspace wallet at the same rates as the dashboard.
Domains
2
Reverse WHOIS hits
Registrars
2
Distinct registrars
Page
1 / 1
First page of reverse WHOIS
curl -X POST "https://apiv1.osintverse.com/v1/search" \ -H "Content-Type: application/json" \ -H "x-api-key: ov_your_api_key" \ -d '{"provider":"whoxy","input_type":"email","query":"admin@example.com"}'Invalid provider + input_type pairs return HTTP 422. Confirm combinations with GET /v1/providers or the pricing matrix.
Run this in the SearchIn UI or create an API key. Full HTTP reference: search workflow. Marketing overview: Whoxy integration.