Whois

WHOIS

The WHOIS module retrieves domain registration metadata and contact information.

The module exclusively accepts Domain nodes.

Execution Logic (RDAP vs WHOIS)

By default, the module attempts to query the modern RDAP (Registration Data Access Protocol) endpoint for the target domain. RDAP is the preferred method because it returns highly structured and predictable data.

However, since RDAP is not yet supported by all domain zones (TLDs), the module will automatically fall back to a traditional TCP 43 WHOIS query if the RDAP lookup fails. The module will iteratively query the IANA root server and follow referrals to locate the authoritative WHOIS server.

You can explicitly disable RDAP and force the module to only use traditional WHOIS by adjusting the settings in your Network Configuration.

Extracted Intelligence

The module deeply parses the raw registration records to extract as much intelligence as possible. This includes, but is not limited to:

• Registrar and Registrant
• Persons (e.g., Admin, Tech, and Billing contacts)
• Emails, Phones, and physical Addresses
• Domain Creation, Updated, and Expiration dates
• Name Servers (NS), DNSSEC status, and the authoritative Whois Server
• ...and many other associated entities and metadata fields.