Domain intelligence

Whoxy OSINT integration

Current WHOIS, ownership history, and reverse WHOIS from Whoxy.

Whoxy returns parsed WHOIS for a domain (registrar, contacts, nameservers, dates) plus historical ownership snapshots. Reverse WHOIS maps an email or registrant name to the domains they appear on. Its public database lists 725,300,921 monitored domains and 3,085,597,696 WHOIS records, across 1,596 TLDs.

from $0.15Whoxy directly vs on OSINTverse

Capabilities

What this integration is designed to return.

Live WHOIS lookup across 1,596 TLDs

Historical WHOIS snapshots for ownership changes

Reverse WHOIS by email address or person / company name

Parsed registrar, registrant, admin, and technical contacts

Registered-domain WHOIS only — subdomains fold to the parent automatically

Best for

Typical investigation fits.

Infrastructure and brand ownership investigations

Finding related domains from a known email or name

Tracking registrar and contact changes over time

How the Whoxy integration works

What happens between pressing run and reading a result.

1Choose domain, email, or name and select Whoxy.
2Domain queries must be a registered domain. Hostnames like mail.example.com are folded to example.com because WHOIS is the parent record, not the subdomain.
3Domain queries return the live parsed WHOIS record plus historical ownership snapshots.
4Email and name queries run reverse WHOIS and return the domain portfolio tied to that registrant.
5SearchIn renders a registration card, an ownership timeline, and a portfolio list, with raw JSON kept for export.

Data coverage

What the underlying dataset reaches.

Whoxy’s public database lists 725,300,921 monitored domains and 3,085,597,696 WHOIS records across 1,596 TLDs. History recording started in November 2012, and Whoxy says history is available for about 75% of those domains.

Data sources

SearchIn queries Whoxy for live WHOIS, ownership history, and reverse WHOIS by email or name. The figures below are from Whoxy’s public database page.

Whoxy WHOIS database

Domains monitored: 725.3 million
WHOIS records: 3.09 billion
Page checked: 22 September 2026

TLDs

1,596

API coverage

Whoxy says its WHOIS API supports 1,596 TLDs.

.COM

325,084,703 domains

Largest TLD slice

The largest extension slice Whoxy publishes on the database page.

United States

231,993,433 domains

Largest country slice

Domains Whoxy lists as registered from the United States.

History

Since November 2012

About 75% of domains

Whoxy says the earliest stored WHOIS is from November 2012, and history is available for about 75% of domains in the complete database.

What a SearchIn query returns

A query returns the current record, history snapshots, or a reverse-WHOIS portfolio for one identifier.

A domain query returns parsed registrar, registrant, admin, and technical contacts, plus nameservers and dates.

Email and name queries return the domains Whoxy has tied to that registrant.

Fields the registrar has redacted stay redacted on this integration.

A hostname such as mail.example.com is folded to the parent domain. WHOIS is the registered domain.

Supported inputs & pricing

Prices are USD. LeakRadar includes 1,000 credential unlocks in the query price, then $0.50 per extra 1,000. OSINT Industries is $0.60 plus optional premium modules at $1.80. Other integrations are flat per query. Full SearchIn rates are on pricing.

Whoxy SearchIn pricing by input type
Input type	Price
Emailemail	$0.25
Domaindomain	$0.15
Namename	$0.25

Why run Whoxy through OSINTverse

You can always buy Whoxy directly. Here is what changes when the same data comes through SearchIn instead. Full write-up: OSINTverse vs Whoxy.

At $0.15 per domain lookup it is the cheapest WHOIS path on the desk — run it before paying for WhoisXML.

Current record, ownership history, and reverse WHOIS come back through one call and one normalised panel.

Reverse-WHOIS portfolios drop into the graph, so a registrant email can pivot into DNS or breach providers.

Whoxy directly compared with Whoxy through OSINTverse SearchIn
	Whoxy directly	Through OSINTverse
Getting started	Whoxy sells prepaid API credits from its own dashboard, priced separately per lookup type.	Sign in, top up from $10, and run Whoxy the same minute — no vendor contract, seat, or sales call.
What a query costs	Plan, credit pack, or contract pricing set by the vendor and paid up front.	Pay per query from your prepaid balance — Whoxy starts at $0.15 for domain lookups, with the exact price shown before you run it.
Failed lookups	Handled under the vendor's own credit and refund policy.	Automatically refunded to your wallet — a search that fails upstream after billing is not charged.
Output format	A vendor-specific response shape you normalise and render yourself.	Normalised result panels plus the raw JSON, returned by the same POST /v1/search contract as every other integration.
Cross-source work	Copy-paste between vendor dashboards to follow a lead into another dataset.	Results join one case graph, so you can pivot an entity into any of the other 16 integrations in a click.
Running it for a team	Per-seat or per-account access, billed and administered per analyst.	One shared team wallet with roles, provider allowlists, enforced MFA, and audit history — no per-seat fee.
Volume work	Script the vendor API yourself, including retries, polling, and rate handling.	Bulk search takes up to 50 queries across selected providers in one submission (max 100 jobs), with per-job status and partial-failure handling.

