Everything you need to know about domain registration, WHOIS databases, RDAP, privacy protection, and DNS management. Whether you are buying a domain, investigating a brand, or troubleshooting DNS, this definitive resource covers it all.
WH
Reviewed by WebHex Technical Team
Senior Domain & DNS Specialist • Updated: July 2026
WHOIS (pronounced "who is") is a widely used query and response protocol designed for querying databases that store the registered users or assignees of Internet resources, primarily domain names and IP address blocks.
Historically, when you registered a domain name, your personal contact information (name, address, phone number, email) was entered into a publicly accessible database. The purpose of this system, established in the early days of the Internet (the 1980s by the ARPANET), was simple: it allowed network administrators to find and contact each other to fix technical issues.
Domain Registration vs. Domain Ownership
Technically, you don't "own" a domain name; you lease or register the rights to use it for a specific period (usually 1 to 10 years). As long as you pay your renewal fees to your registrar, you retain exclusive rights to use that domain name. WHOIS records indicate who currently holds this lease.
Today, WHOIS helps keep the internet organized and accountable. It is utilized by law enforcement to track down cybercriminals, by trademark lawyers to protect intellectual property, and by standard users to see if a desired domain name is available for registration.
What Is RDAP?
RDAP stands for Registration Data Access Protocol. It is the modern, structured successor to the legacy WHOIS protocol. While WHOIS served the internet well for decades, it had fundamental flaws: lack of internationalization (poor support for non-ASCII characters), no standardized data format (every registrar formatted text differently), and no secure access (no HTTPS).
RDAP was developed by the IETF (Internet Engineering Task Force) to solve these issues. Benefits of RDAP include:
Standardized JSON Responses: Unlike WHOIS, which returns unstructured text, RDAP returns machine-readable JSON data, making it vastly easier for software and APIs to parse domain data.
Secure Access: RDAP queries operate over HTTPS, ensuring data integrity and security.
Internationalization: Full support for internationalized domain names (IDNs) and diverse character sets.
Differentiated Access: RDAP allows registries to provide limited public data to regular users, while providing full contact data to authenticated law enforcement or verified parties.
Note: Many modern registries and lookup tools (including ours) now utilize RDAP endpoints on the backend to retrieve the most accurate and structured registration data, presenting it in a clean, human-readable format.
How to Use the WHOIS Lookup Tool
Our free WHOIS lookup tool simplifies the process of retrieving complex domain records. Follow these steps:
Enter a domain name: Type the domain you wish to research (e.g., example.com) into the search bar at the top of this page. You do not need to include http:// or www..
Click Search: Press the Search button. Our backend will query the appropriate authoritative registry or registrar databases.
Wait for the query: The tool will aggregate the WHOIS/RDAP data in real-time.
Review registration details: The first card will show who the domain is registered with and any public ownership data.
Verify dates: Check the "Domain Dates" card to see when the domain was created, last modified, and when it is set to expire.
Review nameservers & status: The technical card reveals where the domain's DNS is hosted and its current EPP status codes.
Export or Print: Use the action buttons below the results to print the report or save it for your records.
Understanding WHOIS Results
WHOIS records contain several standardized fields. Here is exactly what each field means:
Domain Name
The specific web address being queried (e.g., freeseomate.com).
Registrar
The retail company (like GoDaddy or Namecheap) that sold the domain to the registrant and manages the registration on their behalf.
Registration Date
The exact timestamp when the domain was originally registered. A very old registration date often correlates with higher SEO trust.
Expiration Date
The date the current registration lease expires. If not renewed by this date, the domain will eventually become available for others to register.
