Case Study: Access Now cuts phishing investigation time by 60% with WhoisXML API

Access Now cuts phishing investigation time by 60% with WhoisXML API

Access Now, a global non-profit defending digital rights, faced a challenge where its Digital Security Helpline needed to quickly identify and map malicious domains used in phishing campaigns against human rights defenders. Their manual WHOIS lookup process was slow and inefficient, making it difficult to uncover connections between domains and achieve accurate attribution. To improve this, they partnered with WhoisXML API.

WhoisXML API provided a solution through its WHOIS API and MCP Server, which was integrated into the Helpline's workflow via the Gemini CLI. This allowed analysts to automate queries and search for registrant email reuse across domains. The implementation resulted in a 60% reduction in investigation time, significantly faster identification of related infrastructure, and more actionable intelligence for their incident response efforts.

Access Now