osintverse-community/whois
Looks up WHOIS records for a domain, IP address or AS number, picking the right server automatically
No key · Docker
4 tools. 3 run with ot in a sandbox on Windows, macOS and Linux; 1 with otlite on Linux and macOS, no Docker. Compare them side by side ↓
A WHOIS or RDAP record says which registrar holds a domain, when it was registered and when it expires, which name servers it uses and, for the domains where privacy rules still allow it, who registered it. The dates and the registrar are the useful part for most investigations: they date a site and link domains that were registered together.
Windows, macOS and Linux, with Docker or Podman. Each tool runs in a read-only container that can reach only the sites it declares, and every result comes back in the same JSON shape.
Looks up WHOIS records for a domain, IP address or AS number, picking the right server automatically
Looks up the WHOIS record of a domain, IP address or ASN from the right registry server
Looks up a domain's WHOIS/RDAP, DNS, mail security, TLS, HTTP headers, tech stack and SEO in one JSON report
ot install osintverse-community/whois osintverse-community/likexian-whois osintverse-community/quienInstalls the first 3 in one go; ot auto d:… then runs every installed tool that takes a domain and saves the results. No ot yet? Install it in one line.
Linux and macOS. otlite installs each one with pip or git into its own virtualenv, pinned to a version it has tested: otlite install finalrecon.
| osintverse-community/ | email, organization, other | None | Online, passive | Yes | Docker | No reports yet | fewer than 10 |
| osintverse-community/ | certificate, dns record, ip, organization… | None | Contacts the target | No | Docker | No reports yet | fewer than 10 |
| osintverse-community/ | email, organization, other | None | Online, passive | Yes | Docker | No reports yet | fewer than 10 |
Facts from each tool's manifest and what people report about whether it works. "Reaches" says whether a run stays offline, reads public sources, sends requests about the target, or may notify them.
Every registry tool here runs on your machine in a sandbox, and ot auto d:… runs all the installed ones on one value.
Since the GDPR most registrars hide personal registrant data for generic TLDs, and many country TLDs never published it. Companies are listed more often than people. Redaction is normal, not a sign of anything.
RDAP is the newer protocol, which returns structured data from the registry; WHOIS is the older text format. quien asks both and adds DNS, mail and TLS checks; whois and likexian-whois find the right WHOIS server for each TLD so you don't have to.
No. ot runs each tool on your own machine in a read-only container that can only reach the sites the tool declares, and results stay in your results folder. The registry only counts installs.
Most tools here work without one; the row says "Key required" when one is needed, and ot keys set stores it in your OS keychain so only that tool's container sees it.
SubdomainsEvery known URLLook-alike domainsDNS recordsEmail addressesAll domain tools