WHOIS Domain Analyzer

Deconstruct raw registration records, audit registrar timelines, and inspect nameservers client-side

1. Paste Raw WHOIS Record Text

Domain Audit Dashboard

Lifespan Age10625 DaysSince registration date
Remaining Age 697 Days Until expiration threshold
Domain Namegoogle.com
Sponsoring RegistrarMarkMonitor Inc.
Registration Date9/15/1997
Expiration Date9/14/2028

Registered Nameservers

NS1.GOOGLE.COM
NS2.GOOGLE.COM
NS3.GOOGLE.COM
NS4.GOOGLE.COM

EPP Status Flags

clientDeleteProhibited clientTransferProhibited clientUpdateProhibited
Registry Lifespan Status Active
DNS Servers Identified 4

DNS Auditing: Deconstructing Raw WHOIS Registrant Text Logs and Timeline Metadata

In network administration, cybersecurity auditing, and domain portfolio management, verifying the registrar details and active timelines of public domains is a recurring task. The protocol that governs these queries is specified under **RFC 3912** (the WHOIS protocol). A WHOIS Domain Analyzer decodes raw copy-pasted WHOIS text records, parses EPP status flags, and calculates precise expiration and age timelines.

Decoupling WHOIS Fields via Regular Expressions

WHOIS records returned by root registry operators (such as Verisign or EURid) contain plain-text lines with varying structural field formats depending on the registrar. To parse this data reliably, we use a regex tokenizer that scans line key-value maps:

  • Creation Dates: Decoupled using regex anchors for creation date, created, or registered keys, converting iso strings into native JS Date structures.
  • Nameservers (NS): Extracted by searching for multiple lines containing name server or nserver parameters to map the active DNS routing setup.
  • EPP Status Codes: Captures standard Extensible Provisioning Protocol (EPP) status flags—such as clientTransferProhibited or inactive—which show domain transfer locks and connectivity status.

The Mathematics of Domain Expiration Timelines

Calculating a domain's remaining lifespan is critical for preventing accidental expirations of business-critical sites. Our script parses the raw expiration date and calculates the remaining days:

Millis Remaining = Expiration Date Milliseconds - Current Time Milliseconds
Days Remaining = Ceiling(Millis Remaining ÷ (1000 × 60 × 60 × 24))

Our system flags any domain expiring in under 30 days as **Expires Soon**, prompting immediate renewal actions to avoid domain hijacking or DNS resolution blackouts.

Strict In-Browser Parsing for Private Network Inquiries

When auditing network infrastructure, staging domains, or unreleased product sites, copy-pasting raw WHOIS records to third-party online tools poses a security risk. Those portals often log domain queries, creating databases of domains that could be targeted for domain-squatting or spear-phishing.

At KandZ Tools, we protect your infrastructure metadata by executing all parsers under our **100% Client-Side Privacy Law**. All line splits, date math, and array structures are calculated locally in your browser's RAM. No WHOIS logs are ever sent over the network, ensuring your domain configurations and infrastructure remain secure.

🌐 Domain Infrastructure Pro Tip

Always check the **EPP Status Flags** of your critical production domains. Confirm that the **`clientTransferProhibited`** flag is active. This registrar lock prevents unauthorized domain transfer attempts (hijacking) by blocking domain transfers unless explicitly unlocked by your network administrator. Save your audit logs to the local **History Log** to track your domain portfolio states safely.