Domain Status (EPP Codes)
EPP (Extensible Provisioning Protocol) status codes indicate the locking and lifecycle status of a domain. Common codes include:
clientTransferProhibited - (Common & Safe) The domain is locked at the registrar level to prevent unauthorized transfers. You must disable this lock before moving to a new registrar.
clientUpdateProhibited - Prevents unauthorized updates to the domain's contact details or nameservers.
clientDeleteProhibited - Prevents the domain from being accidentally or maliciously deleted.
serverTransferProhibited - A registry-level lock preventing transfers (often applied for the first 60 days after registration or transfer).
redemptionPeriod - The domain has expired, the grace period has ended, and it is now slated for deletion. The original owner can still recover it, but usually at a steep penalty fee.
pendingDelete - The domain is permanently gone from the original owner and will be released to the public pool within 5 days. It cannot be recovered.
Registrant, Admin, and Technical Contacts
Historically, these fields displayed the name, company, address, phone, and email of the person managing the domain. Today, these fields are heavily redacted for privacy reasons (more on this below).
Domain Registration Lifecycle
Understanding the domain lifecycle is crucial for domain management and acquiring expired domains. Here is the chronological lifecycle of a domain name:
1
Available
The domain is not currently registered. Anyone can purchase it from an accredited registrar at standard pricing.
2
Active / Registered
The domain is registered (for 1 to 10 years). The registrant must renew it before the expiration date to keep it active without interruption.
3
Expired (Auto-Renew Grace Period)
If the expiration date passes, the domain enters a Grace Period (typically 0-45 days, depending on the registrar). The website and emails usually stop working, but the owner can renew it at the standard price.
4
Redemption Grace Period
After the grace period, the domain enters Redemption (typically 30 days). The registrar returns the domain to the registry. The original owner can still reclaim it, but must pay a severe redemption fee (often $100 - $300).
5
Pending Delete
Lasting exactly 5 days, the domain cannot be recovered by anyone. After this 5-day window, the domain is dropped from the registry database and becomes Available again (where it is often snapped up by automated drop-catching services).
WHOIS Privacy Protection & GDPR
In the past, registering a domain meant your home address and personal phone number were published to the internet for anyone to see. This led to massive amounts of spam, telemarketing, and even identity theft.
WHOIS Privacy Protection (also called Domain Privacy) is a service provided by registrars that replaces your personal data in the WHOIS database with the proxy data of a forwarding service. If someone emails the proxy address in the WHOIS record, the privacy service filters the email for spam and forwards legitimate inquiries to your real hidden email address.
The Impact of GDPR
The implementation of the European Union's General Data Protection Regulation (GDPR) in 2018 drastically changed WHOIS. ICANN (the Internet Corporation for Assigned Names and Numbers) implemented the Temporary Specification for gTLD Registration Data. As a result, most registrars globally now redact personal information from public WHOIS results by default, regardless of whether the registrant purchased a specific privacy add-on. You will typically see phrases like "Data Redacted for Privacy", "Statutory Masking", or "GDPR Masked".
Domain Ownership Verification
With WHOIS privacy becoming the norm, verifying who actually owns a domain requires alternative methods:
DNS TXT Records: Services like Google Workspace verify ownership by asking you to place a unique string in a DNS TXT record. Only the domain owner has access to the DNS zone file.
File Upload Verification: Uploading a specific HTML file to the web server's root directory (e.g., /.well-known/) proves control over the hosting associated with the domain.
Meta Tag Verification: Adding a specific <meta> tag to the homepage HTML.
Domain Investigation Scenarios
Even with redacted contact info, WHOIS lookups are heavily used for digital investigations:
Before Buying a Domain: Check the expiration date. If a domain you want is expiring in 3 days, it might be worth placing a backorder on it.
Brand Protection & Trademarks: Corporate lawyers use WHOIS history (which often reveals pre-GDPR data) to track down cybersquatters registering typo domains (e.g., g00gle.com).
Cybersecurity Research: Security analysts use WHOIS to find the registrar of a phishing domain. They can then report the malicious domain to the registrar's abuse email (which is strictly required to be public in WHOIS) to get the site taken down.
