What is a WHOIS lookup?
WHOIS is the public directory of domain registrations. A WHOIS lookup shows who the domain is registered with (the registrar), when it was first registered, when it expires, which status locks it has and which name servers it uses. It is how you find out whether a domain is about to expire, which company to contact to buy or transfer it, or how old a website really is.
This tool uses RDAP, the modern successor of WHOIS, and falls back to classic WHOIS (port 43) for domain extensions that do not offer RDAP yet. Results are cached for 24 hours to respect registry rate limits.
How to use the WHOIS lookup
- Type a domain name such as
wikipedia.org. You can paste a full URL;https://,www.and any path are removed. - Press Enter or click Look up.
- Check the summary, the explained status codes and, if you need everything, the raw data at the bottom.
Look up the registered domain itself, not a subdomain: registries only know about example.com, not
blog.example.com.
How to read the results
| Field | What it means |
|---|---|
| Registrar | The company where the domain is registered and renewed (for example GoDaddy, Namecheap, Cloudflare, MarkMonitor). |
| Registered on | When the domain was first created. Older domains are usually more trustworthy; a domain registered last week sending you invoices is a red flag. |
| Expires on | The date the current registration period ends. We show how many days are left and warn you when it is less than 30. |
| Last updated | The last time the registration data changed (renewal, name server change, transfer). |
| DNSSEC | Whether the domain's DNS is cryptographically signed and the signature is registered with the parent zone. |
| Name servers | The servers that host the domain's DNS. To see the actual records, use our DNS Lookup. |
| Domain status | EPP status codes that describe locks and pending operations. Each one is explained in plain English. |
Domain status codes explained
Status codes look alarming but most are normal security locks. They come in two families: client codes are set by the registrar, server codes by the registry that runs the extension.
clientTransferProhibited: transfers to another registrar are blocked. This is the default protection against hijacking. You unlock it in your registrar's panel before a transfer.clientUpdateProhibitedandclientDeleteProhibited: changes and deletion are blocked unless the owner unlocks them.serverTransferProhibited,serverUpdateProhibited,serverDeleteProhibited: a registry lock, common on valuable brand domains. Changes require a manual verified process.clientHoldorserverHold: the domain is suspended and does not resolve. Often caused by unpaid renewal, failed contact verification or legal action.redemptionPeriod: the domain expired and was deleted, but the owner can still restore it for a fee.pendingDelete: the domain will be released within days and can then be registered by anyone.okoractive: no special restrictions.
WHOIS vs RDAP
Classic WHOIS dates back to the 1980s. It returns free text in a different format for every registry, over an unencrypted connection. RDAP (Registration Data Access Protocol) replaces it with structured JSON over HTTPS, standard field names, proper internationalization and clear rules on what data can be shown. Since 2025, ICANN no longer requires generic domains like .com to run WHOIS, so RDAP is now the main source for them. Many country-code extensions still only offer WHOIS, and a few (like .es) offer neither publicly; in that case you have to check the registry's own website.
Why is the owner's information hidden?
Since the GDPR came into force in 2018, registrars redact the name, address, email and phone of domain owners in public data. Many owners also use a privacy service. This is normal and does not mean the domain is suspicious. We go one step further: even when a registry publishes contact details, we never display them.
If you need to contact an owner, for example to buy a domain, use the contact form offered by the registrar, a contact page on the website, or a domain broker. For legal or abuse matters, the registrar's abuse contact is the right channel.
Common uses of a WHOIS lookup
Never let your own domain expire
An expired domain takes down your website and, worse, your email. Check your domains here and enable auto-renew at your registrar. If expiration is close and you have auto-renew on, make sure the payment card on file is valid.
Check if a domain is available
If the lookup returns "no registration data found", the domain is probably available. Confirm with a registrar before you get attached to it, because some names are reserved or premium.
Spot phishing and scams
Scam websites and phishing emails usually use domains registered a few days or weeks ago. If a "well-known company" contacts you from a domain created last month, be very careful.
Plan a domain transfer
To move a domain to a new registrar, check that clientTransferProhibited is removed, that the domain is
more than 60 days old and was not transferred in the last 60 days, and that it is not about to expire.
What happens when a domain expires?
- Expiration day: the registrar may stop the domain from resolving and show a parking page.
- Grace period (usually 0–45 days): the owner can renew at the normal price.
- Redemption period (30 days for most generic domains): the domain is deleted from the zone; the owner can restore it for a higher fee.
- Pending delete (5 days): nothing can be done; then the domain is released and anyone can register it.
The exact timings depend on the extension and the registrar, so renew well before the expiry date shown above.