What Is WHOIS? How to Find Who Owns a Domain
WHOIS is the public record of who registered a domain name. It has existed since the early 1980s, and for most of that time it did what the name suggests: you typed a domain, you got back a name, a postal address, a phone number and an email. That era is over. Look up almost any domain today and the registrant line reads something like "REDACTED FOR PRIVACY" or points at a proxy service in Arizona.
The record is still worth reading. You just have to know what survived.
What can you still learn from a WHOIS record?
Plenty, as it happens, none of it personal.
| Field | Still visible? | What it tells you |
|---|---|---|
| Creation date | Yes | How old the domain is. A site claiming twenty years of experience on a domain registered in March is worth a second look. |
| Expiry date | Yes | Whether it is about to lapse, and roughly how far ahead the owner commits. |
| Registrar | Yes | Which company sold the domain. Useful if you need to file an abuse report. |
| Name servers | Yes | Who runs the DNS, which usually reveals the host or CDN. |
| Status codes | Yes | Whether the domain is locked, pending deletion or in a transfer. |
| Registrant name and address | Rarely | Hidden behind privacy services or redaction for most domains since 2018. |
| Registrant email | Rarely | Usually replaced by a forwarding address at the privacy provider. |
Why did the personal details disappear?
Two things happened at once. GDPR came into force in May 2018 and made publishing a European registrant's home address and phone number to the entire internet legally difficult, so registrars redacted those fields across the board rather than sort registrants by jurisdiction. Separately, privacy proxy services had already become a cheap or free add-on at most registrars, substituting the proxy's details for yours in the public record.
The data still exists. Registrars hold it, and law enforcement and trademark holders can request it through defined channels. It simply is not in the public lookup any more.
WHOIS or RDAP?
WHOIS returns a blob of text with no agreed format, which is why parsing it reliably was always miserable. RDAP, the Registration Data Access Protocol, returns the same information as structured JSON with proper authentication and internationalisation. ICANN required registries to support it from 2019 onward, and it is what most modern tools query under the hood, including the WHOIS lookup on this site.
You will still see the service called WHOIS everywhere, because that is the name people search for. The plumbing underneath changed.
How do you read a record without being misled?
A few traps catch people out.
- The registrar is not the owner. Seeing "GoDaddy" or "Namecheap" tells you where the domain was bought, nothing about who bought it.
- A privacy service is not suspicious on its own. It is the default at several registrars. Most people using it are avoiding spam, not hiding wrongdoing.
- Dates can be misleading after a transfer. Some registrars reset the updated date on transfer, and a few report a creation date from when the current registrar took over rather than the original registration.
- Country codes vary wildly. Each country registry sets its own disclosure rules. A .de domain shows almost nothing; some smaller registries still show everything.
What should you use it for?
Checking how old a site is before trusting it. Finding the right abuse contact when something needs reporting. Confirming who hosts a domain when you are debugging DNS. Seeing whether a domain you want is about to expire.
What it will not do is tell you who is behind a scam site. That takes a request to the registrar with a legal basis, and it is not something a lookup page can shortcut. Anyone promising otherwise is selling you stale data.
Checking a domain yourself
Paste any domain into the WHOIS lookup and you will get the registrar, the dates, the name servers and the status codes, drawn from RDAP where the registry supports it. If you want to know where the site is actually served from rather than who bought the name, the IP lookup and DNS lookup answer that better, and the guide to DNS records explains which record does what.
Try it yourself
See the real numbers for your own connection with our free tools.