A WHOIS lookup is a public record search for a domain name. Type in any domain and WHOIS shows you the paper trail behind it: who registered it, when, where, when it expires, and which DNS servers it uses. It is one of the oldest and most useful tools on the internet, and in the last few years it changed a lot because of privacy rules. Here is what a WHOIS lookup actually reveals, how to read it, what privacy hides, and why so many results now come back nearly empty.
What is WHOIS?
WHOIS (pronounced "who is") is the system that stores registration details for every domain name. When someone registers a domain, that registration gets recorded, and WHOIS is how you look it up. Think of it as the public property records for internet addresses. Anyone can query it, for free, on any domain.
What a WHOIS lookup shows you
Run a WHOIS lookup on a domain and you will typically see these fields:
- Registrar. The company the domain was registered through (the seller). Useful for knowing who to contact and how reputable the registration is.
- Registration date. When the domain was first registered. A domain registered last week reads very differently from one registered in 2004.
- Expiration date. When the registration lapses if not renewed. This one is genuinely useful for planning and for competitive research.
- Last updated date. When the record last changed, which can hint at a recent transfer or nameserver change.
- Nameservers. The DNS servers in charge of the domain, which tells you who is actually hosting its DNS (Cloudflare, a specific host, and so on).
- Domain status codes. Short technical labels describing the domain's state, and these are more useful than they look.
How to read the status codes
Those status codes (often called EPP codes) tell you what a domain can and cannot do right now. A few you will see often:
- clientTransferProhibited. A lock the owner set to prevent the domain being transferred away without permission. This is normal and a good sign, not a problem.
- clientHold. The domain is inactive and will not resolve, often due to a dispute or non-payment. A red flag.
- pendingDelete / redemptionPeriod. The domain is on its way out after expiring. If you were hoping to grab it, these codes tell you roughly where it is in that timeline.
- ok (or active). Everything is normal.
Reading the status codes is how the pros tell "healthy domain" from "about to drop" at a glance.
What WHOIS privacy hides, and why results look empty now
Here is the big change. If you run a WHOIS lookup today, the owner's name, email, address, and phone are usually blank or replaced with a privacy service. Two reasons:
- WHOIS privacy (also called domain privacy). A paid or free service that swaps the real owner's contact details for the privacy provider's, so spammers and scammers cannot scrape your personal information off a public record. If you register a domain, turning this on is smart.
- Privacy regulations. After GDPR and similar rules, registrars stopped publishing personal contact details by default, even without a paid privacy service. So most WHOIS results now redact the human details automatically.
So what is WHOIS privacy in one line: it is the shield that hides the domain owner's personal contact information from the public record. It does not hide the technical facts. Registrar, dates, nameservers, and status codes are almost always still visible. The redaction covers the person, not the plumbing.
Legitimate reasons to run a WHOIS lookup
WHOIS is not just for the curious. Real, everyday uses:
- Is this domain available? If WHOIS returns no record, the name may be unregistered and available to buy.
- When does a domain expire? Watching a domain you want, or checking your own renewal date, both come straight from WHOIS.
- Is this site sketchy? A domain registered three days ago, with a privacy shield and a clientHold status, behind a bargain-basement registrar, is a very different risk than one registered in 2010 with clean status codes. WHOIS gives you those signals before you trust a site with your card.
- Who runs the DNS? The nameservers tell you which provider is behind a domain, handy for troubleshooting or competitive research.
- Due diligence before buying a domain. History, status, and dates all inform whether a domain is worth what someone is asking.
RDAP: the modern replacement
WHOIS is old, and it is being replaced by a newer standard called RDAP (Registration Data Access Protocol). RDAP returns the same kind of information but in a structured, standardized, machine-readable format, with better support for those privacy rules and for internationalized data. The registries are steadily moving from classic WHOIS to RDAP under the hood.
For you as a user, the practical difference is small: you are still looking up a domain and reading registrar, dates, nameservers, and status. Good lookup tools now query RDAP behind the scenes and show you clean results, so you get the modern data without needing to know which protocol answered.
Look up any domain in seconds
You do not need to memorize the fields or the status codes to get value out of this. Run the Valla DNS WHOIS tool on any domain and it returns the registrar, the registration and expiration dates, the nameservers, and the status codes in plain, readable form, using the modern RDAP data where available. Whether you are checking your own renewal date, sizing up a domain to buy, or deciding whether a site is trustworthy, it is a five-second lookup that tells you a surprising amount.