DNS & Nameservers Explained
WHOIS records and DNS (Domain Name System) are different but complementary systems. WHOIS tells you who owns the domain. DNS tells you where the website lives on the internet.
When you query WHOIS, one of the most critical pieces of data returned is the list of Name Servers (e.g., ns1.cloudflare.com, ns2.cloudflare.com). Nameservers act as the internet's phone book operators.
Common DNS Records Hosted on Nameservers:
A Record: Maps a domain name to an IPv4 address (where the web hosting server is).
AAAA Record: Maps a domain name to an IPv6 address.
MX Record: (Mail Exchanger) Directs emails sent to the domain to the correct mail servers (e.g., Google Workspace, Microsoft 365).
CNAME Record: Forwards one domain or subdomain to another domain name.
TXT Record: Holds text information, commonly used for email security (SPF, DKIM, DMARC) and ownership verification.
Registrar vs. Registry
A Registry (like Verisign for .com) manages the master database of a Top-Level Domain (TLD) and operates the authoritative nameservers for that TLD. A Registrar (like GoDaddy) is a retail storefront that sells domain registrations to end-users on behalf of the registry.
Common WHOIS Issues & Solutions
1. Domain Not Found / "No match for domain"
Cause: The domain is either available for registration, you entered an invalid TLD, or you queried a ccTLD (country code) that restricts automated WHOIS queries. Solution: Check for typos. If spelled correctly, the domain is likely available for purchase! Head to a registrar to buy it.
2. Transfer Fails due to "clientTransferProhibited"
Cause: The domain is locked at your current registrar. This is a security feature to prevent theft. Solution: Log into your current registrar's control panel, find the "Domain Lock" toggle, and disable it. The status should change to 'OK', allowing the transfer.
3. Website is Down (Domain Expired)
Cause: If the WHOIS lookup shows an expiration date in the past, or a status of "clientHold" or "redemptionPeriod", the domain lease has lapsed. Solution: Immediately contact the registrar shown in the WHOIS data to pay the renewal or redemption fee before the domain hits "pendingDelete" and is lost forever.
SEO Use Cases & Security Prevention
WHOIS for SEO Analysis
Search Engine Optimization professionals use WHOIS data extensively for competitive analysis:
Domain Age Analysis: Older domains generally command more trust from search engines like Google. WHOIS reveals the original creation date.
Expired Domain Hunting: SEOs often track the expiration dates of high-authority domains in their niche. If a domain drops, they can register it to inherit its backlink profile.
Network Identification: By reverse-engineering WHOIS data and nameservers, SEOs can identify Private Blog Networks (PBNs) or uncover all websites owned by a single competitor.
Security, Fraud & Phishing Prevention
If you receive a suspicious email from security-paypal-update.com, a quick WHOIS lookup is your best defense. A legitimate PayPal domain will show a registration date from years ago and enterprise nameservers. A phishing domain will show a registration date of yesterday and a cheap, consumer registrar. To combat fraud, find the "Registrar Abuse Contact Email" in the WHOIS data and forward the phishing email to them for immediate takedown.
Domain Management Best Practices
To ensure you never lose your valuable digital real estate, follow these core domain management rules:
✓Enable Auto-Renew: Keep a valid credit card on file and enable auto-renew to prevent accidental expiration.
✓Lock Your Domain: Ensure "Registrar Lock" (clientTransferProhibited) is enabled to prevent domain hijacking.
✓Update Contact Info: Even with privacy enabled, keep your underlying email address current so you receive mandatory ICANN renewal notices.
✓Enable DNSSEC: If your registrar supports it, enable DNSSEC to cryptographically secure your DNS traffic against spoofing.
✓Use 2FA: Always secure your registrar account with Two-Factor Authentication (authenticator app or hardware key).
