WHOIS Lookup - Domain Registration Details

About This Tool

Look up WHOIS registration data for any domain name instantly with this free WHOIS lookup tool. Enter a domain and get full registration details including the registrar, creation date, expiry date, nameservers, EPP status codes, DNSSEC signing status, and registrant contact information. Results are fetched through the RDAP (Registration Data Access Protocol), which has replaced the legacy WHOIS text protocol as the standard for domain registration queries. Domain registration records are public data maintained by registrars and registries. Every registered domain has a record containing the dates it was created, last updated, and when it expires. These records also list the nameservers that handle DNS resolution and the registrar through which the domain was purchased. Since GDPR took effect in 2018, most registrant contact details are redacted by default unless the owner opts in to public display. This tool queries RDAP servers directly and parses the structured JSON response into a readable format. You get the same data that registrars and domain brokers use when evaluating domains, checking ownership, or verifying registration status. The raw RDAP response is also available for technical users who need the complete, unprocessed data.

Understanding WHOIS and RDAP

WHOIS was the original protocol for querying domain registration data, dating back to the 1980s. It returned plain text responses with inconsistent formatting that varied between registries. RDAP (Registration Data Access Protocol) replaced WHOIS as the official standard in 2019. RDAP returns structured JSON, supports HTTPS for secure queries, and includes standardized access controls for privacy-sensitive data.

When you run a lookup with this tool, the query goes to an RDAP bootstrap server that routes it to the correct registry for the TLD (top-level domain). For .com and .net domains, queries go to Verisign. For country-code TLDs like .uk or .de, queries route to the respective national registry. The response includes all publicly available registration data in a consistent format regardless of which registry holds the record.

EPP Status Codes Explained

EPP (Extensible Provisioning Protocol) status codes describe the current state and restrictions on a domain name. Common codes include:

clientTransferProhibited — The registrar has locked the domain to prevent unauthorized transfers. This is a standard security measure that most registrars apply by default.
clientDeleteProhibited — The domain cannot be deleted without first removing this lock. Protects against accidental or malicious deletion.
serverHold — The registry has placed a hold on the domain, removing it from DNS. Often applied for policy violations or legal disputes.
redemptionPeriod — The domain was deleted and is in a recovery window (usually 30 days) where the original registrant can restore it at a premium fee.
pendingDelete — The domain has passed the redemption period and will be released for general registration within 5 days.

Domains in healthy standing typically show ok or a combination of client lock codes. If you see serverHold or pendingDelete, the domain has issues that need immediate attention.

Domain Expiry and Renewal

Every domain registration has an expiry date, typically set 1 to 10 years from the registration or last renewal date. When a domain expires, it goes through several stages before becoming available again. Most registrars provide a grace period of 0-45 days where the owner can renew at the standard price. After that, the domain enters a redemption period (30 days for most TLDs) where renewal is possible but at a significantly higher fee, often $80-$200. Finally, the domain enters a pending delete phase lasting about 5 days before it drops back to the open pool.

Monitoring expiry dates is critical for domain owners and also for domain investors who track expiring domains. This tool highlights domains expiring within 90 days with a warning indicator so you can catch renewals before they lapse. Letting a valuable domain expire can result in it being registered by drop-catching services within milliseconds of becoming available.

Privacy and GDPR Redaction

Before GDPR enforcement in May 2018, WHOIS records displayed the full name, address, phone number, and email of every domain registrant. That changed overnight when ICANN allowed registrars to redact personal data from public queries. Today, most registrant fields show "REDACTED FOR PRIVACY" or similar placeholder text.

Some domain owners purchase WHOIS privacy protection (also called domain privacy or ID protection) from their registrar, which replaces their contact details with the privacy service provider's information. Others rely on the default GDPR redaction that most ICANN-accredited registrars now apply automatically. Country-code TLD registries each set their own privacy policies, so the level of redaction varies. For example, .uk domains typically show the registrant name and address for corporate registrations but offer opt-out privacy for individuals.

Frequently Asked Questions

What is the difference between WHOIS and RDAP?

WHOIS is the legacy protocol from the 1980s that returns unstructured plain text. RDAP is the modern replacement standardized by the IETF in 2019 that returns structured JSON over HTTPS. RDAP supports proper authentication, internationalized domain names, and standardized privacy controls. Most registries now serve RDAP as the primary lookup protocol, with WHOIS maintained only for backward compatibility.

Why is the registrant information showing as redacted?

Since GDPR went into effect in May 2018, ICANN allows registrars to redact personal registrant data from public WHOIS/RDAP queries. Most registrars now hide the name, address, phone, and email of domain owners by default. Some registrars offer privacy proxy services that replace your data with their own contact details. To access non-public registrant data, you typically need to submit a formal request to the registrar with a legitimate reason, such as a trademark dispute or law enforcement inquiry.

How accurate are WHOIS expiry dates?

Expiry dates in WHOIS/RDAP records are maintained by the domain registry and are highly accurate. They reflect the actual expiration date on file with the registry at the time of the query. However, many registrars auto-renew domains before expiry if the owner has auto-renewal enabled, which can update the expiry date before you notice any change. The date shown is when the current registration term ends, not when the domain will actually become available if not renewed.

Can I find out who owns a domain?

In most cases, you can identify the registrar and sometimes the registrant organization, but individual owner details are usually hidden due to privacy protections. For domains registered before GDPR or in jurisdictions without strict privacy laws, owner details may still be visible. Corporate domains sometimes display the company name in the organization field even when personal details are redacted. If you need to contact a domain owner, look for abuse or technical contacts in the RDAP response, or use the registrar's contact form.

What does DNSSEC signed mean?

DNSSEC (Domain Name System Security Extensions) adds a layer of authentication to DNS responses by digitally signing DNS records. When a domain shows "Signed" for DNSSEC, it means the domain owner has configured cryptographic signatures that resolvers can verify, preventing DNS spoofing and cache poisoning attacks. Not all domains use DNSSEC because it requires additional configuration at both the registrar and DNS provider. Major organizations and government domains typically have DNSSEC enabled.