WHOIS domain lookup. Part of the DevTools Surf developer suite. Browse more tools in the Networking collection.
Use Cases
Identify the owner and registrar of a domain before a business negotiation or acquisition.
Verify domain registration age and expiry to assess a domain's legitimacy.
Find abuse contacts for a domain sending spam or hosting phishing pages.
Check nameservers to identify the CDN or hosting provider used by a competitor or target domain.
Tips
Check WHOIS for domain creation date — domain registered within the past 6 months is a red flag for phishing or spam domains, which are frequently cycled.
RDAP (Registration Data Access Protocol), which replaced WHOIS in 2016 for most TLDs, returns structured JSON — useful for programmatic domain intelligence.
Privacy protection (WHOIS guard) masks registrant details but the registrar and nameservers are still visible — nameserver patterns often reveal the hosting provider or CDN.
Fun Facts
WHOIS (not an acronym — pronounced 'who is') was created by Elizabeth Feinler and the Network Information Center (NIC) team at Stanford Research Institute in the late 1970s as a simple text lookup protocol.
The GDPR (2018) dramatically changed WHOIS availability — registrars in the EU began redacting personal information from public WHOIS records, making domain owner identification significantly harder for all registrars worldwide.
ICANN's RDAP (Registration Data Access Protocol) was mandated to replace WHOIS for all ICANN-accredited registrars by August 2023, offering structured data, HTTPS authentication, and access tiering — features that WHOIS's 1980s-era design could not support.
FAQ
Why is WHOIS showing privacy-protected information?
Domain privacy services replace registrant contact info with the service's contact details. This is legal and widely available from all major registrars. Law enforcement can request unmasked data through the registrar via formal legal process.
Can I find out who owns a privacy-protected domain?
Not through public WHOIS. Options include: contacting the registrar's abuse team if the domain is involved in illegal activity, using trademark/legal channels through ICANN's UDRP process, or social engineering (less reliable).