Related SEO & Investigation Tools
A WHOIS lookup is often just the first step in a comprehensive domain investigation or SEO audit. To gain a complete picture of a domain's digital footprint, consider utilizing these complementary tools:
Infrastructure & Networking
Once you have identified a domain's nameservers, you can perform a DNS Lookup to retrieve specific records (like MX or TXT). If you need to pinpoint the exact server hosting the website, use our Domain IP Lookup or a standard IP Lookup for detailed geolocation data. Additionally, a Reverse IP Lookup can reveal other domains hosted on that same server, which is invaluable for footprinting.
Security & Availability
Knowing who owns a domain doesn't guarantee the site is functional or secure. You should always verify the HTTPS certificate validity using an SSL Checker. If a registered domain is failing to load in your browser, running it through a Website Status Checker will help you determine if the server is actually returning an HTTP error code or if it's completely offline.
SEO & Visibility Analytics
For marketers acquiring domains, understanding search engine presence is critical. Start by analyzing the page content with a Meta Tags Checker to ensure it is properly optimized. Next, use an Indexed Pages Checker to see exactly how much of the site Google currently recognizes. Finally, to evaluate the true organic value of the domain, run a comprehensive SERP Checker analysis to monitor its keyword rankings in real-time.
Methodology Disclosure
Our WHOIS Lookup tool queries ICANN-accredited registries and registrars via the Registration Data Access Protocol (RDAP) or traditional Port 43 WHOIS queries. It parses the raw response to extract standardized fields such as registrar details, creation/expiration timestamps, authoritative nameservers, and domain EPP status codes. Data accuracy relies entirely on the upstream registry's live database.
Frequently Asked Questions
WHOIS is a query and response protocol used for querying databases that store the registered users or assignees of an Internet resource, such as a domain name, an IP address block, or an autonomous system.
Registrant information is often hidden due to privacy protection services offered by registrars, or to comply with global privacy laws such as the GDPR. In these cases, placeholder data or a forwarding service address is shown instead.
EPP (Extensible Provisioning Protocol) status codes indicate the status of a domain name. They show whether a domain is locked against transfers or updates, if it is pending deletion, or if it is currently in a redemption grace period.
A WHOIS lookup will display the domain's Registry Expiry Date. This tells you exactly when the current registration period ends and when the domain must be renewed to avoid suspension.
RDAP (Registration Data Access Protocol) is the modern successor to WHOIS. It provides registration data in a standardized, machine-readable JSON format and supports secure HTTPS access and internationalization.
You can find a domain owner by using a WHOIS lookup tool. However, if the owner uses domain privacy protection or resides in a region covered by strict privacy laws like GDPR, their personal details will be redacted.
WHOIS privacy is a service offered by domain registrars that masks your personal contact information in the public WHOIS database, replacing it with the registrar's generic contact details to prevent spam and identity theft.
A domain name registrar is a business that handles the reservation of domain names as well as the assignment of IP addresses for those domain names. They must be accredited by a generic top-level domain (gTLD) registry and/or a country code top-level domain (ccTLD) registry.
A domain name registry is a database of all domain names and the associated registrant information in the top level domains of the Domain Name System (DNS) of the Internet. The registry operator maintains the master database and generates the zone file.
Nameservers are specialized servers on the Internet that handle queries or questions from your local computer, about the location of a domain name's various services. They translate human-readable domain names into IP addresses.
DNSSEC (Domain Name System Security Extensions) adds cryptographic signatures to existing DNS records. These signatures ensure that the DNS information hasn't been altered in transit, protecting against attacks like DNS spoofing and cache poisoning.
Yes, WHOIS data can sometimes be outdated or inaccurate if the registrant hasn't updated their contact information with their registrar. ICANN requires registrars to send annual reminders to registrants to maintain accurate data.
Most WHOIS databases are updated in real-time or near real-time when changes are made at the registrar level. However, some cached lookup services may take up to 48 hours to reflect recent changes.
Yes, this WHOIS Lookup tool is completely free to use. You can perform unlimited domain lookups to check registration details without any cost or account registration required.