====== WHOIS ======
**WHOIS** is a query service used to obtain registration information about Internet resources such as:
* Domain names
* IP address blocks
* Autonomous System Numbers (ASNs)
WHOIS helps identify who is responsible for a domain or network resource and provides administrative information about its registration.
-----
===== What Can WHOIS Show? =====
A WHOIS lookup may include information such as:
* Domain name
* Registrar
* Registration date
* Expiration date
* Last update date
* Domain status
* Name servers
* Registrant information (when public)
The exact information depends on the registry and privacy settings.
-----
===== Example =====
A WHOIS lookup for:
example.com
might return:
Registrar:
Example Registrar Inc.
Created:
1995-08-14
Expires:
2027-08-13
Nameservers:
ns1.example.com
ns2.example.com
-----
===== Domain Registrar =====
A **registrar** is the company through which a domain name is registered.
Examples include:
* GoDaddy
* Namecheap
* Tucows
* Gandi
The registrar is responsible for managing the domain registration.
-----
===== Name Servers =====
WHOIS usually lists the authoritative name servers.
Example:
ns1.example.com
ns2.example.com
These servers host the domain's DNS records.
-----
===== Registration Dates =====
WHOIS commonly reports three important dates.
===== Creation Date =====
When the domain was first registered.
-----
===== Expiration Date =====
When the current registration period ends.
-----
===== Updated Date =====
The last time registration information was modified.
-----
===== Domain Status =====
WHOIS may report one or more status values.
Examples:
* clientTransferProhibited
* clientDeleteProhibited
* clientUpdateProhibited
These statuses help protect domains from unauthorized changes.
-----
===== Privacy Protection =====
Many domain owners enable **WHOIS Privacy**.
Instead of showing personal information, WHOIS displays the contact details of a privacy service.
Example:
Registrant:
REDACTED FOR PRIVACY
This helps reduce spam and protect personal information.
-----
===== WHOIS for IP Addresses =====
WHOIS can also be used for IP addresses.
Example:
8.8.8.8
may return:
* Organization
* Regional Internet Registry (RIR)
* Country
* Network range
* ASN
This information identifies the organization responsible for the IP address.
-----
===== Regional Internet Registries =====
IP address registrations are managed by Regional Internet Registries (RIRs).
These include:
* ARIN (North America)
* RIPE NCC (Europe, Middle East, and parts of Central Asia)
* APNIC (Asia-Pacific)
* AFRINIC (Africa)
* LACNIC (Latin America and Caribbean)
-----
===== WHOIS vs DNS =====
WHOIS and DNS provide different types of information.
^ WHOIS ^ DNS ^
| Registration information | Technical records |
| Registrar | A, AAAA, MX, TXT, etc. |
| Creation date | IP addresses |
| Expiration date | Mail servers |
| Domain status | Name servers |
WHOIS tells you **who registered the domain**, while DNS tells you **how the domain works**.
-----
===== WHOIS and Telenegar =====
The **Telenegar WHOIS Lookup** service can display information such as:
* Registrar
* Registration dates
* Domain status
* Name servers
* WHOIS server
* Registrant information (when available)
This information is useful for:
* Domain investigations
* Security analysis
* Troubleshooting
* Domain management
-----
===== Common Misconceptions =====
* **WHOIS shows the current website owner.**
* Not always. Many domains use privacy protection or organizational registrations.
* **WHOIS and DNS contain the same information.**
* False. They serve different purposes.
* **Every domain reveals personal information.**
* False. Many registrations are protected by privacy services or registry policies.
-----
===== Related Topics =====
* [[networking:dns:dns|DNS Explained]]
* [[networking:dns:authoritative-server|Authoritative DNS Server]]
* [[networking:dns:reverse-dns|Reverse DNS]]
* [[tools:dnscheck|DNS Check]]
* [[tools:whois|WHOIS Lookup]]
-----
{{tag>whois domains registrar dns diagnostics}}