What does Whois actually tell me?

For a domain: which registrar it was bought through, when it was created and when it expires, the authoritative nameservers, and sometimes the registrant contact (often redacted under GDPR). For an IP: which org or ISP owns the IP block (CIDR range), abuse contact, and the regional registry it belongs to (RIPE, ARIN, APNIC, LACNIC, AFRINIC).

The contact info shows 'REDACTED FOR PRIVACY'. Is the lookup broken?

Not broken. GDPR and ICANN policy force registrars to hide personal info for private registrants. Org-owned, government, and a few TLDs without GDPR coverage still show contact fields. The registrar provides a privacy-proxy email if you need to reach the owner.

How do I tell when a domain expires?

Look for the field named 'Registry Expiry Date' or 'Expiration Date'. Note: most TLDs have a 30 to 75 day grace period after expiry, then a redemption period before the name actually goes back into the pool, so an expired domain is usually not buyable for one to three months.

I queried an IP and got a range, not a single record. Why?

IP Whois returns the registered netblock (a CIDR range like 1.0.0.0/24) that contains the IP, because the block owner manages all IPs in that range as one unit. For city, country, and ASN context on a specific IP follow up with IP Geolocation.

Why do different TLDs show different fields?

Each TLD's registry runs its own Whois server with its own schema (`.de` exposes different fields than `.com`, `.io`, or `.ru`). We follow the IANA referral chain to the most authoritative server for the query, so you get the schema the registry itself maintains.

Free, no signup, rate-limited per IP.

Network

Whois

Domain and IP information

Input

Retrieve public ownership data for any domain or IP. View registrar details, creation dates, and administrative contacts.

Terminal

Console ready. Execute a command to see output...

About Whois

Unmask the Domain

The WHOIS system is the public ledger of the internet. It answers the question: "Who owns this digital real estate?"

What's in the record?

Registrar Info: Tells you if a domain was bought at GoDaddy, Namecheap, or Google.
Dates:
- Creation Date: Essential for trust. A domain created yesterday is 100x more likely to be a scam than one created 10 years ago.
- Expiry Date: If a major site expires tomorrow, someone forgot to pay the bill!
Name Servers: Reveals the hosting infrastructure (e.g., ns1.cloudflare.com implies Cloudflare protection).

Privacy Protection

You might see "Data Redacted" or "Privacy Guardian". This is GDPR in action. Modern registrars proxy the contact info to protect owners from spam.

How to use Whois

Enter the query
Domain (example.com) or IP (IPv4 or IPv6). No protocol prefix on domains.
Run the lookup
Hit Lookup. We follow the IANA referral chain to the authoritative registry, so the result is live, not cached.
Read the structure
Field on the left, value on the right. Domains show registrar, creation, expiry, nameservers, status flags. IPs show netblock, owner org, abuse contact, and regional registry (RIPE, ARIN, etc.).
Cross-check
Use the nameservers line to confirm hosting (NS pointing to cloudflare.com means the domain is behind Cloudflare). For deeper DNS analysis combine with NS Lookup or DNS Lookup.

Frequently Asked Questions

: For a domain: which registrar it was bought through, when it was created and when it expires, the authoritative nameservers, and sometimes the registrant contact (often redacted under GDPR). For an IP: which org or ISP owns the IP block (CIDR range), abuse contact, and the regional registry it belongs to (RIPE, ARIN, APNIC, LACNIC, AFRINIC).