WHOIS Lookup
Registrar, creation and expiry dates, name servers, status and DNSSEC for a domain, or the network owner of an IP.
WHOIS a domain or IP
Queried over the WHOIS protocol (port 43) with IANA and registrar referrals followed live.
What the WHOIS Lookup does
WHOIS Lookup talks to the registries directly over the WHOIS protocol on port 43, the same way the command-line whois client does. For a domain it first asks IANA which server is responsible for the top-level domain, queries that registry, and when the answer names a registrar WHOIS server it follows the referral once so you also get the registrar's fuller record. For an IP address it starts at ARIN and follows the referral to RIPE, APNIC, LACNIC or AFRINIC when the address belongs to another region.
The raw text of every answer is shown in full, because registries format their records differently and the details often matter. Above it, the fields that could be read reliably are laid out: registrar, creation, update and expiry dates (with the days left), name servers, EPP status codes and whether DNSSEC is signed. For an address you get the network range, CIDR, owner organisation, country and abuse contact.
Most registries have hidden personal registrant data since 2018, so expect "REDACTED FOR PRIVACY" or a privacy service in the contact fields. The dates, name servers and status codes are still public and are what you usually need.
Step by step
- 01Enter a domain such as example.com, or a public IPv4 or IPv6 address.
- 02Press Look up. The tool resolves the right WHOIS server and queries it live; this takes a few seconds.
- 03Read the parsed fields first: expiry and days left, registrar, name servers and status codes.
- 04Scroll to the raw record for anything the summary does not show, such as the registrant's country or a reseller.
Common questions
Each registry writes its records in its own layout, and ccTLD registries such as .de, .fr or .pk omit fields that .com shows. The tool reads the labels it knows; whatever it cannot map stays in the raw text below, so check there before concluding a value is missing.
They are EPP status codes set by the registrar or registry. clientTransferProhibited means the domain is locked against transfers, which is good. clientHold or serverHold means the domain has been taken out of DNS and will not resolve. pendingDelete means it is about to be released. ICANN publishes a full list.
WHOIS servers throttle by IP address, and a few registrar servers refuse automated clients altogether. The tool shows the registry answer when the registrar referral fails, and you can retry a minute later. For some ccTLDs the only option is the registry's own web form.
It is the date the registration lapses if not renewed, as recorded by the registry. Registrars usually renew automatically before it and many offer a grace period after it, so a domain is not available the next day. For a domain you want to buy, watch for pendingDelete status instead.
No. Addresses in private ranges (10.x, 172.16-31.x, 192.168.x), loopback and other reserved blocks are refused because no registry allocates them to anyone; the lookup would be meaningless.
Keep checking
DNS Lookup
Look up the A, AAAA, CNAME, MX, NS, TXT, SOA, SRV and CAA records of any domain with their TTLs in one query.
Free toolDomain to IP
Find the IPv4 and IPv6 addresses behind a domain, the reverse DNS name of each and a hint at the hosting provider.
Free toolReverse DNS Lookup
Find the PTR host name of an IPv4 or IPv6 address and check that it resolves back to the same address.
Free toolSSL Certificate Checker
Check a site's TLS certificate: issuer, expiry and days left, SANs, chain, protocol and whether the host name matches.
Free toolSubdomain Finder
List the subdomains of a domain found in certificate transparency logs, deduplicated, with the first 25 resolved to IPs.
Want these fixes done for you?
Our team runs the audit, makes the changes and reports the result.