FernTool

WHOIS lookup

Look up the WHOIS record of any domain name, IP address or ASN: registrar, registration and expiry dates, status, name servers and network owner. Results come live from the official RDAP servers of each registry.


What a WHOIS lookup tells you

Every domain name and every block of IP addresses on the internet is registered to someone, and the registry keeps a public record of that registration. A WHOIS lookup reads that record. For a domain you get the registrar it was bought through, the date it was first registered, when the current registration expires, when it last changed, its status codes and the name servers that answer DNS for it. For an IP address you get the network block it belongs to, the organisation it is allocated to, the regional registry that manages it and an abuse contact for reporting spam or attacks. For an ASN (autonomous system number such as AS13335) you get the network operator behind it.

How FernTool looks it up: RDAP

The original WHOIS protocol dates from the 1980s: plain text over port 43, a different format at every registry and no reliable way to know which server to ask. Its replacement, RDAP (Registration Data Access Protocol, RFC 9082/9083), returns structured JSON over HTTPS. ICANN made RDAP the authoritative source for generic top-level domains like .com, .net and .org, and all five regional internet registries serve RDAP for IP addresses and ASNs. FernTool uses the RDAP bootstrap registry to find the right server for your query, fetches the record and turns it into a short, readable summary. The raw JSON is always one click away.

Reading the domain status codes

Why owner details are usually hidden

Before 2018 a WHOIS record often listed the owner’s name, email, phone and postal address. Privacy law, in particular the EU’s GDPR, ended that for most domains: registrars now redact personal data, or replace it with a privacy service. Organisations sometimes still publish their company name. If you need to reach a domain owner, use the registrar’s contact or abuse address shown in the result. For IP addresses the network owner is normally a company (an ISP, cloud provider or hosting company), so the organisation name is still shown.

Common uses

Frequently asked questions

What is a WHOIS lookup?

A WHOIS lookup shows the public registration record for a domain name, IP address block or autonomous system: who the registrar or network owner is, when it was registered and when it expires, plus its name servers and abuse contact.

What is RDAP and how is it different from WHOIS?

RDAP (Registration Data Access Protocol) is the modern replacement for the old WHOIS text protocol. It returns structured JSON over HTTPS, supports internationalised names and is now the official source for gTLD registration data. FernTool queries RDAP and shows the result in a readable WHOIS-style format.

Why is the domain owner’s name hidden?

Since GDPR (2018), registrars redact personal details of individual registrants. You usually see the registrar, dates, status and name servers, but not the owner’s name, email or address. To contact an owner, use the registrar’s contact form or abuse address.

How do I find out when a domain expires?

Enter the domain above. The “Expires” field is the date the current registration period ends. Most domains auto-renew, and after expiry there is normally a grace and redemption period of up to about 75 days before the name is released.

Can I look up who owns an IP address?

Yes. Enter an IPv4 or IPv6 address and FernTool asks the regional internet registry (ARIN, RIPE NCC, APNIC, LACNIC or AFRINIC) responsible for it. You’ll see the network name, address range, owning organisation and abuse contact.

More network tools

API: GET /api/whois/{domain|ip|asn} · MCP tool whois_lookup. Data from each registry’s RDAP service, found via the IANA RDAP bootstrap (fallback: rdap.org).