Whoisfreaks

Enriches your lead lists and security alerts with real time domain ownership and IP intelligence, then maps that data to your CRM or SIEM for immediate action.

Try Whoisfreaks in Ceven

Ask Ceven anything
Standard

Why use Ceven?

  1. AI native Whoisfreaks integration

    • Describe the outcome and Ceven picks the right Whoisfreaks calls, fills the parameters, and checks the result.
    • Structured, agent friendly tool schemas so each call runs reliably instead of by guesswork.
    • Rich coverage for reading, writing, and querying your Whoisfreaks data, across all 17 of its actions.
  2. Managed auth

    • Built in OAuth with automatic token refresh and rotation.
    • One place to manage, scope, and revoke Whoisfreaks access.
    • Per user and per environment credentials instead of shared keys.
  3. Agent optimized design

    • Actions are tuned from real success and error rates so reliability climbs over time.
    • Full execution logs so you always know what ran in Whoisfreaks, when, and on whose behalf.
    • The agent pauses and asks when Whoisfreaks is unclear instead of plowing ahead.
  4. Enterprise grade security

    • Fine grained access so you control which agents and people can reach Whoisfreaks.
    • Least privilege by default, read scopes first and only the writes a workflow needs.
    • A full audit trail of every Whoisfreaks action to support review and sign off.

Supported tools

Every action Ceven's agents can run on Whoisfreaks, and when to use it.

ASN WHOIS Lookup
Use this to retrieve ASN ownership, network infrastructure, and IP address ranges for a specific network.
Bulk DNS Lookup
Pull DNS records for up to 100 domains or IPs in one request for efficient batch processing.
Bulk Domain Availability Check
Verify if multiple domain names are available for registration in a single batch call.
Bulk WHOIS Lookup
Query registration details, contact info, and name servers for up to 100 domains at once.
DNS Live Lookup
Perform real time DNS record resolution for network diagnostics or reverse DNS lookups.
Check Domain Availability
Use this to check if a specific domain is available and get alternative suggestions.
IP Geolocation Lookup
Pull the country, city, coordinates, and ISP for a specific IP address.
IP WHOIS Lookup
Identify IP ownership, allocation status, and organization details for a given IP.
Security Threat Lookup
Check if an IP is associated with malicious activity or appears on known blocklists.
SSL Certificate Lookup
Fetch the live SSL certificate chain, issuer information, and validity dates for a domain.
Subdomain Lookup
Enumerate all subdomains associated with a domain for asset discovery or security assessments.
WHOIS Historical Lookup
Retrieve historical registration records for a domain from the database dating back to 1986.
WHOIS Live Lookup
Fetch real time registration data directly from authoritative WHOIS servers.
WHOIS Reverse Lookup By Company
Search for all domains registered by a specific company or organization name.
WHOIS Reverse Lookup by Email
Find all domains associated with a specific email address using exact or regex matching.
WHOIS Reverse Lookup By Owner
Search for all domains registered by a specific owner name using pattern matching.
Get Domain Files Status
Tool to check availability and update status of domain data files including newly registered, expired, and dropped domains. Use when you need to verify that domain data files are prepared and ready for download before accessing file downloa
WHOIS Live Lookup V2
Tool to fetch real time WHOIS domain data using v2.0 endpoint. Use when you need current domain ownership, registration dates, contact information, or nameserver details via the updated v2.0 API. Note that some fields may show 'REDACTED FOR

18 actions · scroll to see them all

Frequently asked questions

Ceven utilizes the bulk endpoints specifically designed by Whoisfreaks to minimize API calls. When you provide a list of domains, the agent bundles them into groups of 100, which is the maximum limit for bulk DNS and WHOIS lookups. This ensures that your workflow runs efficiently and does not exhaust your monthly credit quota on individual requests. The agent then parses the combined response and maps each result back to the corresponding domain in your original list, allowing you to perform large scale enrichment of lead lists or security logs without manual iteration or complex looping logic in your workflow.
Live Lookup queries authoritative WHOIS servers in real time to give you the current state of a domain, including the most recent name servers and expiration dates. Historical Lookup accesses the Whoisfreaks proprietary database to show you how a domain has changed over time, with records going back to 1986. Ceven can use these in tandem to detect domain flipping or ownership changes that might indicate a security risk. For example, a domain that suddenly changed owners and updated its DNS records within 24 hours can trigger an automated alert in your security dashboard.
Yes, Ceven uses the reverse WHOIS lookup capabilities of Whoisfreaks to achieve this. By providing an email address, a company name, or an owner name, the agent can query the database for all matching registration records. This is particularly useful for competitive intelligence or fraud detection. The agent can extract the list of domains and then run secondary checks, such as SSL certificate validation or DNS lookups, to see which of those domains are currently active and hosting content, providing a complete map of an entity's web presence.
Whoisfreaks provides deep IP intelligence through three primary tools. The IP Geolocation lookup gives you the physical location and ISP. The IP WHOIS lookup identifies the organization that owns the IP block. The Security Threat lookup checks the IP against blocklists and identifies if it is a known VPN, proxy, or Tor exit node. Ceven integrates these into a single investigation step, so when you provide an IP, the agent can tell you exactly who owns it, where it is located, and if it has a history of malicious activity.
One important quirk to note is that Whoisfreaks data availability can be affected by GDPR and other privacy regulations. Many registrars now redact personal contact information from WHOIS records, replacing names and emails with generic privacy proxies. While the API provides the most complete data possible, you will often see redacted fields for domains registered in the EU or those using privacy services. Ceven handles this by flagging redacted records in your workflow, so you know when you need to pivot to other intelligence sources like SSL certificates or DNS history to identify the owner.
The subdomain lookup tool enumerates all known subdomains associated with a root domain. Ceven uses this for asset discovery. For example, if you are performing a security audit, the agent can pull every subdomain and then automatically run an SSL certificate check on each one to find expired certificates or those using weak encryption. This prevents the need for you to run a separate scanner; the agent simply iterates through the list provided by Whoisfreaks and updates your tracking spreadsheet with the security status of every discovered asset in real time.
Ceven connects to Whoisfreaks using an API key provided in your Whoisfreaks dashboard. When you set up the integration, you enter your key into the Ceven secure vault. This key is encrypted at rest and is only injected into the request header at the moment the agent makes a call to the Whoisfreaks API. We never store your key in plain text or expose it to the model. You can rotate your API key in the Whoisfreaks portal at any time, and simply update the value in your Ceven connection settings to restore service to your workflows.
Yes, by using the WHOIS Live Lookup, Ceven can retrieve the exact expiration date of any domain. You can build a workflow that runs on a schedule, checking a list of your critical domains every week. If the agent detects that a domain is within 30 days of expiration, it can automatically create a ticket in Jira or send a Slack alert to your IT team. This removes the risk of accidental domain loss due to missed renewal notices, as the agent monitors the authoritative source directly rather than relying on email notifications from a registrar.

Alternatives to Whoisfreaks

Other tools that solve a similar problem. Ceven supports these too, so you can switch or run more than one at once.

DomainTools logoDomainToolsWhoisXMLApi logoWhoisXMLApiIpstack logoIpstack

Try Ceven on your stack

Plug Ceven on top of the tools you already run. Connect Whoisfreaks and the rest of your stack, describe the outcome, and its agents handle the work end to end, days of it in minutes.

Get started for free