WHOIS domain lookup
Look up registration, registrar and nameserver details for any domain (via RDAP).
What this lookup returns
Registration data for the domain: who it is registered through, when it was created, when it expires, which nameservers it uses, and what transfer locks are set. This data comes from RDAP, the modern replacement for the original WHOIS protocol. Same information, but as structured JSON over HTTPS instead of raw text over a legacy TCP connection.
This tool queries via rdap.org, which routes your lookup to the correct registry automatically. You do not need to know whether a .uk domain goes to Nominet or a .com goes to Verisign.
What the fields mean
Registrar is the company that manages the registration, like Namecheap or GoDaddy. Contact them for transfers, disputes, or abuse reports.
Creation date is how old the domain is. Age matters for SEO, email deliverability, and trust signals with payment processors. A domain registered in 2005 is treated differently than one registered last week.
Expiration date is when the domain lapses if not renewed. Treat it like a bill due date. Expired domains go through a grace period before they are released for anyone to register.
Status codes like clientTransferProhibited are EPP locks set by the registrar or registry. They prevent the domain from being transferred away, deleted, or updated without unlocking first. Multiple lock codes on a domain you own is a good sign.
Nameservers show where DNS is hosted. Cloudflare nameservers mean DNS runs through Cloudflare. This is how you point a domain to a different host without changing the registration itself.
Why registrant details are usually redacted
Before 2018, WHOIS showed the registrant's full name, address, and contact information. GDPR changed that for most gTLDs. Registrars now redact personal data by default or substitute a privacy proxy address. Country-code TLDs like .uk or .de each set their own rules, so results vary.
When WHOIS is useful
- Checking if a domain is already registered (RDAP returns nothing for unregistered domains)
- Spotting recently registered lookalike domains, which is a common phishing indicator
- Finding the registrar to file an abuse report
- Watching an expiration date on a domain you want to acquire