WHOIS LOOKUP
ClientYour DeviceWHOISLookup ServerRegistryDomain DB
Registrar
—
Created
—
Expires
—

WHOIS provides public registration information about a domain name, including who registered it, when it was created, and when it expires. If you are investigating a suspicious domain or checking whether a domain is available for purchase, WHOIS data is a good starting point.

How Do I Run a WHOIS Search?

Enter a domain name above and click Lookup. The tool queries authoritative WHOIS servers and returns registration data including the registrar, creation date, expiry date, status codes, and name servers.

For domains like .com and .net, the tool follows referrals from Verisign's registry to the sponsoring registrar's WHOIS server for complete details.

Using the IP WHOIS Results

WHOIS results help you identify who registered a domain, when it expires, and which name servers it uses. Common uses include:

  • Verifying domain ownership before purchasing
  • Finding abuse or technical contacts to report spam or phishing
  • Checking if a domain is about to expire (useful for domain investors)
  • Troubleshooting DNS issues by confirming which name servers are authoritative
  • Security investigations to identify suspicious domains

Note that many domains now use privacy protection services that mask personal contact details. The registrar, dates, and name server fields remain visible even with privacy protection.

What Does WHOIS Stand For?

WHOIS is not an acronym — it is simply read as "who is," referring to the question of who is responsible for a domain or IP resource. WHOIS is a query-and-response protocol defined in RFC 3912. It is used for querying databases maintained by domain registrars and Regional Internet Registries (RIRs).

RDAP (Registration Data Access Protocol) is the modern successor to WHOIS, offering structured JSON responses, better internationalization, and standardized access controls.

Understanding WHOIS Status Codes

ok / active
The domain is in a normal state with no restrictions or pending operations. This is the default status when no other status codes apply.
clientDeleteProhibited
The domain cannot be deleted without first removing this lock. Registrars set this to prevent accidental or malicious deletion of important domains.
clientTransferProhibited
The registrar has locked the domain to prevent unauthorized transfers. This is one of the most common status codes and is typically enabled by default to protect domain owners.
clientUpdateProhibited
The domain's registration data cannot be modified without first removing this lock. This prevents unauthorized changes to name servers, contacts, or other WHOIS fields.
clientHold
The domain is not resolving because the registrar has placed a hold on it. This is typically initiated by the registrar due to non-payment, a dispute, or at the registrant's request.
serverHold
The registry has placed a hold on the domain, removing it from DNS. This can happen due to legal disputes, non-payment, or policy violations. While in this state the domain will not resolve.
serverTransferProhibited
A registry-level lock that prevents the domain from being transferred to a different registrar. This is set by the registry itself, not the registrar, and is commonly applied during disputes or for high-value domains.
redemptionPeriod
The domain was deleted and is in a 30-day recovery window where the original registrant can restore it, usually for an additional fee. The domain does not resolve during this period.
pendingDelete
The domain is scheduled for permanent deletion. Once the pending delete period ends (usually five days), the domain is released back into the pool and becomes available for anyone to register.
pendingTransfer
A transfer to a new registrar is currently in progress. The transfer typically completes within five to seven days unless it is approved early or rejected by the losing registrar.

What Are the Regional Internet Registries?

The Regional Internet Registries (RIRs) manage the allocation and registration of IP addresses worldwide. There are five:

  • ARIN (American Registry for Internet Numbers) — covers Canada, the United States, and many Caribbean and North Atlantic islands. Operates ARIN WHOIS and RDAP services.
  • RIPE NCC — covers Europe, the Middle East, and parts of Central Asia. Considered the first established RIR.
  • APNIC (Asia-Pacific Network Information Centre) — covers Asia, Australia, and surrounding countries.
  • LACNIC — covers Latin America and parts of the Caribbean.
  • AfriNIC — covers the African continent.

All five are united through the Number Resource Organization (NRO) and coordinate globally through IANA.

Finding Other IP Information

If you need to find an IP address from a domain, use the DNS Lookup Tool. To check if specific ports are open on a server, use the Port Checker. To verify a domain's SSL certificate, try the SSL Certificate Checker. To find your own IP address, visit What Is My IP.

Learn More

Read our in-depth guide to understand the concepts behind this tool:

  • What Is WHOIS? — WHOIS history, status codes, Regional Internet Registries, RDAP, and privacy explained.

Frequently Asked Questions

What information does a WHOIS lookup show?

A WHOIS lookup returns the domain's registrar, creation date, expiry date, last updated date, domain status codes, and authoritative name servers. Some registrars also include contact information, though many domains now use privacy protection services that mask personal details.

Is WHOIS data always accurate?

Registrars are required to maintain accurate WHOIS data under ICANN policies, but enforcement varies. Many domain owners use WHOIS privacy services that replace personal contact information with proxy details. The registrar, dates, and name server fields are generally reliable.

Can I find out who owns a domain?

WHOIS historically showed registrant contact details, but since the GDPR took effect in 2018, most registrars redact personal information for privacy. You can still see the registrar, creation/expiry dates, and name servers, but the registrant name and email are often hidden behind privacy services.

How can I check if a domain is available?

If a WHOIS lookup returns no results or shows the domain as available, it likely has not been registered. However, the most reliable way to check availability is through a domain registrar's search tool, which checks real-time registry data.

What is RDAP?

RDAP (Registration Data Access Protocol) is the modern replacement for WHOIS. It returns structured JSON data, supports internationalized domain names, and offers standardized authentication and access control. Many registries now offer RDAP alongside or instead of traditional WHOIS.

Why does WHOIS show privacy protection instead of owner details?

Domain registrars offer privacy protection services that replace the registrant's personal contact information with proxy details. This protects domain owners from spam, phishing, and unwanted contact. Under ICANN's 2018 Temporary Specification (influenced by GDPR), registrars are no longer required to publicly display registrant email addresses and phone numbers for generic TLDs.