Standard WHOIS lookup tells you who owns a domain. The WhoisFreaks Reverse WHOIS API flips that question: give it an email address, registrant name, company, or keyword and it returns every domain in our 4.2B+ record database connected to that identifier. Results are paginated in JSON or XML, and 500 free credits are included on signup.
Our Products
A forward WHOIS lookup starts with a domain and returns the owner. A reverse WHOIS lookup starts with an owner attribute - an email address, registrant name, company name, or domain keyword and returns all domains associated with it.
Features
Four search parameters: email, company, registrant name, and domain keyword.
Reverse WHOIS any registrant email, including wildcard patterns such as *@company.com, and list all of its domains.
Reverse WHOIS an organization name to map a company's entire domain portfolio, including brands it never announced.
Reverse WHOIS a registrant name to return every domain that a named individual has registered since 1986.
Reverse WHOIS a domain keyword between 3 and 63 characters to surface an entire brand or campaign footprint.
Each card above maps to one query parameter. The full set, including the modifiers:
| Parameter | Accepts | Notes |
|---|---|---|
| Exact address or regex pattern | Exact match on a complete address, or patterns such as g***@outlook.com and q*.l*@gmail.com. Public addresses only. | |
| company | Publicly listed company name | Substring match by default. Searching "meta" returns domains held by companies with "meta" in the name. |
| owner | Registrant full name | Substring match by default. This is the parameter behind the Registrant Based Lookup card. |
| keyword | 3 to 63 characters | Matches the string inside the domain name. |
| exact | true or false | Defaults to false. Works with keyword, owner, and company. Not available for email. |
| mode | default or mini | default returns 50 records per page. mini returns 100 per page with domain name, creation, expiry and update dates, owner name, company, and email. |
| page | Integer | Pages through the result set. |
Full request and response reference, authentication, and error codes are in the Reverse WHOIS API documentation.
Use Cases
Where teams reach for reverse WHOIS instead of a single-domain lookup.
A reverse WHOIS search on a lead's email or company name returns the full domain portfolio for your CRM record.
Reverse WHOIS your own registrant email to surface forgotten domains before they lapse.
Reverse WHOIS one malicious domain's registrant email to map the rest of that actor's infrastructure in one query.
Reverse WHOIS your trademark as a keyword and catch cybersquatted domains before a phishing campaign starts.
Reverse WHOIS a competitor's organization name to reveal domains they registered before an unannounced launch.
Check a counterparty's claims with a reverse WHOIS search on their registrant email, using our pre-GDPR era records.
Start with 500 free credits. Search by email, registrant, company, or keyword across 4.1B+ WHOIS records, and page through results in JSON or XML.
Source
WhoisFreaks collects WHOIS records directly from registry and registrar WHOIS and RDAP endpoints across 1529 TLDs, parses and normalizes each record into a consistent field set, and refreshes 35M+ records daily. Historical records are retained rather than overwritten, so a reverse search returns every registrant that a domain has had, not only the current one.
Registry and Registrar WHOIS plus RDAP endpoints
Pricing
Reverse WHOIS calls draw on the same credit pool as every other WhoisFreaks API and lookup tool. Signing up includes 500 free credits, and no card is required.
500 free credits on signup. No credit card required.A starter option ideal for trials and lightweight projects.
Sign in to BuyBest value for consistent, ongoing usage.
Sign in to BuyPerfect for quick experiments and short-term needs.
Sign in to BuyFull tiers, enterprise rate limits, surcharge limits and dataset pricing are on the API pricing page.
Integrations
The WhoisFreaks Reverse WHOIS API ships with official Python and Go SDKs, so investigators and brand protection teams can retrieve every domain tied to an email, name, or company across 4.2B+ WHOIS records.
Zapier, Make, and n8n let non-technical teams automate reverse lookups, triggering watchlist pivots whenever a known threat actor email or brand keyword appears in new registrations and routing results to Slack.
Enterprise security operations integrate it into SIEM and SOAR platforms to expand domain indicators during incident response and surface the full registrant infrastructure behind a single malicious domain in real time.
To search for email addresses using regex in reverse WHOIS, use the 'email' parameter with regex patterns. The 'email' parameter supports:
Note: Regex matching is only available for email addresses. For keywords, owner/registrant names, or company names, use the optional parameter exact set to 'false', or omit it as it defaults to 'false'.