For web-network investigators

Bring your list.
Find your next
useful lead.

A list of domains is a starting point. Work out which attribution leads deserve a closer look—with the evidence to check them.

Evaluate WhoisGenius on a real information-operations or commercial web-network investigation. Spend less of your review assembling scattered signals, and more deciding what to investigate next.

Start with my list See what you’ll get

Self-guided · 75 signup credits · No card to get started

Start with a real decision

Which domains are
worth your next hour?

This is for investigators who already have a domain list and need to triage possible operators or relationships across a web network.

  • You have an active case and a list available now.
  • You can compare the results with your current lookup tools or manual process.
  • You know who will review the evidence and what decision it needs to support.

This workflow supports evidence review. It does not supply a prospect contact list, recover hidden registrant details, or authorize testing a domain.

What comes back

Evidence you can inspect.
Leads you can challenge.

Use the results alongside your investigation—not as a substitute for verification.

01 / Attribution

Review each domain

Open a domain result to inspect candidate entities, confidence scores and supporting signals. Available evidence can include registration, DNS, certificates and website content.

Decide which attribution claims warrant a closer check.

02 / Delivery

Keep the result trail

For up to 50 domains, follow jobs in the dashboard and open individual results. Larger lists use the bulk route, with CSV and JSON download links emailed when results are ready.

Review returned statuses and errors as well as named candidates.

03 / Relationships

Compare a selected set

Use Correlate separately for 2–100 domains to explore clusters and relationship evidence. Batch analysis does not automatically run correlation; it is a separate credit-consuming action.

Prioritize plausible connections without treating shared infrastructure as proof.

How correlation works

Read the uncertainty

“Inconclusive” is a valid outcome.

Sources may be redacted, unavailable, stale or contradictory. A brand on a page, a registrant, a parent company and a hosting provider are different roles. Confidence scores are model outputs, not verified probabilities of ownership.

Some jobs return partial results or fail. Today’s evidence may not establish who operated a site at the time of an incident. Confirm consequential claims independently; an attribution does not establish maliciousness.

Your own-list evaluation

Start small enough
to review properly.

Choose a representative subset of your case. Include domains you understand and ones where your current process gets stuck.

  1. 1

    Define the question

    In your own notes, record the decision, your current method and who will assess the result. Decide what would make a second batch worthwhile.

  2. 2

    Sign in, then choose Batch

    Open Analyze in your dashboard and select Batch. Paste domain names or upload a text/CSV list. Use one domain per line or comma-separated domains; leave out case notes, personal details and unrelated spreadsheet columns.

  3. 3

    Check the list and submit

    Check the parsed count and your credit balance before choosing Analyze batch or Submit bulk analysis. Up to 50 domains return live job statuses; 51–500 use emailed exports. Split anything larger into separate submissions.

  4. 4

    Review before you expand

    Check useful leads, incorrect matches and unresolved cases against your existing evidence. Ask: did this reduce the work needed to choose the next investigation step?

Ready to put your list to work?

Your list is submitted in the authenticated dashboard. Nothing is uploaded on this page.

Start with my list

After sign-in: the original sign-in tab opens Analyze. If the magic-link tab opens onboarding instead, go to Dashboard → Analyze → Batch.

Timing & handling: processing time depends on the list, source availability and job load; there is no guaranteed turnaround. Bulk download links expire and anyone with a link can access its file—keep them private. See our data handling policy.

When the evaluation earns its place

New accounts receive 75 signup credits. This evaluation uses your normal balance, with no additional evaluation allowance or review service.

The test is simple: did the evidence help you decide what to do next?