Domain Attribution API

Intelligence that
shows its work

Query a domain. Get the real operator, not the CDN, not REDACTED FOR PRIVACY. Every confidence score breaks down into the signals behind it so you can verify the answer yourself.

Analyze your first domain API Reference

98.33%

Accuracy

15+ signals

Fused

See why

Not just who

The problem

You're making decisions on incomplete data

WHOIS is gone. CDNs mask 40% of the web. And the tools that claim to fill the gap won't show you how they got their answer.

WHOIS Returns Nothing

GDPR redacts ownership fields. ICANN's RDAP transition made things worse. Your primary intelligence source now returns REDACTED FOR PRIVACY.

CDNs Hide the Operator

Cloudflare, AWS CloudFront, and Fastly sit in front of 40% of all domains. Single-source tools tell you it's behind Cloudflare. You already knew that.

Scores Without Evidence

Other platforms give you a number. No signal weights. No source breakdown. When the score is wrong (and it will be), you can't figure out why.

How it works

Multiple sources. One scored answer.

A single query checks every available intelligence source concurrently. Results are fused, weighted, and decomposed into a full evidence chain.

Query

Send any domain. All intelligence sources checked concurrently in under 3 seconds.

Score

Signals weighted, correlated, and fused into per-entity confidence scores.

Decompose

Every score breaks down to raw signal contributions. Full evidence chain.

Interactive demo

Try it now

Enter a domain to see scored attribution with per-signal breakdown

Real results

We publish our accuracy, including where we're wrong

Real attribution results on real domains. A tool you can't audit is a tool you can't trust.

signal.org 7/8 sources

Signal Technology Foundation

nonprofit

Confidence 61.0%

framework.computer 8/8 sources

Framework Computer Inc

corporation

Confidence 72.0%

mullvad.net 6/8 sources

Mullvad VPN AB

corporation

Confidence 54.0%

darkpool-ind.com 3/8 sources

Unknown

registrar

Confidence 4.0%

Parked domain with no content, SSL, or identifying infrastructure

Built for

Teams that need answers they can verify

Security Teams

Phishing attribution, threat infrastructure mapping, incident response evidence

Legal & IP

UDRP dispute evidence, signed attribution certificates, trademark enforcement

Researchers

Infrastructure mapping, OSINT investigations, vulnerability disclosure

Compliance

KYC domain verification, vendor screening, M&A domain portfolio audits

12sources

fused per query

98.33%

benchmark accuracy

<3s

full analysis

374M+

domains searchable

Capabilities

Domain attribution you can put in a report

Works When WHOIS Doesn't

GDPR-redacted domains, privacy-proxied registrations, CDN-masked origins. WhoisGenius finds the real operator when single-source tools return nothing.

Evidence You Can Cite

Every confidence score decomposes into the signals behind it. Include the full evidence chain in reports, filings, or investigations. Not just a number.

Signed Certificates

Generate tamper-proof attribution certificates for legal proceedings, compliance documentation, or UDRP domain disputes.

98.33% Accuracy

Benchmarked on real domains across 6 difficulty categories, including CDN-masked, GDPR-redacted, and multi-tenant hosting. We publish the methodology and the failure cases.

AI for Edge Cases

When the evidence is ambiguous, optional AI enrichment resolves entities and explains its reasoning in plain language. Zero cost when not needed.

Answers in Under 3 Seconds

All intelligence sources checked concurrently. One API call, one response, full evidence chain. Ready for automation, bulk analysis, or real-time workflows.

Historical Intelligence

v2.1

Domains change hands. Infrastructure moves. WhoisGenius now tracks the full history so you can see who operated a domain last year, not just today.

Passive DNS reveals infrastructure history and hosting relationships

WHOIS ownership timelines show when operators changed

GDPR-redacted field reconstruction recovers hidden registrant data

Shared hosting and CDN false positive suppression

Portfolio Discovery

v2.1

You found one domain. But what else does that entity run? Reverse WHOIS searches across 374M+ domains to map the full portfolio.

Reverse WHOIS across 374M+ domains by name, email, or org

Answer "what else does this entity run?" in a single query

Connect domains across subsidiaries, acquisitions, and rebrands

Infrastructure correlation validates portfolio membership

Pricing

Simple, transparent pricing

DomainTools charges $50,000/year. We start at $0.

Full evidence chain included on every analysis.

How many domains do you analyze per month?

501005002,0005,000+

Recommended: Starter — $25 for 100 credits

Estimated monthly cost: ~$25/mo

Start free with 75 credits — no card required. Get started

Starter

$25one-time

100 credits

1 credit = 1 full analysis · $0.25/analysis

Full evidence chain on every analysis
All signals included
API + dashboard access
Credits never expire

Get Starter

Compare packs

Feature	Starter	Growth	Scale
Credits	100	500	2,000
Effective $/analysis	$0.25	$0.20	$0.15
1 credit = 1 full analysis
Full evidence chain
All signals
API + dashboard access
BYOK supported
Pay-as-you-go beyond credits	$0.28/analysis	$0.28/analysis	$0.28/analysis
Support	Community	Email	Priority

Frequently asked questions

One credit buys one full analysis — the complete evidence chain, every signal, no metering of partial results. You start with 75 free credits the moment you sign up, no card required, so you can try the full product before paying anything. Buy a pack when you need more.

No — your credits do not expire. A pack you buy today is still there months from now. Use them at your own pace; there is no monthly reset and nothing to forfeit.

You are never blocked mid-project. Once your balance reaches zero, analyses continue at pay-as-you-go — $0.28 per analysis — billed only for what you run. Prefer to prepay? Buy another pack at any time for a lower effective rate.

Yes. Bring your own LLM key and analyses run at $0.10 per analysis. You supply the model credentials; we run the full evidence pipeline around them.

No. Credit packs are one-time purchases — there is no recurring fee, no monthly minimum, and nothing renews automatically. You pay only when you choose to buy more credits.

There is no subscription to cancel — packs are one-time, so nothing is billing you in the background. You can review your balance, purchase history, and credit activity anytime from your dashboard.

Quick start

First result in 30 seconds

Three lines from signup to your first scored domain attribution.

No SDK required. Any HTTP client works.

terminal

# Submit a domain for analysis
curl -X POST https://api.whoisgeni.us/analyze \
  -H "X-API-Key: YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{"domain": "signal.org"}'

# Poll for results
curl https://api.whoisgeni.us/jobs/JOB_ID \
  -H "X-API-Key: YOUR_KEY"


  "domain": "signal.org",
  "status": "completed",
  "scoring_result": 
    "top_entity": "Signal Technology Foundation",
    "confidence": 0.610,
    "signals": [
       "source": "ssl_subject_org", "strength": "high" ,
       "source": "http_jsonld_org",  "strength": "medium" 
    ]

See who really operates any domain

500 free queries per month. Full evidence chain on every result.

No credit card required. Sign up and start querying in under a minute.

Start analyzing domains See use cases

Intelligence that shows its work