WHOIS and domain lookups: what the records tell you
Every registered domain carries a paper trail: who registered it, when, through which registrar, and when it expires. A WHOIS lookup reads that record. It is one of the oldest tools on the internet and still one of the most useful for debugging, due diligence, and security work.
What a lookup returns
A typical record includes:
- Registrar. The company the domain was bought through, like Namecheap, GoDaddy, or Cloudflare.
- Registration and expiry dates. When the domain was first registered and when it lapses if not renewed.
- Nameservers. The authoritative DNS servers, which tell you who actually controls the domain's records.
- Status codes. Flags like
clientTransferProhibited(a lock against transfers) orpendingDelete(about to be released). - Registrant contact. Historically the owner's name and address, though this is now usually hidden.
Why the owner is often hidden
Two things changed WHOIS. First, registrars began offering privacy protection, replacing your details with a proxy contact. Second, privacy regulation, GDPR in particular, pushed registries to redact personal data by default. So for most domains today you will see the registrar and dates clearly, but the registrant shows as "Redacted for Privacy" or a forwarding service. The technical data, nameservers and status, remains fully visible.
What it is genuinely useful for
- Checking expiry. A site that suddenly broke may simply have an expired domain.
- Confirming control. The nameservers tell you whose DNS is authoritative, which matters when you inherit a project and do not know where DNS lives.
- Spotting transfer locks. Before a migration, the status codes tell you whether the domain is locked.
- Due diligence. Registration age and registrar are quick signals when assessing an unfamiliar domain.
You can pull the registrar, dates, nameservers, and status for any domain with the Domain Lookup tool.