Whoxy.com Verified -

Analysts use Whoxy to track Command and Control (C2) servers used by malware. By tracing the history of a suspicious domain, they can identify the hosting provider and trace the infrastructure back to specific threat actors.

To access historical records or reverse searches, create a free account (50 daily lookups). For API or bulk needs, choose a paid plan starting at $49/month. whoxy.com

This is Whoxy’s "killer feature." Standard WHOIS is a forward search: You know the domain, and you want the owner. Reverse WHOIS works backward: You know the owner (or an email address), and you want to see every domain they own. Analysts use Whoxy to track Command and Control

: To map out the infrastructure used in phishing campaigns. whoxy.com