WHOIS

Kaspersky Threat Intelligence Portal provides WHOIS information about the host of the requested web address.

A host may be specified by a fully qualified domain name (FQDN) or by an IP address in dot-decimal notation.

Kaspersky Threat Intelligence Portal does not process web addresses if the host is specified by a local, private, or service IP address. In this case, the lookup results should be interpreted with caution.

Host specified by FQDN

WHOIS section for FQDN as a host

Field name

Description

Domain name

Name of the domain for the analyzed web address.

Domain status

Status of the domain for the analyzed web address.

Created

Date when the domain for the analyzed web address was registered.

Updated

Date when the registration information about the domain for the analyzed web address was last updated.

Paid until

Expiration date of the prepaid domain registration term.

Registrar info

Name of the domain registrar for the analyzed web address.

IANA ID

IANA ID of the domain registrar.

Name servers

List of domain name servers for the analyzed web address.

Host specified by IP address

WHOIS section for IP address as a host

Field name

Description

IP range

Range of IP addresses in the network that the host belongs to. Also, the flag of the country that the IP address belongs to is displayed. When you hover your mouse over the flag, a tooltip with the country name appears.

Net name

Name of the network that the IP address belongs to.

Net description

Description of the network that the IP address belongs to.

Created

Date when the IP address was registered.

Changed

Date when information about the IP address was last updated.

AS description

Autonomous system description.

ASN

Autonomous system number according to RFC 1771 and RFC 4893.

Page top