A reverse WHOIS lookup is a means to retrieve all domain names containing your search term in their WHOIS records. With just a single piece of information, you can already retrieve relevant domains to get more insights for cybercrime investigations, market research, and threat hunting efforts.
Reverse WHOIS Lookup calls data from a WHOIS database that gets updated daily to ensure data accuracy and relevance.
Our WHOIS database contains more than 25.5B+ historical WHOIS records — a result of over a decade of data crawling.
You can choose any WHOIS record detail as a search term to pool all related domains.
Reports from Reverse WHOIS Lookup come with unique URLs, allowing you to share them with colleagues and relevant stakeholders easily.
“We want to provide all Cyberscape users the ability to integrate relevant data for their cyber threat investigations. WhoisXML API provides unique data that will be helpful to the cyber threat investigation community, allowing analysts to shorten the cycle of understanding and mitigating threats.”
“Whois XML is one of the most important tools we use for domain intelligence in the Bachelor's Degree program in Investigation and Security Sciences at the University of Perugia. In particular, we appreciate the reverse research from IP to Domain and Whois with query filters. The tool is comprehensive, providing detailed information such as phone numbers, names, and other details from Whois records. While many Whois records are now covered by privacy regulations, WhoisXML API provides access to all historical WHOIS records.”
“WhoisXML was the game changer for us. It has revolutionized our ability to disrupt cybercrime in process and at scale by quickly identifying all of the vendors providing material support for scammers using sophisticated website templates that look legitimate. By quickly identifying the vendors unknowingly supporting the criminals, we can provide them with public interest justification to burn down the criminal infrastructure.”
“WhoisXML API is amazing for checking out the historic registration information of a domain, pivoting to locate the alternate registrations with the same details and also my cyber investigations. The data proved very useful when investigating pig butchering scams and domains that host child abuse material.”
“Very useful for investigations, we can go back in history and see when domains were registered and who owned them at a certain time.”
“WhoisXML API builds out data sets that help users correlate attack infrastructure with related IP and WHOIS information.”
















Give the list of domain names tied to the specified DNS records via API calls with outputs in JSON and XML.
Learn more
Get data feeds of SSL certificates along with their well parsed fields in real time. Accurate. Up-to-date.
Learn more
Easily identify malicious resources and retrieve their threat information.
Learn more
Easily detect all typosquatting domain names as soon as they are registered each day.
Learn more
Find out the exact physical location of any IP address, email or domain name.
Learn more
Assess the domain's or IP addresses reputation and risk profile with a simple score based on a comprehensive...
Learn more
Get vendor information, detect virtual machines, manufacturer, location, read the information encoded in the MAC address.
Learn more
Get the most comprehensive database of SSL (Secure Sockets Layer) Certificates.
Learn more
We provide complete and relevant domain WHOIS data which can be customized and easily integrated as per your business needs.
Learn more
Enhance your domain research toolkit by our enterprise-grade web-based solution that helps you in searching...
Learn more
Get the most relevant data to be ahead of emerging security threats.
Learn more
Get the most comprehensive database of registered MAC address blocks, also referred to as OUIs (Organizationally Unique Identifiers).
Learn more
Monitor exact matches, variations and common misspellings of your brand name & trademarks.
Learn more
Get well-parsed and normalized WHOIS information for any domain name, IP address or email.
Learn more
Get data feeds of new registered domains along with their WHOIS data generated in real time.
Learn more
Find domains and subdomains related by specific terms in their hostnames.
Learn more
Get insights for the new business registered on the web.
Learn more
Find out which domains were added or dropped by registrants, with given search criteria.
Learn more