Toolshed

A growing library of browser tools and deep technical guides for IT professionals.

← All guides

WHOIS Lookup

Looks up a domain's registration record by speaking the real WHOIS protocol (RFC 3912, plain text over TCP port 43) — first to IANA to find the authoritative registry for the domain's TLD, then to that registry (and, for many gTLDs, one more hop to the actual registrar's own WHOIS server) — the same referral chain a command-line whois client follows. Browsers have no API for raw TCP sockets, so this runs server-side. Requires a live network request. Nothing you look up is logged or stored. Domain names only — IP address WHOIS (regional internet registries) isn't supported here; see the IOC Lookup tool for IP reputation/ownership data instead.

A note on scope

Field extraction (registrar, dates, status, nameservers) is best-effort, plain-English labeling of a handful of common field names — WHOIS output format is not standardized across the roughly 1,500 TLD registries in existence, so some fields will come back empty even when the information is present in the raw response under a field name this tool doesn't recognize. The full raw response from every server queried is always shown below for exactly this reason — treat the parsed fields as a convenience, the raw text as the source of truth. Since GDPR took effect, most registrars redact registrant personal contact details by default (shown as a banner here when detected) — that's normal, expected behavior for a huge share of domains now, not a sign of anything unusual. Many registrars also no longer run a public port-43 WHOIS server at all post-2018 (RDAP or a web-only lookup is all they offer) — when the referral chain below stops at the registry level, that's why; the registry-level record for most gTLDs never included registrant contact details even before GDPR, so an empty registrant field there isn't evidence of redaction, just of never having had that data in the first place. Expired or about-to-expire domains often show a "pendingDelete"/"redemptionPeriod" status rather than disappearing outright — see the status codes in the raw response.