← Back to Tools

🔎 WHOIS Lookup

Query domain registration data — registrar, creation date, expiry, and name servers. Newly registered domains (< 30 days) are flagged as a phishing risk.

📚 Why WHOIS matters for security

WHOIS is a public database of domain registration records. When you register a domain, your registrar submits basic info (registrar name, creation date, expiry, name servers) to the registry.

Newly registered domains are a major phishing red flag. Attackers spin up disposable domains for campaigns and abandon them quickly — a domain less than 30 days old demanding your credentials should always raise suspicion.

Privacy/WHOIS redaction: Since GDPR, most registrars redact personal details (name, address, phone) and replace them with proxy services. This is normal for legitimate owners protecting their privacy.

How to use this tool

  1. 1 Type a domain name or IP address into the field.
  2. 2 Click Look Up.
  3. 3 Read the registration details including registrar, creation date, expiry date, and name servers.
  4. 4 Use the contact information to report abuse or verify domain ownership.

Frequently asked questions

What is WHOIS?
WHOIS is a public database that stores registration information for domain names and IP address blocks. It lets you see who owns a domain and when it expires.
Why is the owner's contact information hidden?
Many registrars offer WHOIS privacy protection that replaces personal contact details with proxy information to reduce spam.
Can I use WHOIS to find out if a domain is available?
Yes. If no record is found, the domain is likely unregistered. However, always confirm through a registrar's search before relying on it.
How do I report a phishing domain?
Use the registrar contact listed in WHOIS to file an abuse report. You can also report to anti-phishing organizations like APWG or Google Safe Browsing.

You might also like