Skip to main content

Educational Guide

What is the WHOIS Database?

Demystifying domain registration data. Learn how the WHOIS protocol operates, who controls the records, and how organizations use bulk WHOIS databases for business intelligence.

Introduction

A decentralized directory of the internet

WHOIS is a query and response protocol used to lookup databases that store the registered users or assignees of Internet resources, such as domain names, IP address blocks, or autonomous systems.

Every time an individual or corporation registers a domain name (like `google.com`), they are legally required by ICANN (Internet Corporation for Assigned Names and Numbers) to provide accurate contact information. This includes name, phone number, email address, and physical mailing address. These details are stored in WHOIS databases maintained by accredited registrars and registries.

Historically queryable over Port 43 in plain-text, WHOIS is transitioning to a modern, structured JSON format under the **RDAP (Registration Data Access Protocol)** specification, which handles rate-limits and internationalization.

Registrant Identity

Provides the legal name and company organization owning the domain.

Lifecycle Dates

Tracks when the domain was created, updated, and when it expires.

Nameserver Paths

Identifies where the domain is hosted and where mail is routed.

Privacy Shields

Masks records with proxies to prevent email harvesting and spam.

How does the WHOIS database protocol work?

The WHOIS protocol functions as a basic query-and-response TCP transaction. When an application requests domain ownership details, it sends a plain-text domain string to the target registry server on Port 43. The server then responds with raw, unstructured text detailing registration timestamps and contact coordinates.

Is downloading a WHOIS database legal?

Yes, compiling and downloading public WHOIS databases is legal. Domain registry zone files and registration records are public records mandated by ICANN to maintain internet transparency. GetWhoisData ensures complete compliance by removing proxy records and adhering to regional GDPR/CAN-SPAM standards.

WHOIS vs. RDAP: What is the difference?

The internet registry is transitioning from the legacy WHOIS protocol to the modern Registration Data Access Protocol (RDAP) to improve security, structured parsing, and rate limiting.

Feature ParameterLegacy WHOIS ProtocolModern RDAP Specification
Data Response FormatRaw, unstructured text blockNormalized JSON Object
Standard Port ProtocolPort 43 TCP linkHTTPS RESTful APIs
Rate Limits HandlingAggressive IP banningStandard HTTP 429 response codes

FAQ

Frequently asked questions about WHOIS data

Where does WHOIS database data come from?+

WHOIS records are collected by ICANN-accredited registrars when a buyer purchases a domain name. These records are pushed to central registry zone files, which we parse and clean daily.

How often is the WHOIS registry updated?+

Top-level registries update their zone configurations multiple times a day. Our daily bulk database files are synced and compiled every 24 hours to capture these changes.

Need WHOIS Database Files for Your Project?

GetWhoisData compiles and updates bulk WHOIS databases daily, offering fully parsed, proxy-removed datasets for all generic TLDs and country codes. Skip complex data crawling pipelines and download ready-to-use CSV files directly.

Start downloading the whois database today

Subscribe and your FTP credentials are delivered instantly. Daily files, unlimited downloads, no long-term contract.