WHOIS is a long-established protocol for looking up who registered a domain and how it is configured at the registry level. It predates the modern web: output is plain text, formatting varies by registry, and a significant portion of the record is now redacted. It remains, however, the most direct way to determine who owns a domain and when it expires.
Increasingly, this lookup occurs over RDAP (Registration Data Access Protocol) rather than classic WHOIS — a newer, structured replacement that most registries have adopted or are migrating to. The result is presented the same way to a user regardless of protocol, which is why “WHOIS” remains the common name for this type of lookup.
Typical WHOIS Record Fields
- Registrar — the company the domain was registered through (not necessarily the hosting provider).
- Registration date — when the domain was first registered.
- Expiry date — when the current registration period ends. Domains that lapse without renewal typically enter a grace period, then a redemption period, before eventually becoming available for registration by anyone.
- Last updated date — the last time the registration record itself was modified, which can indicate a recently transferred or reconfigured domain.
- Name servers — which DNS servers are authoritative for the domain. This identifies who actually controls where the domain's traffic is routed, which can differ from who owns the registration.
- Registrant / admin / technical contact — historically included the name, organization, and contact details of whoever controls the domain.
Why Much of the Record Is Redacted
Contact information was previously published in full by default, which made WHOIS a common source for spam harvesting and, in some cases, harassment. Privacy regulations — GDPR in Europe being the primary driver — led registrars to redact most personal contact data by default. Most domains now display a registrar's generic privacy service instead of a registrant's name and address. This is standard for the majority of domains and does not indicate a problem.
Practical Uses of WHOIS
- Expiry tracking — determining when a domain of interest, a competitor's domain, or one being considered for acquisition is due to expire.
- Confirming a transfer or change — the last-updated date and registrar field provide a quick way to confirm that a domain transfer completed.
- Identifying the name servers in control — useful when troubleshooting DNS issues, since it identifies which provider's DNS to examine.
- Abuse and takedown reporting — the registrar field identifies the correct company to contact for an abuse report, even when the registrant's own details are redacted.
WHOIS vs. DNS Lookup: Different Questions
These two are easily conflated, but they answer different questions. WHOIS describes the registration: who registered the domain, through which registrar, and when it expires. A DNS Lookup describes the domain's actual records: where it currently points, its mail servers, and related configuration. A domain can have a valid, current registration in WHOIS while its DNS is misconfigured, and the reverse is equally possible.
WHOIS Does Not Verify Ownership
WHOIS shows who is registered, but it is rarely the mechanism a service uses to confirm control of a domain today. Google Search Console, SSL certificate authorities performing DNS validation, and most email or CDN providers instead require adding a specific TXT record to the domain's DNS. Because only someone with access to the domain's DNS settings can add that record, doing so successfully serves as proof of control, regardless of what WHOIS reports about who registered the domain. The WHOIS registrant and the party currently controlling the domain's DNS aren't always the same person, particularly after a sale, a hosting migration, or an undocumented registrar handoff. Check a domain's existing TXT records with the DNS Lookup tool.
Domains vs. Subdomains
WHOIS maintains records only for registered domains (example.com), not subdomains (shop.example.com). Looking up a subdomain in a WHOIS tool typically returns the parent domain's registration information, since subdomains are not separately registered.
Frequently Asked Questions
Why can't I see the domain owner's name and email?
Most registrars redact that by default now — largely driven by GDPR — and show a generic privacy service instead. This is standard for the vast majority of domains today, not a sign that something's being hidden specifically about this one.
Can I look up a subdomain in WHOIS?
Not directly — WHOIS only holds records for registered domains (example.com), not subdomains (shop.example.com). Looking up a subdomain returns the parent domain's registration information instead, since the subdomain itself was never separately registered.
What's the difference between WHOIS and a DNS Lookup?
They answer different questions. WHOIS covers registration — who registered the domain, through which registrar, and when it expires. A DNS Lookup covers the domain's actual records — where it currently points and how mail is routed. A domain can have perfectly current WHOIS registration while its DNS is broken, and vice versa.
Does WHOIS prove who currently controls a domain?
Not reliably. Most services — Google Search Console, SSL certificate authorities, email and CDN providers — verify control through a TXT record added to the domain's DNS instead, since only someone with DNS access could add it. The WHOIS registrant and the party actually controlling DNS aren't always the same, especially after a sale or migration.
What happens if a domain isn't renewed before it expires?
It typically enters a grace period first, then a redemption period, both of which give the original registrant a window to renew — usually at an added cost during redemption. Only after both windows pass does the domain actually release. From there it doesn't always just become available at standard price — a domain with real traffic or backlinks is often caught by a drop-catching service the moment it releases and relisted as a premium domain for resale, rather than sitting open for anyone to register normally.
Look up any domain's registration details with the WHOIS lookup.