What every integration inherits

One wallet, no subscriptions

Top up prepaid USD from $10 and spend it a query at a time across all 17 integrations. No monthly fee, no seat count — and the balance never expires.

Failed searches are refunded

If an upstream provider errors or times out after the charge, the search is marked refunded and the money goes back to your wallet automatically.

One API for every source

The same POST /v1/search contract and x-api-key header work for every integration, so adding a source to your automation is a one-word change.

Cases and pivot graph

Results land in a named case you can reopen. Entities become graph nodes you can pivot from into any other integration without retyping.

Team wallets and controls

Share one balance with roles, provider allowlists, enforced MFA, and audit history — instead of buying a vendor seat for every analyst.

Exports built in

Download any result as JSON, CSV, or PDF, and export the case graph as PNG, SVG, entities CSV, or graph JSON.

Good to know

Constraints worth reading before you spend a query.

Fields hidden by the registrar stay redacted — WhoisXML last-known data can fill some of those gaps.

Whoxy’s database is domains it has monitored since November 2012. It does not include every domain ever registered, and history exists for about 75% of the domains it lists.

History depth varies by TLD and registrar.

Subdomains are not separately registered. WHOIS is the parent domain; use SecurityTrails or Shodan for DNS on a hostname.

Going direct still makes sense at sustained high volume on a single source. Whoxy sells prepaid API credits from its own dashboard, priced separately per lookup type. Through SearchIn you trade that commitment for per-query pricing across 17 integrations.

Access via SearchIn UI

Run the integration without leaving the dashboard.

Open SearchIn and choose Domain, Email, or Name.
Select Whoxy as the provider.
Enter a registered domain (example.com). A subdomain such as mail.example.com is converted to the parent automatically.
Review the current record, history snapshots, or reverse-WHOIS domain list.

What you'll see

·Current registration card with dates and nameservers
·Ownership history timeline
·Reverse-WHOIS domain portfolio with registrant fields
·Full JSON export for automation

Open with this integration

Access via API

Authenticate with x-api-key, then create a search job.

Use POST /v1/search with provider whoxy. Poll GET /v1/search/{id} when status is running (FaceCheck).

curl -X POST "https://apiv1.osintverse.com/v1/search" \
  -H "Content-Type: application/json" \
  -H "x-api-key: ov_your_api_key" \
  -d '{"provider":"whoxy","input_type":"domain","query":"example.com"}'

Create API key Full API docs

Sample queries

domain

example.com

Current WHOIS + history

admin@example.com

Domains tied to an email

name

Alex Rivera

Domains tied to a registrant name

Investigations that use Whoxy

OSINT Industries Predicta Search LeakRadar LeakOSINTbot DeHashed Snusbase WhoisXML SecurityTrails Shodan Hunter.io BuiltWith Blockchair IPQualityScore Facecheck.id Picarta.ai GeoSeer

FAQ

Whoxy on OSINTverse, answered

How do I use Whoxy in SearchIn?

Open SearchIn and choose Domain, Email, or Name. Select Whoxy as the provider. Enter a registered domain (example.com). A subdomain such as mail.example.com is converted to the parent automatically. Review the current record, history snapshots, or reverse-WHOIS domain list.

How do I call Whoxy from the OSINTverse API?

Authenticate with an x-api-key header, then POST /v1/search with provider "whoxy" and a supported input_type (email, domain, name). Poll GET /v1/search/{id} if the job returns running.

What does Whoxy cost on SearchIn?

Email: $0.25. Domain: $0.15. Name: $0.25. You see the price before every run, and there is no subscription.

Why use OSINTverse instead of Whoxy directly?

Whoxy sells prepaid API credits from its own dashboard, priced separately per lookup type. On OSINTverse you pay per query from one prepaid USD wallet with no subscription, failed searches are refunded automatically, results are normalised into a case graph you can pivot into other sources, and the same POST /v1/search contract reaches every integration. At $0.15 per domain lookup it is the cheapest WHOIS path on the desk — run it before paying for WhoisXML. Current record, ownership history, and reverse WHOIS come back through one call and one normalised panel. Reverse-WHOIS portfolios drop into the graph, so a registrant email can pivot into DNS or breach providers.

What are the limits of Whoxy on SearchIn?

Fields hidden by the registrar stay redacted — WhoisXML last-known data can fill some of those gaps. Whoxy’s database is domains it has monitored since November 2012. It does not include every domain ever registered, and history exists for about 75% of the domains it lists. History depth varies by TLD and registrar. Subdomains are not separately registered. WHOIS is the parent domain; use SecurityTrails or Shodan for DNS on a hostname.

Run Whoxy alongside every other source

One login, one prepaid wallet, and the price shown before every lookup.

Run Whoxy See pricing

Free account, no card
Credits never expire
Refund unused balance in 7 days