====== WHOIS ====== **WHOIS** is a query service used to obtain registration information about Internet resources such as: * Domain names * IP address blocks * Autonomous System Numbers (ASNs) WHOIS helps identify who is responsible for a domain or network resource and provides administrative information about its registration. ----- ===== What Can WHOIS Show? ===== A WHOIS lookup may include information such as: * Domain name * Registrar * Registration date * Expiration date * Last update date * Domain status * Name servers * Registrant information (when public) The exact information depends on the registry and privacy settings. ----- ===== Example ===== A WHOIS lookup for: example.com might return: Registrar: Example Registrar Inc. Created: 1995-08-14 Expires: 2027-08-13 Nameservers: ns1.example.com ns2.example.com ----- ===== Domain Registrar ===== A **registrar** is the company through which a domain name is registered. Examples include: * GoDaddy * Namecheap * Tucows * Gandi The registrar is responsible for managing the domain registration. ----- ===== Name Servers ===== WHOIS usually lists the authoritative name servers. Example: ns1.example.com ns2.example.com These servers host the domain's DNS records. ----- ===== Registration Dates ===== WHOIS commonly reports three important dates. ===== Creation Date ===== When the domain was first registered. ----- ===== Expiration Date ===== When the current registration period ends. ----- ===== Updated Date ===== The last time registration information was modified. ----- ===== Domain Status ===== WHOIS may report one or more status values. Examples: * clientTransferProhibited * clientDeleteProhibited * clientUpdateProhibited These statuses help protect domains from unauthorized changes. ----- ===== Privacy Protection ===== Many domain owners enable **WHOIS Privacy**. Instead of showing personal information, WHOIS displays the contact details of a privacy service. Example: Registrant: REDACTED FOR PRIVACY This helps reduce spam and protect personal information. ----- ===== WHOIS for IP Addresses ===== WHOIS can also be used for IP addresses. Example: 8.8.8.8 may return: * Organization * Regional Internet Registry (RIR) * Country * Network range * ASN This information identifies the organization responsible for the IP address. ----- ===== Regional Internet Registries ===== IP address registrations are managed by Regional Internet Registries (RIRs). These include: * ARIN (North America) * RIPE NCC (Europe, Middle East, and parts of Central Asia) * APNIC (Asia-Pacific) * AFRINIC (Africa) * LACNIC (Latin America and Caribbean) ----- ===== WHOIS vs DNS ===== WHOIS and DNS provide different types of information. ^ WHOIS ^ DNS ^ | Registration information | Technical records | | Registrar | A, AAAA, MX, TXT, etc. | | Creation date | IP addresses | | Expiration date | Mail servers | | Domain status | Name servers | WHOIS tells you **who registered the domain**, while DNS tells you **how the domain works**. ----- ===== WHOIS and Telenegar ===== The **Telenegar WHOIS Lookup** service can display information such as: * Registrar * Registration dates * Domain status * Name servers * WHOIS server * Registrant information (when available) This information is useful for: * Domain investigations * Security analysis * Troubleshooting * Domain management ----- ===== Common Misconceptions ===== * **WHOIS shows the current website owner.** * Not always. Many domains use privacy protection or organizational registrations. * **WHOIS and DNS contain the same information.** * False. They serve different purposes. * **Every domain reveals personal information.** * False. Many registrations are protected by privacy services or registry policies. ----- ===== Related Topics ===== * [[networking:dns:dns|DNS Explained]] * [[networking:dns:authoritative-server|Authoritative DNS Server]] * [[networking:dns:reverse-dns|Reverse DNS]] * [[tools:dnscheck|DNS Check]] * [[tools:whois|WHOIS Lookup]] ----- {{tag>whois domains registrar dns diagnostics}}