WHOIS Lookup

The WHOIS Lookup shows the public registration record of a domain: which registrar it is with, when it was registered, when it expires, its status codes and its name servers. It uses RDAP, the modern official system that replaced old text WHOIS, so the data comes straight from the registry.

What WHOIS data is and why it is public

Every registered domain has a record held by the registry that runs its extension. Part of that record is public by design, so that anyone can find out who manages a domain technically, where to report abuse, and when it expires. That public part is what people call WHOIS.

In the past, WHOIS also showed the owner’s name, email, phone and address. Today most of that is hidden by privacy rules and by free privacy services at registrars. What you still see clearly are the technical facts: registrar, dates, status and name servers. Those facts answer most real questions.

RDAP vs old WHOIS

RDAP (Registration Data Access Protocol) is the official replacement for the old WHOIS protocol. The big differences:

• Structured data. RDAP returns clean, labelled fields instead of messy text that every registry formatted differently.
• Secure by default. RDAP works over HTTPS.
• Standard everywhere. The same fields mean the same thing for .com, .org, .net and hundreds of other extensions.

This tool asks the right RDAP server for each extension automatically, so you do not need to know which registry runs which extension.

How to use the WHOIS Lookup

1. Type a domain. example.com, or a full address like https://www.example.com/page. Subdomains are trimmed to the main domain.

2. Press Look up. The record appears in a few seconds.

3. Read the key dates. Registered on, expires on and last updated, with how long ago and how many days are left.

4. Check the name servers. They tell you which company handles the domain’s DNS, often the host or a service like Cloudflare.

5. Read the status codes. Each code comes with a plain explanation underneath.

Every field explained

Domain status codes in plain words

Status codes look scary but most of them are normal security locks. The most common ones:

• client transfer prohibited: the registrar lock is on, so the domain cannot be moved without the owner unlocking it. This is normal and good.
• client delete prohibited and client update prohibited: protection against accidental deletion or changes.
• server transfer prohibited: the registry itself has locked transfers, often for high value domains or during a dispute.
• active or ok: registered and working with no special state.
• auto renew period: the domain was just renewed automatically.
• redemption period: the domain has expired and the owner can still restore it, usually for a higher fee.
• pending delete: the domain is about to be deleted and may become available to register soon.
• client hold or server hold: the domain is suspended and will not work, often because of unpaid renewal, unverified email or abuse.

Practical uses of a WHOIS lookup

Check your own renewal date

The most useful habit of all. Look up your own domains a few times a year and confirm the expiry date. If it is close and auto-renew is off, renew now.

Spot fake renewal emails

Scammers send emails warning that your domain is about to expire, with a link to pay. Look up the real expiry date here. If it is months away, the email is fake.

Find out where a domain is registered

If you inherited a website from a developer or a previous owner, WHOIS tells you which registrar holds the domain, so you know where to log in or request access.

Check a domain you want to buy

If a name is taken, WHOIS shows when it expires and whether it is in redemption or pending delete. That helps you decide whether to wait, use a backorder service or move on.

Check a website before you trust it

A shopping site claiming years of experience but registered last week is a warning sign. Combine this with the Domain Age Checker and the SSL Checker before paying a site you do not know.

The domain life cycle, from registration to release

Knowing the stages a domain goes through helps you read any WHOIS record correctly:

1. Registered. The domain is paid for and working. Status is usually active or shows the normal client locks.

2. Expired, in grace period. The expiry date has passed. Many registrars keep the domain for the owner for a few weeks, and it can be renewed at the normal price. The website may stop working.

3. Redemption period. The registrar has released it to the registry for deletion. The original owner can still restore it, usually for a much higher fee. Status shows redemption period.

4. Pending delete. A short final stage of a few days. Nobody can renew or register it during this time.

5. Released. The domain is deleted and becomes available to anyone, often caught within seconds by backorder services.

The exact length of each stage depends on the extension and the registrar, but the order is the same for most generic extensions.

Reading name servers to learn about a website

Name servers often reveal more than you expect. If they contain cloudflare.com, the site uses Cloudflare. If they look like ns1.dns-parking.com, the domain is usually managed in Hostinger. Registrar default name servers often mean the domain is parked or only used for email. To see which company actually hosts the website, use the Hosting Checker, and for all live records use the DNS Records Checker.

Why the owner’s name is hidden

Since privacy laws tightened, registries and registrars hide personal contact details by default. Many registrars also include free privacy services. As a result, the owner field usually shows “redacted for privacy” or the name of a privacy service.

If you need to contact an owner, the registrar often provides a contact form or a forwarding email. For legal matters, the registrar can share data with authorities through proper channels.

About .pk domains

Pakistani domains (.pk, .com.pk and others) are managed by PKNIC, which does not offer RDAP or a public API. This tool cannot show their records. Use the lookup on the PKNIC website instead.

Keep your own domains safe

• Turn on auto-renew and keep a valid payment method on file.
• Use a registrar account email on a different domain, like Gmail, so renewal notices reach you even if your domain has problems.
• Keep the transfer lock on unless you are moving the domain.
• Enable two-factor login at your registrar.

If your domain sits at a registrar with expensive renewals or no free privacy, moving it is easy. My Dynadot guide explains the transfer step by step.

Frequently asked questions