# Whoxy

Current WHOIS, ownership history, and reverse WHOIS from Whoxy.

URL: https://osintverse.com/docs/providers/whoxy

Whoxy returns parsed WHOIS for a domain (registrar, contacts, nameservers, dates) plus historical ownership snapshots. Reverse WHOIS maps an email or registrant name to the domains they appear on. Its public database lists 725,300,921 monitored domains and 3,085,597,696 WHOIS records, across 1,596 TLDs.

## Capabilities

* Live WHOIS lookup across 1,596 TLDs
* Historical WHOIS snapshots for ownership changes
* Reverse WHOIS by email address or person / company name
* Parsed registrar, registrant, admin, and technical contacts
* Registered-domain WHOIS only — subdomains fold to the parent automatically

## Data

Whoxy’s [WHOIS database](https://www.whoxy.com/whois-database/) page, checked 22 September 2026, lists **725,300,921** monitored domains and **3,085,597,696** WHOIS records across **1,596** TLDs. The largest slices it publishes are .COM (325,084,703 domains) and domains registered from the United States (231,993,433). History recording started in November 2012, and Whoxy says history is available for about 75% of the domains in that database. The database is domains Whoxy has monitored, not every domain ever registered.

## What you get back

* Current registration card with dates and nameservers
* Ownership history timeline
* Reverse-WHOIS domain portfolio with registrant fields
* Full JSON export for automation

## UI workflow

Open SearchIn and choose Domain, Email, or Name.

Select Whoxy as the provider.

Enter a registered domain (`example.com`). A subdomain such as `mail.example.com` is converted to the parent automatically.

Review the current record, history snapshots, or reverse-WHOIS domain list.

## Sample queries

| Input type | Query               | Notes                             |
| ---------- | ------------------- | --------------------------------- |
| `domain`   | `example.com`       | Current WHOIS + history           |
| `email`    | `admin@example.com` | Domains tied to an email          |
| `name`     | `Alex Rivera`       | Domains tied to a registrant name |

> Domain lookups are registered-domain only. Hostnames such as `www.example.com`, `mail.example.co.uk`, and `badri313.is-great.org` are folded to `example.com`, `example.co.uk`, and `is-great.org` before Whoxy is called. Subdomains share that WHOIS record — use SecurityTrails or Shodan for DNS on the host itself.

## Pricing

`email` **$0.25** · `domain` **$0.15** · `name` **$0.25**

## Best for

* Infrastructure and brand ownership investigations
* Finding related domains from a known email or name
* Tracking registrar and contact changes over time

## How it works & why through OSINTverse

### How the request runs

1. Choose domain, email, or name and select Whoxy.
2. Domain queries must be a registered domain. Hostnames like mail.example.com are folded to example.com because WHOIS is the parent record, not the subdomain.
3. Domain queries return the live parsed WHOIS record plus historical ownership snapshots.
4. Email and name queries run reverse WHOIS and return the domain portfolio tied to that registrant.
5. SearchIn renders a registration card, an ownership timeline, and a portfolio list, with raw JSON kept for export.

**Coverage.** Whoxy’s public database lists 725,300,921 monitored domains and 3,085,597,696 WHOIS records across 1,596 TLDs. History recording started in November 2012, and Whoxy says history is available for about 75% of those domains.

### Why route Whoxy through OSINTverse

- At $0.15 per domain lookup it is the cheapest WHOIS path on the desk — run it before paying for WhoisXML.
- Current record, ownership history, and reverse WHOIS come back through one call and one normalised panel.
- Reverse-WHOIS portfolios drop into the graph, so a registrant email can pivot into DNS or breach providers.

|  | Whoxy directly | Through OSINTverse |
| --- | --- | --- |
| Getting started | Whoxy sells prepaid API credits from its own dashboard, priced separately per lookup type. | Sign in, top up from $10, and run Whoxy the same minute — no vendor contract, seat, or sales call. |
| What a query costs | Plan, credit pack, or contract pricing set by the vendor and paid up front. | Pay per query from your prepaid balance — Whoxy starts at $0.15 for domain lookups, with the exact price shown before you run it. |
| Failed lookups | Handled under the vendor's own credit and refund policy. | Automatically refunded to your wallet — a search that fails upstream after billing is not charged. |
| Output format | A vendor-specific response shape you normalise and render yourself. | Normalised result panels plus the raw JSON, returned by the same POST /v1/search contract as every other integration. |
| Cross-source work | Copy-paste between vendor dashboards to follow a lead into another dataset. | Results join one case graph, so you can pivot an entity into any of the other 16 integrations in a click. |
| Running it for a team | Per-seat or per-account access, billed and administered per analyst. | One shared team wallet with roles, provider allowlists, enforced MFA, and audit history — no per-seat fee. |
| Volume work | Script the vendor API yourself, including retries, polling, and rate handling. | Bulk search takes up to 50 queries across selected providers in one submission (max 100 jobs), with per-job status and partial-failure handling. |

- **One wallet, no subscriptions.** Top up prepaid USD from $10 and spend it a query at a time across all 17 integrations. No monthly fee, no seat count — and the balance never expires.
- **Failed searches are refunded.** If an upstream provider errors or times out after the charge, the search is marked refunded and the money goes back to your wallet automatically.
- **One API for every source.** The same POST /v1/search contract and x-api-key header work for every integration, so adding a source to your automation is a one-word change.
- **Cases and pivot graph.** Results land in a named case you can reopen. Entities become graph nodes you can pivot from into any other integration without retyping.
- **Team wallets and controls.** Share one balance with roles, provider allowlists, enforced MFA, and audit history — instead of buying a vendor seat for every analyst.
- **Exports built in.** Download any result as JSON, CSV, or PDF, and export the case graph as PNG, SVG, entities CSV, or graph JSON.

### Good to know

- Fields hidden by the registrar stay redacted — WhoisXML last-known data can fill some of those gaps.
- Whoxy’s database is domains it has monitored since November 2012. It does not include every domain ever registered, and history exists for about 75% of the domains it lists.
- History depth varies by TLD and registrar.
- Subdomains are not separately registered. WHOIS is the parent domain; use SecurityTrails or Shodan for DNS on a hostname.

## API example

Try `whoxy` free with mock data in the API sandbox: https://osintverse.com/developers/sandbox

> Invalid `provider` + `input_type` pairs return HTTP 422. Confirm combinations with [GET /v1/providers](https://osintverse.com/docs/api/overview) or the [pricing matrix](https://osintverse.com/docs/pricing).

Run this in the [SearchIn UI](https://osintverse.com/searchin/search) or create an [API key](https://osintverse.com/dashboard/api). Full HTTP reference: [search workflow](https://osintverse.com/docs/api/search). Marketing overview: [Whoxy integration](https://osintverse.com/integrations/whoxy).