Short answer
To generate B2B leads from whois data, pull the daily proxy-removed file of newly registered domains, filter it by country, TLD and domain-name keywords to match your ICP, enrich and verify the registrant email, then run a short, specific sequence within 48 hours of registration while the buying decision is still open.
Key takeaways
- Speed is the entire edge: contact within 48 hours or the opportunity is commoditised.
- Filter hard — a 2,000-lead segment that fits your ICP beats 200,000 unqualified rows.
- Verify every address before sending; whois lists punish careless senders fast.
- Reference the domain itself in the first line — it is the most specific personalisation you have.
- Warm a dedicated sending domain and cap daily volume to protect deliverability.
Whois-sourced outreach has a deserved reputation problem, and it is almost always a process problem rather than a data problem. Teams download 200,000 rows, blast a generic template from their primary domain, and torch their sender reputation in a fortnight. Done properly — narrow filter, verified addresses, fast and specific outreach — new-domain data is one of the few genuinely non-commoditised lead sources left, because the record did not exist yesterday and no broker has resold it.
Why a new domain is a strong buying signal
Registering a domain is a paid, deliberate act that precedes almost every other online purchase. In the days after registration the same buyer typically needs hosting, business email, an SSL certificate, a website, a logo, content, and eventually SEO and advertising. You are not interrupting a cold prospect; you are arriving during the exact week the budget is being decided.
Step 1 — Start from the proxy-removed file
Always work from the file with whois-guard and privacy-proxy records already stripped. Masked rows contain no contact detail, inflate your counts, and quietly ruin every conversion metric you calculate. Working from the clean file means every row in your funnel is theoretically actionable.
Step 2 — Filter down to an ICP segment
| Filter | Field | Example |
|---|---|---|
| Geography | registrant_country | Keep US, UK, CA, AU; drop jurisdictions your legal team excludes |
| Extension | domainName suffix | .com and .co for commercial intent; drop throwaway gTLDs |
| Keyword | domainName | Match 'clinic', 'law', 'shop', 'studio' for vertical campaigns |
| Organisation | registrant_organization | Non-empty implies a registered company rather than a hobbyist |
| Registrar | registrarName | Segment by registrar for migration or competitive offers |
| Infrastructure | nameServers | Parked nameservers mean no hosting has been bought yet |
A well-built filter typically reduces a 200,000-row day to somewhere between 500 and 5,000 genuinely relevant prospects. That is the number you want. Volume is the enemy of both deliverability and reply rate.
Step 3 — Verify and enrich before sending
- 1Run every address through a verification service and drop hard bounces and catch-alls you cannot confirm.
- 2Suppress against your existing CRM, past recipients, unsubscribes and competitor domains.
- 3Enrich with the registrant organisation and country to drive merge fields and language selection.
- 4Check nameservers to infer whether hosting, email or SSL has already been purchased — that determines the offer.
- 5Store the createdDate on the record so you can measure reply rate against contact latency.
Step 4 — Write for the 48-hour window
The single most effective personalisation available to you is the domain name itself. It is unambiguous, it is theirs, and it proves you are not working from a purchased list of job titles. Keep the first email under 90 words, make one concrete offer, and do not attach anything.
"Saw you registered northgate-dental.com on Tuesday. We build booking-first sites for dental practices — here's a two-minute example. Want the same for Northgate?"
A three-touch sequence over eight days outperforms longer cadences on this data, because the underlying urgency decays. If they have not replied by day eight they have usually already bought from someone else.
Step 5 — Protect deliverability
- Send from a dedicated domain, never your primary corporate domain.
- Warm the domain for two to three weeks before running volume through it.
- Cap sends per inbox per day and spread across several mailboxes rather than one.
- Authenticate with SPF, DKIM and DMARC before the first send, not after the first problem.
- Honour unsubscribes instantly and keep a permanent suppression list across all campaigns.
- Monitor bounce and complaint rates daily and pause the moment either climbs.
Compliance is a filter, not an afterthought
Whois records are public, but outreach is regulated where the recipient lives. GDPR and ePrivacy in Europe and the UK, CAN-SPAM in the United States, CASL in Canada and similar regimes elsewhere impose different consent, identification and opt-out requirements. The practical answer is country filtering: decide with your legal team which jurisdictions you will contact and which you will exclude, then apply that as a hard filter at the ingest stage so it can never be bypassed by a campaign manager in a hurry.
What to measure
| Metric | Healthy range | What a bad number tells you |
|---|---|---|
| Bounce rate | under 3% | Verification step is missing or the feed is stale |
| Reply rate | 4-12% on tight segments | Filter is too broad or the offer is generic |
| Contact latency | under 48h from createdDate | Your pipeline is running too slowly to hold the edge |
| Complaint rate | under 0.1% | Volume too high, targeting too loose, or copy too aggressive |
Track contact latency as seriously as reply rate. On new-domain data they are causally linked, and latency is the one you control completely.
Frequently asked questions
Can I legally email domain registrants?+
Whois data is public, but outreach is governed by the recipient's jurisdiction — GDPR and ePrivacy in the EU and UK, CAN-SPAM in the US, CASL in Canada. Identify yourself, offer a working opt-out, keep a lawful basis for B2B contact, and use country filtering to exclude jurisdictions your legal team rules out.
How fresh do new-domain leads need to be?+
Contact within 48 hours of registration. Reply rates drop sharply after the first few days because the registrant has usually already bought hosting, design and email from whoever reached them first.
How many leads will a daily whois file give me?+
A raw day contains around 200,000 registrations. After removing proxy records and applying a realistic ICP filter on country, extension and keyword, most teams work with 500 to 5,000 qualified prospects per day.
Which whois fields matter most for outreach?+
registrant_email, registrant_name, registrant_organization, registrant_telephone and registrant_country for contact and segmentation, plus domainName, createdDate and nameServers to time the message and infer what they have not bought yet.
Should I email from my main company domain?+
No. Use a dedicated, warmed sending domain with SPF, DKIM and DMARC configured, and keep daily volume per mailbox conservative so a single bad campaign cannot damage your primary domain's reputation.