network_whois
Query authoritative WHOIS servers for domain or IP registration records. Retrieve registrar, creation/expiry dates, name servers, and ownership details.
Instructions
Whois Lookup. Outbound WHOIS lookup: queries an authoritative WHOIS server (TCP port 43, or a registered remote worker when one is healthy) for the registration or allocation record of a domain name or public IP address. Returns registrar, creation/expiry dates, name servers, domain status, the full raw WHOIS text, and a parsed key/value map. Use this for ownership, registrar, and registration-record data. Prefer osint_domain_age when you only need the registration/expiry dates and computed age; prefer network_dns for live A/MX/NS/TXT records; prefer network_reverse_dns for IP-to-hostname (PTR); prefer network_asn_lookup for autonomous-system / network-owner data. Makes a live external network call and depends on third-party WHOIS servers, so results are not cached and not idempotent; it is non-destructive and read-only with respect to this service. Rate limited (anonymous 2/min, 10/hour, 30/day; authenticated 5/50/200) with a CAPTCHA challenge after 5 requests/hour.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| host | Yes | Domain name or public IP address to look up, for example youtube.com or 8.8.8.8. Private, reserved, and loopback hosts are rejected; the value is validated and capped at 255 bytes. | |
| worker_id | No | Optional registered healthy worker peer ID. Omit to use the default master-server behavior. |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| host | No | The domain name or IP address that was queried. | |
| server | No | WHOIS server that answered the query, for example whois.verisign-grs.com or whois.arin.net. | |
| raw_output | No | Full unparsed WHOIS response text exactly as returned by the upstream server. | |
| parsed | No | Lowercased key/value map of every parsed WHOIS field, plus a common_fields sub-object normalizing domain_name, registrar, creation_date, expiration_date, name_servers, and status. | |
| timestamp | No | ISO 8601 timestamp of when the lookup completed. |