What is WHOIS?

Print anything with Printful



WHOIS is an internet function that allows users to find domain registration information, including contact details and registration dates. The database contains information on domain owners, businesses, and administrators. However, the availability of this information has led to spam and other abuses. The proposed Cross Registry Information Service Protocol aims to address these issues.

WHOIS (who is) is the aptly named Internet function that allows you to query remote databases for domain registration information. By performing a simple search, you can find out when and by whom a domain was registered, contact information and more. A lookup can also reveal the name or network mapped to a numeric IP address. Originally, WHOIS lookups were performed in a command line environment and took the form (unit):>whois domain.com. Searches can still be done from the command line, but the web interface tools now make it convenient to visit a website and simply enter the IP address or domain name.

In the case of a privately owned domain, the WHOIS database contains the full name, address, telephone number and email address of the registered owner of the domain. If the domain is owned by a business, the business name, address, email, and phone number are listed. There are also fields for a domain administrator, a technical administrator and other contacts. The expiry date of the registration period is also indicated.

While the original purpose of the WHOIS database was to provide a directory for domain owners, publicly available information has opened the door for mass spam and other abuses. The terms and conditions of these databases include a provision that disclosed information must not be used for such purposes, but this has proven to be a rather anemic solution. To further discourage data miners, most WHOIS sites have implemented a script with a random graphical display of numbers or letters that the requestor must manually enter into a field. “Bots” or data analysis programs cannot read these graphical displays, disabling the results of automated queries. Beyond precautions like these, there is no real mechanism in place to catch, identify, or punish information abusers.

In 2004, the Internet Engineering Task Force (IETF) proposed a new protocol for handling WHOIS information. The proposed new protocol is called Cross Registry Information Service Protocol (CRISP). The information is currently stored by different schemes and on various servers. The technical aspects of the protocol are outlined in RFC 954.




Protect your devices with Threat Protection by NordVPN


Skip to content