Domain/IP Address Whois Lookup

WHOIS Lookup

What a WHOIS lookup shows

WHOIS is a public query system for domain registration data. A lookup can return the registrar, creation and expiry dates, last-updated date, name servers, domain status codes and, where published, registrant contact details. Many registries now redact personal information for privacy, so a result may show a registrar or a privacy service instead of a name. This page sends a domain to the server, queries WHOIS, and displays the structured fields, raw response and a timeline.

How to run a lookup

Enter a domain name, a URL or an IP address and press the lookup button. If the page is opened with a query parameter or from a site context, it may prefill the host automatically and run a lookup on load. A URL is reduced to its host before the query. Wait for the response; a WHOIS server can take several seconds or time out. Use the paste button if you want to reuse a value from the clipboard.

Domains, URLs and IP addresses

The form is designed for domain names. A URL such as https://example.com/path is normally reduced to example.com. An IP address lookup depends on the server having a WHOIS binary and the relevant registry responding; if that path is unavailable, the query can fail. For a domain, the server tries a system WHOIS client first and falls back to a PHP WHOIS library for common domain types. Results can differ between those paths.

Reading the timeline

The timeline highlights the creation, update and expiry dates when the registry publishes them. These dates are useful for checking domain age, renewal status and recent changes. They are not a guarantee that a domain is safe or legitimate. A recently registered domain can be genuine, and an old domain can be compromised or parked. Use the dates as context, then check the website, certificate and business details separately.

Registrar, status and name servers

The registrar is the company through which the domain is registered. Status codes can indicate client or server transfer locks, hold states, pending deletion or verification requirements. Name servers show where the domain's DNS is hosted, not necessarily where the website is hosted. A privacy service may replace the registrant's contact details. Read the raw response if a field is missing, because the structured parser may not recognise every registry format.

Cache and timeout behaviour

The server caches WHOIS results for about an hour and uses a short timeout. Caching keeps repeated lookups fast and reduces load on the registry, but it means a very recent change may not appear immediately. If a query times out, the page may show an error rather than a partial record. Try again later, or query the registry directly if the result is urgent.

Punycode and internationalised domains

Internationalised domain names can be written in local scripts but are stored in a punycode form that starts with xn--. The current lookup path can reject values containing the double hyphen used by punycode, so an internationalised domain may fail even when the Unicode form looks correct. If you need a reliable result, query the ASCII punycode form with a WHOIS client that supports it, or use the registry's own lookup page.

Privacy and redaction

WHOIS is not a people-search service. Since GDPR and similar privacy rules, many registries redact names, addresses, phone numbers and email addresses. A redacted result is normal, not a failure. Do not try to bypass redaction or use the data for harassment. If you need to contact a domain owner for a legitimate legal reason, use the registrar's published abuse or legal process.

What WHOIS cannot tell you

It does not tell you who visits a website, whether a business is honest, whether a domain is for sale, or whether the content is lawful. It does not reliably show the website owner's identity, and it does not replace a trademark search, a company registry check or a security scan. The raw record can be incomplete, outdated or formatted differently by each registry.

Common problems

If the lookup returns nothing, check the spelling and the top-level domain. Some country-code registries do not publish a standard WHOIS response. If the page times out, retry or use the registry's website. If an IP lookup fails, the server may lack the required client. If a Unicode domain fails, try the punycode form. If the result looks stale, wait for the cache to expire.

Privacy and safe use

The domain you enter is sent to the server and then to a WHOIS service. Do not enter a private URL with credentials, a query string containing a token, or personal data that is not part of the domain. The lookup does not log you in or access the site's admin area. Use the result for research, due diligence or troubleshooting, not for unsolicited marketing.

What not to do

Do not treat a redacted record as evidence of fraud. Do not assume the registrar is the website host. Do not use WHOIS data to send bulk marketing. Do not rely on a single cached record for a legal deadline; check the registry. Do not expect an IP lookup to work everywhere, and do not paste a full URL with sensitive parameters when a domain is enough.

Registry formats differ, so a field that appears on one domain may be absent on another. Treat the structured grid as a convenience and use the raw response when a detail matters.

Frequently Asked Questions