Domain Privacy

WHOIS Lookup

Find registrar, owner details, nameservers, and dates for any domain.

What Is WHOIS and What Does It Tell You?

WHOIS is a public internet protocol used to query databases storing registration information about domain names and IP address blocks. When someone registers a domain, their details are recorded in a WHOIS database maintained by registrars and registries. GDPR regulations have led to widespread redaction of personal contact information since 2018.

A WHOIS lookup reveals: domain registration and expiry dates, the registrar managing the domain, name server records, domain status codes, and last-update timestamps. For IP addresses, WHOIS returns information about the network block owner, their organization, country, and abuse contact details.

Domain Status Codes Explained

clientTransferProhibitedTransfer to another registrar is locked. Most active domains have this.
serverHoldDomain is suspended by the registry — usually for DNS or payment issues.
pendingDeleteDomain is queued for deletion and will become available soon.
redemptionPeriodDomain has expired and entered a 30-day grace period before deletion.
ok / activeDomain is registered and functioning normally.

WHOIS Use Cases

Cybersecurity Investigation

Identify domains used in phishing, malware, and fraud campaigns. Registrar abuse contacts can be found via WHOIS.

Domain Acquisition

Find the owner of a parked domain and negotiate a purchase before it expires.

Expiry Monitoring

Track when competitor or target domains expire for acquisition opportunities.

Technical Troubleshooting

Verify name servers, confirm registrar details, and debug DNS misconfigurations.

Frequently Asked Questions

What is a WHOIS lookup?

A WHOIS lookup is a query to the public WHOIS database that returns registration information about a domain name or IP address. This includes the registrant's contact info, the registrar, registration and expiry dates, and name server records. The WHOIS protocol has existed since 1982 and is managed by ICANN.

Why is the domain owner's contact information hidden?

Domain privacy protection replaces the registrant's personal contact information with the registrar's proxy details. Since GDPR implementation in 2018, most registrars in EU countries redact personal data by default. Many registrars offer this service free of charge to prevent spam and protect registrant privacy.

How do I find out when a domain expires?

Run a WHOIS lookup for the domain name — the 'Expiry Date' or 'Registry Expiry Date' field shows when the domain registration ends. Domain owners receive renewal reminders before expiry, but failing to renew allows the domain to enter a redemption period before becoming available to others.

Can WHOIS tell me if a domain is available to register?

If a WHOIS lookup returns 'No match' or 'Domain not found', the domain is likely available to register. However, premium and reserved domains may show no WHOIS data despite not being publicly available. Always verify availability directly through a domain registrar.

What is the difference between registrant, registrar, and registry?

The registry manages a TLD (e.g., Verisign manages .com). The registrar is an ICANN-accredited company that sells domain registrations (e.g., GoDaddy, Namecheap). The registrant is the individual or organization that purchased the domain and is listed as the owner in WHOIS records.

What are name servers in WHOIS results?

Name servers (NS records in WHOIS) identify which DNS servers are authoritative for a domain. When you point a domain to a new hosting provider, you update these name servers at your registrar. The change propagates through DNS over 24–72 hours.

Related Tools & Resources