The perfect domain is just a click away: find your domain name →
A WHOIS lookup is a search of a domain's public registration record, which shows its registrar, its registration dates and any available registrant details. You can run a free WHOIS lookup in seconds to check a domain's registration status, research a site before you trust it or keep an eye on a name you'd like to register. Knowing how to read the results helps you understand what the record can tell you and what it can't confirm.
Secure your perfect domain in just a few clicks with Wix. Get business email, reliable hosting, SSL protection and domain privacy options in one place. With 24/7 support and transparent pricing, getting your site live is simple and worry-free.
TL;DR: what is WHOIS lookup
WHOIS is the system that stores and shares domain registration data, and a lookup is how you read it. Since 2025, a newer protocol called RDAP delivers the same records for most domains, and privacy rules hide many personal details. A lookup still reveals plenty about any domain you're curious about.
You'll learn:
What a WHOIS lookup is and what each field means
How RDAP replaced WHOIS for most domain extensions
Why many records say "REDACTED FOR PRIVACY"
How to run a lookup with a web tool, ICANN or a terminal
Smart ways to use WHOIS data and how to protect your own
What is a WHOIS lookup?
WHOIS (pronounced "who is") is a query and response protocol that lets anyone check who is responsible for a domain name, an IP address block or a network number. A WHOIS lookup is the act of sending that query and reading the record that comes back. For most people, that means typing a domain into a lookup tool and getting its registration details.
The idea dates back to the early 1980s, when the ARPANET kept a directory of the people and organizations connected to the network. Today the records are kept by domain registries and registrars. Registries run each extension, while registrars sell domains to the public. ICANN sets the rules for how that data is collected and shared for generic extensions like .com, .net and .org.
That's a lot of records to keep track of. The internet closed 2025 with nearly 387 million registered domain names, up 6.2% from the year before, according to DNIB / Verisign. Every one of them has a registration record you can look up.
Worth knowing: a WHOIS lookup reads registration data, not the website itself. It tells you who is listed as the registrant and how the domain is set up, but it won't tell you who runs the website, who created its content or how much traffic it gets.
Find out more:
What information does a WHOIS lookup show?
A typical record follows the same layout no matter which tool you use. Some fields are always public, while others depend on the extension and the owner's privacy settings. Here's what you'll usually see.
01. Registrar details
The registrar is the company that registered the domain on the owner's behalf. The record lists its name, its IANA ID and an abuse contact email and phone number. If you need to report a phishing site or reach a hidden owner, this is usually where you start.
02. Registration, update and expiration dates
The creation date shows when the current registration began, while the updated date reflects the latest recorded change to the registration. The expiration date marks the end of the current registration term. These dates stay public even when contact details are hidden.
Dates give useful context, but they don't tell a domain's full story. A name can expire, be deleted and later be registered again, which resets its creation date.
03. Name servers and DNSSEC
Name servers show which servers handle a domain's DNS records. Their names may point to the DNS provider, but they don't necessarily reveal where the website is hosted, since DNS, hosting and email can each sit with a different provider. The DNSSEC field shows if the domain's DNS data is protected by a chain of digital signatures that helps confirm it's authentic.
04. Domain status codes
Status codes describe what can and can't happen to a domain right now. A code like clientTransferProhibited means the registrar has locked the domain to block unauthorized transfers, which is normal for a healthy domain. Codes like redemptionPeriod and pendingDelete show that a domain is moving through a deletion process.
During redemption, the previous registrant may still be able to restore the domain. During pending delete, restoration generally isn't possible through the standard process. The domain may become available after deletion, but the status alone doesn't tell you exactly when you can register it.
05. Registrant contact details
This section covers the registrant, which is the person or organization that holds the domain, plus any administrative and technical contacts. It can include a name, organization, address, email and phone number. In practice, most of these fields are now redacted or replaced with a privacy service's details. When the email address is redacted, the record should still list a contact form or forwarding address so people can reach the registrant.
One thing worth knowing: the fields you see can vary by extension. Country code domains follow their own registry rules, so a lookup might show more or less than you'd expect from a .com.
Read more:
WHOIS vs RDAP: what changed in 2025
If you've run a lookup recently, you may have spotted the term RDAP. It's not a different kind of record, just a newer way to deliver the same registration data.
What is RDAP?
RDAP stands for Registration Data Access Protocol. The Internet Engineering Task Force developed it as a modern replacement for WHOIS, and ICANN-accredited registrars and registries have offered it since 2019. RDAP returns results in a structured, machine-readable format that supports non-English characters and secure access.
Why ICANN moved from WHOIS to RDAP
The original WHOIS protocol was never designed for privacy laws or tiered access. It returns plain text with no standard format and no way to show different data to different users. RDAP supports standardized, secure access and allows different levels of access based on applicable policies. Some nonpublic data may be disclosed to eligible requesters with a legitimate reason, subject to the registrar's review.
