What does Whois actually tell me?

For a domain: which registrar it was bought through, when it was created and when it expires, the authoritative nameservers, and sometimes the registrant contact (often redacted under GDPR). For an IP: which org or ISP owns the IP block (CIDR range), abuse contact, and the regional registry it belongs to (RIPE, ARIN, APNIC, LACNIC, AFRINIC).

The contact info shows 'REDACTED FOR PRIVACY'. Is the lookup broken?

Not broken. GDPR and ICANN policy force registrars to hide personal info for private registrants. Org-owned, government, and a few TLDs without GDPR coverage still show contact fields. The registrar provides a privacy-proxy email if you need to reach the owner.

How do I tell when a domain expires?

Look for the field named 'Registry Expiry Date' or 'Expiration Date'. Note: most TLDs have a 30 to 75 day grace period after expiry, then a redemption period before the name actually goes back into the pool, so an expired domain is usually not buyable for one to three months.

I queried an IP and got a range, not a single record. Why?

IP Whois returns the registered netblock (a CIDR range like 1.0.0.0/24) that contains the IP, because the block owner manages all IPs in that range as one unit. For city, country, and ASN context on a specific IP follow up with IP Geolocation.

Why do different TLDs show different fields?

Each TLD's registry runs its own Whois server with its own schema (`.de` exposes different fields than `.com`, `.io`, or `.ru`). The query follows the IANA referral chain to the most authoritative server, so the schema is the one the registry itself maintains. Registries that switched off Whois, such as `.guru` and `.ninja`, are looked up over RDAP instead, which gives a shorter summary: registrar, status, dates, nameservers and DNSSEC.

Free, no signup, rate-limited per IP.

Network

Whois Lookup

Domain and IP information

Input

Retrieve public ownership data for any domain or IP. View registrar details, creation dates, and administrative contacts. TLDs whose registry no longer offers WHOIS are looked up over RDAP.

Terminal

Console ready. Execute a command to see output...

About Whois Lookup

Unmask the Domain

The WHOIS system is the public ledger of the internet. It answers the question: "Who owns this digital real estate?"

What's in the record?

Registrar Info: Tells you if a domain was bought at GoDaddy, Namecheap, or Google.
Dates:
- Creation Date: Essential for trust. A domain created yesterday is 100x more likely to be a scam than one created 10 years ago.
- Expiry Date: If a major site expires tomorrow, someone forgot to pay the bill!
Name Servers: Reveals the hosting infrastructure (e.g., ns1.cloudflare.com implies Cloudflare protection).

Privacy Protection

You might see "Data Redacted" or "Privacy Guardian". This is GDPR in action. Modern registrars proxy the contact info to protect owners from spam.

How to use Whois Lookup

Enter the query
Domain (example.com) or IP (IPv4 or IPv6). No protocol prefix on domains.
Run the lookup
Hit Lookup. The query follows the IANA referral chain to the authoritative registry, so the result is live, not cached. A TLD without Whois falls back to RDAP.
Read the structure
Field on the left, value on the right. Domains show registrar, creation, expiry, nameservers, status flags. IPs show netblock, owner org, abuse contact, and regional registry (RIPE, ARIN, etc.).
Cross-check
Use the nameservers line to confirm hosting (NS pointing to cloudflare.com means the domain is behind Cloudflare). For deeper DNS analysis combine with NS Lookup or DNS Lookup.

Frequently Asked Questions

: For a domain: which registrar it was bought through, when it was created and when it expires, the authoritative nameservers, and sometimes the registrant contact (often redacted under GDPR). For an IP: which org or ISP owns the IP block (CIDR range), abuse contact, and the regional registry it belongs to (RIPE, ARIN, APNIC, LACNIC, AFRINIC).
: Not broken. GDPR and ICANN policy force registrars to hide personal info for private registrants. Org-owned, government, and a few TLDs without GDPR coverage still show contact fields. The registrar provides a privacy-proxy email if you need to reach the owner.
: Look for the field named 'Registry Expiry Date' or 'Expiration Date'. Note: most TLDs have a 30 to 75 day grace period after expiry, then a redemption period before the name actually goes back into the pool, so an expired domain is usually not buyable for one to three months.
: IP Whois returns the registered netblock (a CIDR range like 1.0.0.0/24) that contains the IP, because the block owner manages all IPs in that range as one unit. For city, country, and ASN context on a specific IP follow up with IP Geolocation.
: Each TLD's registry runs its own Whois server with its own schema (.de exposes different fields than .com, .io, or .ru). The query follows the IANA referral chain to the most authoritative server, so the schema is the one the registry itself maintains. Registries that switched off Whois, such as .guru and .ninja, are looked up over RDAP instead, which gives a shorter summary: registrar, status, dates, nameservers and DNSSEC.
: Free, no signup, rate-limited per IP.