WHOIS 命令没有返回有用的信息？答案

【问题标题】：WHOIS command not returning useful information?WHOIS 命令没有返回有用的信息？
【发布时间】：2011-07-25 18:20:59
【问题描述】：

如今，无论何时使用 WHOIS 命令都不会返回任何有用的信息。我通常必须去 Godaddy、Dnsstuff 或其他服务来获取数据。我知道原因主要是垃圾邮件。

我只是想知道其他服务如何获取这些数据。他们是否使用不同类型的 WHOIS 命令？

【问题讨论】：

哈哈.. 我将把它归结为一个 SO 错误.. 上次我查看时，它是 0% - 无论是在这个页面上还是在点击率上。我会删除评论，但我会留下它以防开发人员查看:)
我已经回答了 ServerFault serverfault.com/questions/253451/…
我投票决定将此问题作为题外话结束，因为它与help center 中定义的编程无关。

标签： dns whois domain-name nameservers

【解决方案1】：

当 Network Solutions 不再是唯一注册域的地方时，赤裸裸的 whois 停止返回完整记录。现在它的功能更像是 DNS，其中某些东西为您提供了一个查找权威信息的地方，如果您需要，您必须去那里查找。

也就是说：

% whois stackoverflow.com
[Querying whois.verisign-grs.com]
[whois.verisign-grs.com]
   ...
   Domain Name: STACKOVERFLOW.COM
   Registrar: GODADDY.COM, INC.
   Whois Server: whois.godaddy.com
   ...

% whois stackoverflow.com@whois.godaddy.com
[Querying whois.godaddy.com]
[whois.godaddy.com]
...
Registrant:
   Stack Overflow Internet Services, Inc.
   1010 Disk Drive
   ...etc...

其他服务的业务是注册域名并从其域名注册人那里获取信息。

【讨论】：

我收到错误消息，“No whois server is known for this kind of object.”
@zylstra 这个问题是六年前回答的，当时是准确的。从那以后情况发生了变化。
@Blrfl 现在有什么新方法？我在这里尝试了所有答案，但似乎只查询了两次 whois。
@Leggy version of whois used in most Linux distributions 将这两个步骤合二为一，因此whois stackoverflow.com 现在可以按您的预期工作。

【解决方案2】：

这里是the answer I posted on ServerFault。

假设您使用的是 debian/ubuntu whois 库，您的问题的简短回答是使用

$ whois -h whois.crsnic.net "domain google.com"

这是长答案。

.COM 顶级域名是Thin WHOIS。当您执行 WHOIS 查询时，WHOIS 工具首先将 WHOIS 查询发送到 Verisign（主机名 whois.crsnic.net）并从响应中提取推荐。

默认情况下，当您从域 example.com 查询 Verisign 时，Whois 会在包括域名、注册商名称和名称服务器在内的多个不同对象中对字符串“example.com”进行非常广泛的搜索。

您可以通过指定关键字来优化查询，如 Verisign 文档中所述。 http://registrar.verisign-grs.com/whois/iframe/help.html?ppath=www.verisigninc.com/products-and-services/domain-name-services/whois&

上面的命令完全符合我的解释。它向 Verisign 发送完整查询“域 google.com”，而不是 google.com。您必须明确传递 -h 标志，因为 Whois 会尝试从查询中猜测要查询的主机名，但它会失败，因为它不会将查询“domain google.com”识别为有效域。

这是命令的结果。

$ whois -h whois.crsnic.net "domain google.com"

Whois Server Version 2.0

Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.net
for detailed information.

   Domain Name: GOOGLE.COM
   Registrar: MARKMONITOR INC.
   Whois Server: whois.markmonitor.com
   Referral URL: http://www.markmonitor.com
   Name Server: NS1.GOOGLE.COM
   Name Server: NS2.GOOGLE.COM
   Name Server: NS3.GOOGLE.COM
   Name Server: NS4.GOOGLE.COM
   Status: clientDeleteProhibited
   Status: clientTransferProhibited
   Status: clientUpdateProhibited
   Status: serverDeleteProhibited
   Status: serverTransferProhibited
   Status: serverUpdateProhibited
   Updated Date: 15-sep-2010
   Creation Date: 15-sep-1997
   Expiration Date: 14-sep-2011

>>> Last update of whois database: Wed, 30 Mar 2011 08:50:16 UTC <<<

NOTICE: The expiration date displayed in this record is the date the 
registrar's sponsorship of the domain name registration in the registry is 
currently set to expire. This date does not necessarily reflect the expiration 
date of the domain name registrant's agreement with the sponsoring 
registrar.  Users may consult the sponsoring registrar's Whois database to 
view the registrar's reported date of expiration for this registration.

