Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

If you 'whois', you get a whole bunch of listings from pranksters who thought it would be funny to mess with the listings by putting '' in their subdomains.

The output instructs:

To single out one record, look it up with "xxx", where xxx is one of the of the records displayed above. If the records are the same, look them up with "=xxx" to receive a full display for each record.

But this does not work as far as I can tell.

david:~$ whois '""'
whois: com" nodename nor servname provided, or not known
david:~$ whois
(...blah, blah, blah...)
 No match for =MICROSOFT.COM
david:~$ whois '""'
whois: com" nodename nor servname provided, or not known

So how do you do it?

I know I can go to a web site to look it up, but that's not the point.

share|improve this question
up vote 2 down vote accepted

There are several command-line whois clients in use on Unix (for instance, Debian and FreeBSD, by default, have two very distinct tools). So, without knowing the one you use, it may be difficult to help you.

The text you quote is appârently the one sent by and it seems wrong to me.

Also, a fix, the are server names, "subdomains" is technically true but misleading.

share|improve this answer
I hadn't thought of this. As I wrote the question I was trying it on my Mac. I tried it again on my Ubuntu box and it works just fine. So, I guess the Mac (BSD inherited) version of whois is just old and broken. As a workaround, I installed the version of whois in MacPorts, which seems to be the same one that is common in Linux distributions. – David Jul 17 '09 at 16:40

Or using the advised method - whois ""

share|improve this answer
i do get error using this method though - The Registry database contains ONLY .COM, .NET, .EDU domains and Registrars. No match for =MICROSOFT.COM whois version 4.7.24. – Systemsninja Jun 5 '09 at 14:57
I have no problem doing 'whois' from my Fedora Core system and returning a single result. But then I can also do it without the = and still get one result. My whois is using – Kevin Kuphal Jun 5 '09 at 15:45
@Martynas, or maybe you skip the result. At the end of the output it does say "No match for =MICROSOFT.COM". Try whois | more – user5824 Jun 5 '09 at 16:22
@daLizard - whois capitalizes, I guess the only reason Kevin gets single result is that he hits good whois server – Systemsninja Jun 9 '09 at 7:30
@daLizard - Bare double-quotes are interpreted by the shell (bash) and not passed on as part of the parameters. The result is the same as without them. Hence my initial attempts at single-quote trickery. – David Jul 17 '09 at 16:34

whois -h


share|improve this answer
This requires you know the registrar Microsoft uses (or you do it in two steps, one to find the registrar and one to query it). Inconvenient. – bortzmeyer Jun 9 '09 at 7:18
actually it requires registrar which has authoritative information. whois utility can't guess it. – Systemsninja Jun 9 '09 at 7:32

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.