whois

Query domain/IP registration records.

KaliParrotLinuxpassive

pkg: whois

whois retrieves registration data for a domain or IP from registry servers: registrar, dates, name servers and (sometimes) contacts.

Syntax

whois {domain|ip}

Example

whois example.com

Returns registrar, creation/expiry dates, name servers and contact info for the domain.

Options & flags

What each switch does. Toggle them in the builder below to assemble a command.

-h <whois.verisign-grs.com>Query a specific WHOIS server.
-HHide legal disclaimers in the output.

Command builder

Tick options (and fill any values) to build a ready-to-copy command.

whois DOMAIN

Usage examples

whois target.tld

Registration details for a domain.

whois 8.8.8.8

Ownership/ASN details for an IP.

Advantages
  • Completely passive — no traffic to the target
  • Reveals ownership, dates and registrar
  • Universally available
Disadvantages
  • Heavy redaction under GDPR
  • Data accuracy varies by registry
  • Rate-limited by some servers
Tags
#osint#dns#registration

Official docs: ICANN Lookup

Related commands

Frequently asked questions

What is whois used for?
whois retrieves registration data for a domain or IP from registry servers: registrar, dates, name servers and (sometimes) contacts.
What is an example whois command?
A common example is: whois example.com — Returns registrar, creation/expiry dates, name servers and contact info for the domain.
Is whois part of Kali Linux?
Yes. whois ships with Kali Linux (and Parrot OS). If missing, install it with: sudo apt install whois.
What category of security tool is whois?
whois is a Information Gathering tool with a passive-risk profile when run against a live target.

Try recon tools live

Run real scans against a domain you control, stage by stage.

Open the lab →