---
description: >-
  Whoxy is a domain search engine or "whois lookup" tool to find registration
  information on a domain, such as the registrar, the status of the domain and
  the date of registration.
---

# Whoxy

## URL

[https://www.whoxy.com/](https://www.whoxy.com/)

## Description

With Whoxy there are several options to find information on domain names. It is free to sign up for an account but that is not a requirement for one or a few searches.

There are 6 options to query information.

* Enter a domain name for general whois: results will show the domain name itself, the registrar, the registered date, the date of when the registry was updated, and the expiry date. Also the domain status, name servers and contact details.
* Enter a domain name to retrieve historical information. Results will show the same information as for a regular whois query, and further down on the page it is shown who owned that domain in the past.
* Enter an owner name for reverse whois results on which domain names are linked to that owner. The results will show domain names which are linked to that particular name. If the amount of results is substantial, a subset will be shown with the remark to use the Reverse Whois API.
* Enter a company name for reverse whois results on which domain names are linked with that company. The results will show a list of domain names. If the amount of results is substantial, a subset will be shown with the remark to use the Reverse Whois API.
* Enter a valid e-mail address for reversed whois results on which domain names are linked with that e-mail address.
* Enter a domain keyword (for instance "iPhone") for reversed whois results on which domain names include that specific keyword. The results will show a list of domain names with that keyword. If the amount of results is substantial, a subset will be shown with the remark to use the Reverse Whois API.

\*\*\*

The information shown for a regular whois query and a whois history query are available in whois format, but also as RAW, JSON and XML.

When using the API, output is offered as JSON schema, XML schema, JSON live results and XML live results for easy incorporation into your research tools.

\*\*\*

To the right of the basic information when using the regular whois lookup, there is a smaller pane listing similar domains. There is a button to view all. The listed similar-named domains can sometimes lead to the discovery of pivot points, it can for instance provide information on the use of [typosquatting](https://en.wikipedia.org/wiki/Typosquatting).

The complete range of services can be found on the homepage under the button "Our Services".

\*\*\*

Compared to other services that offer information on domain names, for instance DomainTools \* (which is part of the [Bellingcat Toolkit](https://bellingcat.gitbook.io/toolkit/more/all-tools/domaintools-whois-lookup)), Whoxy.com seems to be a cost-effective and comprehensive tool. Most services are free, and API access is very budget-friendly.

\* DomainTools does not charge for singular whois lookups. They offer a personal membership for data access for the personal user for $99.00 per month. The services they offer in that membership are stated on their ["Join"](https://secure.domaintools.com/join/) page.

## Cost

* [ ] Free
* [x] Partially Free
* [ ] Paid

Single searches are free and do not require an account. Whoxy does not require a monthly fee, and has a "pay as you go" policy if an API is used. Pricing information for API access can be found [here](https://www.whoxy.com/pricing.php), and is also visible on the front page, including comparisons to other tools.

## Level of difficulty

<table><thead><tr><th data-type="rating" data-max="5"></th></tr></thead><tbody><tr><td>2</td></tr></tbody></table>

## Requirements

You will need to create an account if you require an API key. A key can be obtained through the Account Manager page (login needed), from there look for API Settings.

In order to create an account, Whoxy requires the following information:

* a real and valid email address (temporary or disposable email addresses are not accepted)
* a password
* a full name
* a mailing address
* a city
* a state
* a ZIP/postal code
* a country
* a phone number.

A company name and a tax ID are optional.

## Limitations

There are no limitations found while writing this description.

## Ethical Considerations

Personally identifiable information (abbreviated as [PII](https://en.wikipedia.org/wiki/Personal_data)) is often redacted in order to adhere to privacy rulings. \*

The results may still show names, addresses and contact information. Keep in mind that the names that are shown may not be the same person that is investigated on.

Domain data may be incomplete or outdated so the information should always be checked against other sources before concluding the information is correct.

( \* There are multiple laws, rulings and articles which address the need for privacy protection in WHOIS data. See for instance [https://icann.org](https://icann.org), [https://www.eff.org/](https://www.eff.org/), [https://gdpr.eu/](https://gdpr.eu/)or resources from domain registration companies which explain their WHOIS privacy services.)

## Guides and articles

Whoxy.com is mentioned on Rae Baker's website [here](https://www.raebaker.net/blog/10-free-osint-tools-for-beginners-and-pros). Authentic8 also mentions it briefly in their blog [here](https://www.authentic8.com/blog/unmasking-website-ownership-using-osint). Forensic OSINT by Ritu Gill offers a Youtube video [here.](https://www.youtube.com/watch?v=EVbrdnmQawc)

## Tool provider

The tool provider is Whoxy.com, powered by [Autowhois.com](https://www.autowhois.com/) and [Bigdomaindata.com](https://www.bigdomaindata.com/) according to the statement at the bottom of the website pages. All 3 companies are based in the United States.

## Advertising Trackers

* [x] This tool has not been checked for advertising trackers yet.
* [ ] This tool uses tracking cookies. Use with caution.
* [ ] This tool does not appear to use tracking cookies.

| Page maintainer           |
| ------------------------- |
| Bellingcat Volunteer Team |
|                           |