TERMS OF USE: You are not authorized to access or query our Whois 
database through the use of electronic processes that are high-volume and 
automated except as reasonably necessary to register domain names or 
modify existing registrations; the Data in VeriSign Global Registry 
Services' ("VeriSign") Whois database is provided by VeriSign for 
information purposes only, and to assist persons in obtaining information 
about or related to a domain name registration record. VeriSign does not 
guarantee its accuracy. By submitting a Whois query, you agree to abide 
by the following terms of use: You agree that you may use this Data only 
for lawful purposes and that under no circumstances will you use this Data 
to: (1) allow, enable, or otherwise support the transmission of mass 
unsolicited, commercial advertising or solicitations via e-mail, telephone, 
or facsimile; or (2) enable high volume, automated, electronic processes 
that apply to VeriSign (or its computer systems). The compilation, 
repackaging, dissemination or other use of this Data is expressly 
prohibited without the prior written consent of VeriSign. You agree not to 
use electronic processes that are automated and high-volume to access or 
query the Whois database except as reasonably necessary to register 
domain names or modify existing registrations. VeriSign reserves the right 
to restrict your access to the Whois database in its sole discretion to ensure 
operational stability.  VeriSign may restrict or terminate your access to the 
Whois database for failure to abide by these terms of use. VeriSign 
reserves the right to modify these terms at any time. 

The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.

【讨论】：

【解决方案3】：

虽然新的“详细”WHOIS 政策现在要求所有新 gTLD 注册管理机构都运营密集注册机构，但目前一些现有的注册管理机构（例如 .COM 和 .NET）尚未过渡到“详细”WHOIS，并且仍在运营精简注册机构注册表。 - https://whois.icann.org/en/primer

对于 .com 和 .net，使用 registry 的简单 whois 命令的精简结果来查找 registrar 的 whois 服务器。

例如，

# whois google.com

   Domain Name: GOOGLE.COM
   Registry Domain ID: 2138514_DOMAIN_COM-VRSN
   Registrar WHOIS Server: whois.markmonitor.com
   Registrar URL: http://www.markmonitor.com
   Updated Date: 2011-07-20T16:55:31Z
   Creation Date: 1997-09-15T04:00:00Z
   Registry Expiry Date: 2020-09-14T04:00:00Z
   Registrar: MarkMonitor Inc.
   Registrar IANA ID: 292
   Registrar Abuse Contact Email: abusecomplaints@markmonitor.com
   Registrar Abuse Contact Phone: +1.2083895740
   Domain Status: clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited
   Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
   Domain Status: clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited
   Domain Status: serverDeleteProhibited https://icann.org/epp#serverDeleteProhibited
   Domain Status: serverTransferProhibited https://icann.org/epp#serverTransferProhibited
   Domain Status: serverUpdateProhibited https://icann.org/epp#serverUpdateProhibited
   Name Server: NS1.GOOGLE.COM
   Name Server: NS2.GOOGLE.COM
   Name Server: NS3.GOOGLE.COM
   Name Server: NS4.GOOGLE.COM
   DNSSEC: unsigned
   URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
>>> Last update of whois database: 2017-09-12T18:51:08Z <<<

For more information on Whois status codes, please visit https://icann.org/epp
...

然后向 registrar 查询详细结果。

例如，

# whois google.com -h whois.markmonitor.com

Domain Name: google.com
Registry Domain ID: 2138514_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.markmonitor.com
Registrar URL: http://www.markmonitor.com
Updated Date: 2017-09-07T08:50:36-0700
Creation Date: 1997-09-15T00:00:00-0700
Registrar Registration Expiration Date: 2020-09-13T21:00:00-0700
Registrar: MarkMonitor, Inc.
Registrar IANA ID: 292
Registrar Abuse Contact Email: abusecomplaints@markmonitor.com
Registrar Abuse Contact Phone: +1.2083895740
Domain Status: clientUpdateProhibited (https://www.icann.org/epp#clientUpdateProhibited)
Domain Status: clientTransferProhibited (https://www.icann.org/epp#clientTransferProhibited)
Domain Status: clientDeleteProhibited (https://www.icann.org/epp#clientDeleteProhibited)
Domain Status: serverUpdateProhibited (https://www.icann.org/epp#serverUpdateProhibited)
Domain Status: serverTransferProhibited (https://www.icann.org/epp#serverTransferProhibited)
Domain Status: serverDeleteProhibited (https://www.icann.org/epp#serverDeleteProhibited)
Registry Registrant ID:
Registrant Name: DNS Admin
Registrant Organization: Google Inc.
Registrant Street: 1600 Amphitheatre Parkway,
Registrant City: Mountain View
Registrant State/Province: CA
...

在我看来（尽管我现在不想确定 whois 命令历史记录）在某些时候 whois 命令被修改为不会自动查询来自初始薄的 registrar 结果注册表信息。

【讨论】：

至于你的最后一句话，这取决于你使用的是哪个whois客户端。有多种策略，见unix.stackexchange.com/a/407030/211833