Look up a domain's WHOIS record

4 tools. 3 run with ot in a sandbox on Windows, macOS and Linux; 1 with otlite on Linux and macOS, no Docker. Compare them side by side ↓

A WHOIS or RDAP record says which registrar holds a domain, when it was registered and when it expires, which name servers it uses and, for the domains where privacy rules still allow it, who registered it. The dates and the registrar are the useful part for most investigations: they date a site and link domains that were registered together.

With ot, in a sandbox

All domain tools →

Windows, macOS and Linux, with Docker or Podman. Each tool runs in a read-only container that can reach only the sites it declares, and every result comes back in the same JSON shape.

osintverse-community/whois

Looks up WHOIS records for a domain, IP address or AS number, picking the right server automatically

Takes domain → finds email, organization, other
No key · Docker
Verified publisher

osintverse-community/likexian-whois

Looks up the WHOIS record of a domain, IP address or ASN from the right registry server

Takes domain → finds email, organization, other
No key · Docker
Verified publisher

osintverse-community/quien

Looks up a domain's WHOIS/RDAP, DNS, mail security, TLS, HTTP headers, tech stack and SEO in one JSON report

Takes domain → finds certificate, dns record, ip, organization…
No key · Docker
Verified publisher
ot install osintverse-community/whois osintverse-community/likexian-whois osintverse-community/quien

Installs the first 3 in one go; ot auto d:… then runs every installed tool that takes a domain and saves the results. No ot yet? Install it in one line.

Without Docker, with otlite

All otlite tools →

Linux and macOS. otlite installs each one with pip or git into its own virtualenv, pinned to a version it has tested: otlite install finalrecon.

The 3 registry tools side by side

The registry tools on this page, compared. Select a column heading to sort by it.
osintverse-community/likexian-whoisemail, organization, otherNoneOnline, passiveYesDockerNo reports yetfewer than 10
osintverse-community/quiencertificate, dns record, ip, organization…NoneContacts the targetNoDockerNo reports yetfewer than 10
osintverse-community/whoisemail, organization, otherNoneOnline, passiveYesDockerNo reports yetfewer than 10

Facts from each tool's manifest and what people report about whether it works. "Reaches" says whether a run stays offline, reads public sources, sends requests about the target, or may notify them.

How to look up a domain's WHOIS record

  1. Look up the record and note the registrar, creation date and name servers.
  2. Compare them with the other domains in your case: the same registrar, date and name servers often mean the same owner.
  3. If the registrant is redacted, turn to the DNS, mail and TLS records, which never are.

Every registry tool here runs on your machine in a sandbox, and ot auto d:… runs all the installed ones on one value.

Before you run one

Why is the registrant's name redacted?

Since the GDPR most registrars hide personal registrant data for generic TLDs, and many country TLDs never published it. Companies are listed more often than people. Redaction is normal, not a sign of anything.

WHOIS or RDAP?

RDAP is the newer protocol, which returns structured data from the registry; WHOIS is the older text format. quien asks both and adds DNS, mail and TLS checks; whois and likexian-whois find the right WHOIS server for each TLD so you don't have to.

Do these tools send my search anywhere?

No. ot runs each tool on your own machine in a read-only container that can only reach the sites the tool declares, and results stay in your results folder. The registry only counts installs.

Do I need an API key?

Most tools here work without one; the row says "Key required" when one is needed, and ot keys set stores it in your OS keychain so only that tool's container sees it.

More from a domain

SubdomainsEvery known URLLook-alike domainsDNS recordsEmail addressesAll domain tools

Esc

Try

↑ ↓ to move↵ to open