On January 28, 2025, RDAP became the definitive protocol for accessing registration data for generic top-level domains under ICANN's requirements. Registries and registrars covered by the change no longer had to provide WHOIS services, although some WHOIS services remain available. Country code extensions follow their own policies.
Does WHOIS still work?
Yes, in most everyday cases. Some WHOIS servers are still running, and many lookup tools query RDAP behind the scenes and show the results in a familiar format. People still say WHOIS lookup, so the name has stuck even as the technology has moved on.
Worth knowing: country code extensions aren't covered by ICANN's RDAP requirement. Many of them still run their own WHOIS servers, so a good lookup tool checks both RDAP and WHOIS to give you a complete answer.
Why WHOIS records say "REDACTED FOR PRIVACY"
WHOIS records used to show a domain owner's full name, home address, email and phone number to anyone who asked. Public access changed significantly in May 2018, when the EU's General Data Protection Regulation (GDPR) took effect and led registrars to change how they collected and displayed personal information. ICANN then introduced policies for handling and disclosing registration data for generic domains. Many registrars also extended privacy protections to customers outside the EU.
Today, redacted fields come from two sources. Some are hidden by data protection rules, which apply even if the owner never asked for privacy. Others are hidden because the owner added a privacy or proxy service, which replaces their details with the service's contact information. ICANN's Registration Data Policy, in effect since August 21, 2025, sets the current requirements for collecting, processing and disclosing that data.
How to reach a domain owner when details are hidden
A redacted record doesn't mean the owner is out of reach. Many records list a forwarding email or a web form that passes your message along to the registrant. You can also contact the registrar listed in the record or check the website's own contact page.
Reaching the registrant this way is different from seeing their private data. For legal, security or intellectual property needs, eligible requesters can ask for nonpublic data through ICANN's Registration Data Request Service (RDRS), and the registrar decides if it can be disclosed.
One thing worth knowing: a hidden record isn't a sign that a site is shady. Most legitimate businesses and individuals keep their details private to avoid spam, so judge a domain by its age, status and website content instead.
How to do a WHOIS lookup
Running a lookup takes less than a minute, and you don't need any technical skills. Pick the method that fits what you're doing.
01. Use an online WHOIS lookup tool
The fastest option is a free web tool. Type a domain name or full URL into the search bar and the tool pulls the registration record for you. Good tools check both RDAP and WHOIS sources and present the results in plain language.
Find the domain owner and registration details for a website with a WHOIS domain lookup.
02. Use the ICANN lookup tool
ICANN runs its own lookup at lookup.icann.org. It uses RDAP to retrieve registration data from the relevant registry or registrar, so the results reflect what the authoritative source holds at the time of your search. It's a reliable choice for checking generic domains.
03. Run a WHOIS command in a terminal
On macOS or Linux, open a terminal and type the WHOIS command in lowercase letters followed by the domain name, such as example.com. Some systems need you to install a WHOIS client first, and Windows doesn't include one by default.
The command returns the available record as plain text, but results depend on the extension and on which servers still provide WHOIS. For many generic domains, an RDAP-based lookup is the better option.
04. Check with the registrar
If you know which registrar manages a domain, its own lookup tool or support team can confirm the registration details. This is also the route to take when you want to contact a hidden owner or report abuse.
If a lookup returns no results, check the spelling and try an authoritative service like ICANN's lookup. If the domain is registered but the contact details are missing, those fields are likely redacted. To confirm a domain is available, use a registrar's domain search.
Worth knowing: if a recent change doesn't show up in the results, check the record again later or ask the registrar. How long an update takes to appear depends on the service and the type of change.
What is a WHOIS lookup used for?
A lookup is useful any time you need to know more about a domain than its homepage tells you. Here are the most common reasons people run one.
01. Checking domain availability
If a lookup returns a registration record, the domain is registered and you'll see when that registration expires. If no record appears, the domain may be available, but the lookup alone can't confirm it. Check the name with a registrar's availability search before you try to register it.
Found the perfect name for your business? Lock in your domain before someone else does.
02. Researching a domain before you buy it
Buying an existing or expired domain means inheriting its past. Check its creation date, status and registrar details before you commit. A current registration record won't show every previous owner or how the domain was used before.
For a fuller picture, check historical registration records and archived versions of the website. Both help you spot past uses, but neither guarantees a complete history.
Expert tip from Milosz Krasinski, International SEO consultant and owner of Chilli Fruit Web Consulting:
“When I size up a domain, I don't just skim DR or traffic. I dig deep, who owned it, who linked to it and did Google ever slap it down? A domain isn't just a URL. If it's got the right domain history and weight, it's a business asset, and those don't come cheap.”
03. Spotting scam and phishing sites
Scammers often register lookalike domains shortly before a campaign, so a brand-new creation date on a site asking for your login or payment details is worth a closer look. Domain age is a clue, not proof of legitimacy.
