1. Choose the resource
Enter a domain such as example.com, a public IP such as 8.8.8.8, or an ASN such as AS15169. Do not include a URL path.
IP Protocol Tools
WHOIS and RDAP Lookup
Find public registration details for a domain, IP address, or ASN, then learn what each field means and which source to check next.
Registration dataReview public registry handle, status, events, and notices.
Entity rolesSee registrar, registrant, admin, technical, or abuse roles when published.
Domain and IP readyLookup domains, public IP addresses, and ASNs from one tool.
Working tool
Whois Lookup
Enter a domain, public IP address, or ASN. The result can include registry identifiers, status codes, important dates, nameservers, network ranges, and public organization roles.
Ready. Example input: example.com
What does a WHOIS lookup tell you?
A WHOIS or RDAP lookup shows public registration data for an Internet resource. For a domain, it may show the registrar, nameservers, status codes, and registration events. For an IP range or ASN, it can show the regional registry, allocated range, network handle, country, and public organization roles. It does not prove who currently controls a website or identify every person behind an address.
How to use the WHOIS lookup
2. Run the lookup
Select Lookup Whois. The tool chooses the appropriate RDAP registry and displays the public fields returned by that source.
3. Read the context
Match the lookup type with the fields you need. Domain nameservers, IP allocation ranges, and ASN records answer different questions.
Understand the registration record
RDAP is the structured successor to traditional text WHOIS. A record describes registration and allocation data, not live application health. Use it to establish ownership context, then confirm operational details with DNS, TLS, routing, or service checks.
Domain result
Use the registrar and status fields to understand where the domain is managed. Nameservers show delegated DNS service; they do not show the web-hosting server by themselves.
IP result
The start and end addresses describe the registered allocation. The listed organization may be an ISP or cloud provider rather than the individual customer using the address.
ASN result
The record identifies the registered autonomous system and related entities. Use an ASN lookup or BGP source to connect that registration to an originated route prefix.
WHOIS lookup examples
| Input | Lookup type | Typical output |
|---|---|---|
| example.com | Domain | Domain handle, registrar-related data, nameservers, statuses, and events. |
| 8.8.8.8 | IP address | Network handle, start/end address, IP version, country, and registry notices. |
| AS15169 | Autonomous system | ASN registration handle, name, status, events, and public entity roles. |
Why a WHOIS lookup may look incomplete
Private address
Private and reserved IP addresses do not have public registry ownership records, so the tool blocks them.
Record hidden
Some registries redact personal contact data or return limited fields because of privacy policy and local regulation.
Registry unavailable
RDAP depends on upstream registry servers. A timeout or HTTP error usually means the registry service did not answer.
When this lookup is useful
- Check the registrar, status, and nameserver delegation before a domain transfer or DNS change.
- Identify the registered network allocation behind an address found in firewall, proxy, mail, VPN, or SIEM logs.
- Find the correct public organization or abuse role before reporting suspicious traffic.
- Compare registration events when investigating an unexpected expiry, transfer, or ownership change.
- Use the result as background evidence before running DNS, certificate, ASN, ping, or port checks.
Whois Lookup: FAQ
Is RDAP different from WHOIS?
RDAP is the modern structured protocol for registration data. It is easier for tools to parse than classic text WHOIS.
Why are contacts missing?
Many registries redact personal names, phone numbers, and emails. Organization roles may still appear when public.
Can I trust the dates?
Use them as registry-reported events. For high-risk changes, confirm with the registrar, registry, or authoritative account portal.