Skip to content
Domain attribution API

Find out who really
runs a domain

Send a domain and get back the organization most likely operating it, even when WHOIS is redacted or the site sits behind a CDN. Every answer comes with the evidence behind it, so you can check it before you rely on it.

Many independent signals
Checked on every query
<30s
Quick answer. A full run takes about a minute.
Interactive demo

See what WHOIS hides

Try a domain where the registration is redacted or hidden behind a CDN, and watch WhoisGenius name the real operator anyway, with the evidence.

The problem

You're making decisions on incomplete data

Most WHOIS records no longer name the owner. A large share of sites sit behind a CDN that hides where they are hosted. And most tools that fill the gap do not show how they reached their answer.


WHOIS Returns Nothing

01

Privacy rules redact the ownership fields. The record you used to rely on now returns REDACTED FOR PRIVACY.

CDNs Hide the Operator

02

A large share of sites sit behind a CDN. Single-source tools tell you which CDN it is. You already knew that.

Scores Without Evidence

03

Other tools give you a number and nothing else. When the score is wrong, and sometimes it will be, you cannot see why.

How it works

An answer that shows its work

A single query checks many sources at once. The results are combined into one answer, with the evidence behind it laid out.

01

Query

Send any domain. Sources are checked in parallel. Quick answers in under 30 seconds. A full run takes about a minute.

02

Score

The signals are combined into a confidence score for each candidate organization.

03

Decompose

Every score breaks down into the signals behind it, so you can check the answer.

Real results

We publish our accuracy, including where we're wrong

Real attribution results on real domains. A tool you can't audit is a tool you can't trust.

See the benchmark: blind-sample accuracy with error bars, plus our regression suite and its misses
framework.computer

Framework Computer Inc

corporation
Confidence 72.0%
darkpool-ind.com

Unknown

registrar
Confidence 4.0%

Parked domain with no content, SSL, or identifying infrastructure

mullvad.net

Mullvad VPN AB

corporation
Confidence 54.0%
Built for

Teams that need answers they can verify

Security Teams
Legal & IP
Researchers
Compliance
Many independent signals
checked on every query
Blind test
accuracy, error bars shown
<30s
quick answer, about a minute for a full run
50 domains
per portfolio lookup
Capabilities

Attribution leads, with the evidence attached

Works When WHOIS Doesn't

GDPR-redacted domains, privacy-proxied registrations, CDN-masked origins. WhoisGenius names the most likely operator when single-source tools return nothing.

Evidence You Can Cite

Every confidence score decomposes into the signals behind it. Include the full evidence chain in reports, filings, or investigations. Not just a number.

Signed Records

Export a signed record of what the analysis found and when. It documents the evidence. It does not prove ownership on its own.

Accuracy Tested Blind

We measure accuracy on a random sample of domains we never tuned on, with answers we did not write, and publish it with its error bars. A separate 186-domain regression suite guards the hard cases, like CDN-masked and GDPR-redacted domains. See the results, methodology and caveats.

AI for Edge Cases

When the evidence is ambiguous, optional AI enrichment resolves entities and explains its reasoning in plain language. Zero cost when not needed.

One Call, One Answer

Quick answers in under 30 seconds. A full run takes about a minute. One API call returns the answer with its evidence, ready for automation or bulk analysis.

Historical Intelligence

v2.1

Domains change hands. Infrastructure moves. WhoisGenius now tracks the full history so you can see who operated a domain last year, not just today.

Passive DNS reveals infrastructure history and hosting relationships
WHOIS ownership timelines show when operators changed
GDPR-redacted field reconstruction recovers hidden registrant data
Shared hosting and CDN false positive suppression

Portfolio Discovery

v2.1

You found one domain. But what else does that entity run? Reverse WHOIS maps the rest of the portfolio.

Reverse WHOIS by name, email, or org
Answer "what else does this entity run?" in a single query
Connect domains across subsidiaries, acquisitions, and rebrands
Infrastructure correlation validates portfolio membership
Pricing

Simple, transparent pricing

Start with signup credits. Buy a pack when you need your next batch.

Full evidence chain included on every analysis.

How many domains do you need to analyze?

501005002,0005,000
Recommended: Starter: $25 for 100 credits
Estimated cost: $25 one-time
Start free with 75 credits (no card required). Get started
Starter
$25one-time
100 credits
1 credit = 1 full analysis · $0.25/analysis
  • Full evidence chain on every analysis
  • All signals included
  • API + dashboard access
  • One-time credit packs
Get Starter
Most Popular
Growth
$99one-time
500 credits
1 credit = 1 full analysis · $0.20/analysis
  • Full evidence chain on every analysis
  • All signals included
  • API + dashboard access
  • One-time credit packs
Get Growth
Scale
$299one-time
2,000 credits
1 credit = 1 full analysis · $0.15/analysis
  • Full evidence chain on every analysis
  • All signals included
  • API + dashboard access
  • One-time credit packs
Get Scale
Enterprise
Custom
Custom volume
Volume credits & tailored terms
  • Everything in Scale
  • Volume pricing
  • Priority support
  • Custom integrations
Contact sales
Buy another credit pack when your balance runs out. Analysis pauses at zero credits unless you turn on auto-recharge.Credit packs are one-time purchases, with no monthly reset.

Compare packs

Swipe to compare packs →

FeatureStarterGrowthScale
Credits1005002,000
Effective $/analysis$0.25$0.20$0.15
1 credit = 1 fresh domain analysis
Available evidence and sources
API + dashboard access
BYOK supported
When credits run outBuy a pack or use auto-rechargeBuy a pack or use auto-rechargeBuy a pack or use auto-recharge

Frequently asked questions

Quick start

Your first result in three lines

Quick answers in under 30 seconds. A full run takes about a minute.

No SDK required. Any HTTP client works.

terminal
# Submit a domain for analysis
curl -X POST https://api.whoisgeni.us/analyze \
  -H "X-API-Key: YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{"domain": "framework.computer"}'

# Poll for results
curl https://api.whoisgeni.us/jobs/JOB_ID \
  -H "X-API-Key: YOUR_KEY"


  "domain": "framework.computer",
  "status": "completed",
  "scoring_result": 
    "top_entity": "Framework Computer Inc",
    "confidence": 0.72,
    "signals": [
       "source": "ssl_subject_org", "strength": "high" ,
       "source": "http_jsonld_org",  "strength": "high" 
    ]
  
AI agents

Use WhoisGenius as an MCP server

Add it to Claude Code or any Model Context Protocol client in one line. Two tools, analyze_domain and correlate_domains, run synchronously and return in seconds. Send your API key in the X-API-Key header.

claude mcp add --transport http whoisgenius https://api.whoisgeni.us/mcp --header "X-API-Key: YOUR_KEY"

Prefer a config file? Point any client at https://api.whoisgeni.us/mcp with transport streamable-http.


See who really operates any domain

75 free credits to start, no card required. Full evidence chain on every result.

Sign up and start querying in under a minute.