Scammers can use older domains, while legitimate businesses can launch on new ones. Also check the spelling of the domain, the site's contact information and the context of any request for personal or payment details.
Learn more:
04. Tracking expiring domains
Have your eye on a name someone else holds? Check its expiration date and status. If the owner doesn't renew, the domain may pass through grace and redemption periods before it enters pending delete and eventually becomes available again. The exact timeline depends on the extension and registrar, so an expiration date alone can't tell you when you can register the name.
Discover more:
05. Handling trademark and abuse issues
Businesses use lookups to find out who's behind a domain that uses their brand name, and security teams use them to trace spam or malware. The registrar's abuse contact in the record is the official channel for reporting problems.
One thing worth knowing: ICANN-accredited registrars have to validate and verify certain registration details and investigate reported inaccuracies. Records can still be incomplete or outdated and redacted details aren't public, so treat a lookup as one source of evidence rather than proof of ownership.
How to protect your own WHOIS information
When you register a domain, you have to give your registrar accurate contact details. ICANN rules require it, and false information can lead to your domain being suspended. The good news is you can keep those details out of public view.
The most common option is private registration, also called WHOIS privacy or domain privacy. It swaps your name, email and phone number in the public record for the registrar's or privacy service's details. Depending on the registrar and service, a public contact address or web form may let people reach you without exposing your personal email. Check how the service handles messages and what stays visible in the public record before you register.
Expert tip from Kumar Abhinav, Senior Link Building Analyst at Mavlers:
“Certain domain registrars offer packages with added security (like WHOIS privacy protection), premium DNS services, SSL certificates or website-building tools. While these extras can increase the annual cost, they offer value in terms of convenience, security and performance. For businesses handling sensitive data or relying heavily on online transactions, these features are crucial.”
Beyond privacy, keep your registrar account secure with a strong password and two-step verification. Leave the transfer lock turned on unless you're moving your domain. These steps protect the domain itself, not just your personal details.
Worth knowing: not every extension supports private registration. Some country code domains have their own privacy rules or don't allow privacy services at all, so check the extension's policy before you buy if keeping your details private matters to you.
You can register a domain directly on the Wix's website builder and add WHOIS privacy and domain security for extra protection.
How to run a WHOIS lookup and register your domain with Wix
Wix makes it easy to research any domain and claim your own in one place. As an ICANN-accredited registrar, Wix gives you a free WHOIS lookup that checks both RDAP and WHOIS records, so you get a clear picture of a domain in seconds.
01. Open the Wix WHOIS lookup
Head to the WHOIS lookup page on Wix and find the search bar at the top of the page.
02. Enter a domain or URL
Type a domain name or paste a full URL, then run the search. Wix queries the registry records and returns the results in seconds.
03. Read the results
Review the registrar, the creation and expiration dates, the status codes and the name servers. If the owner uses domain privacy, the contact fields show the privacy service instead of personal details. A clientTransferProhibited status simply means the domain is locked, while a pendingDelete status points to a domain on its way to deletion.
04. Register the domain or plan your next move
If no registration record appears, confirm the name is free with a domain name search, then register it. If it's taken, note its expiration date, contact the listed registrar to reach the owner or search for a close alternative across more than 400 domain extensions.
Once you've found your name, registering it with Wix keeps your domain, website and business email in one dashboard. You can even register a domain before you build a site.
Beyond registration, Wix includes built-in tools for DNS management and domain security, along with a free SSL certificate to help protect your site and visitors. Wix also offers private registration to keep your contact details out of public records.
WHOIS lookup FAQ
Is a WHOIS lookup free?
Yes. Most WHOIS and RDAP lookup tools, including ICANN's own tool, are free for individual searches. Some third-party services charge for bulk lookups, historical records or monitoring alerts.
Is a WHOIS lookup legal?
Yes. Registration data is published so the public can check who is responsible for a domain. What's restricted is how you use it, so don't use lookup results for spam, unsolicited marketing or automated mass harvesting.
Does a WHOIS lookup notify the domain owner?
No. A lookup is a read-only query of public registration data, so the owner isn't alerted and can't see who searched. The only way they'll know is if you contact them directly.
How accurate is WHOIS data?
Dates, registrar details, name servers and status codes come straight from the registry and are generally reliable. Contact details depend on what the registrant submitted and may be redacted, outdated or replaced by a privacy service. Use the record as a starting point rather than final proof of ownership.
What's the difference between a DNS lookup and a WHOIS lookup?
A DNS lookup shows where a domain points, such as the servers for its website and email. A WHOIS lookup shows who registered the domain, which registrar manages it and when it expires. One explains how a domain works and the other explains how it's registered.
Can a WHOIS lookup show previous domain owners?
No. A standard lookup only shows the current registration record. Some third-party services keep historical WHOIS archives that show past registrants and changes, often for a fee, though details hidden by privacy rules may be missing. Archived snapshots of the website itself can also hint at how the domain was used.
