How to Look Up Who Owns a Domain Using WHOIS

WHOIS is the standard system for looking up who registered a domain and when—here is how to actually run a lookup and make sense of what comes back.

  1. Understand what WHOIS actually is

    WHOIS is a public lookup protocol that queries the domain registry and registrar for the registration record tied to a domain name, including dates, registrar, and, where not redacted, contact information.

  2. Pick a WHOIS lookup tool

    Most domain registrars offer a free WHOIS lookup on their website, and independent lookup sites exist as well; running the query from more than one source can help if one tool's results look incomplete or outdated.

  3. Read the key fields in the result

    Registrar name, creation date, expiration date, and nameservers are usually the most useful fields—creation date is a common way to gauge how established a domain actually is, and nameservers show which DNS provider currently manages it.

  4. Understand why contact fields are often redacted

    Since privacy regulations like GDPR took effect, most registrars now redact personal registrant contact information by default, showing a generic "redacted for privacy" notice or a forwarding email instead of a real name and address.

  5. Check the domain status codes

    Status codes like "clientTransferProhibited" or "pendingDelete" indicate the domain's current administrative state—a status showing an expired or pending-delete domain, for instance, signals it may soon become available for registration.

  6. Use the results for their intended purpose

    WHOIS lookups are commonly used to verify a business's legitimacy, check how long a domain has existed, or investigate a suspicious site—treat any contact information that is not redacted with the same care you would treat other public records.

Why so much WHOIS data is redacted now

Before privacy regulation caught up with domain registration practices, a WHOIS lookup on almost any domain exposed the registrant's full name, address, phone number, and email to anyone who searched. Most registrars now redact that information by default for individual registrants, replacing it with a generic notice or a forwarding contact, which has made WHOIS far less useful for tracking down an individual site owner than it once was.

What a WHOIS lookup is actually good for today

Even with personal details redacted, WHOIS still reliably shows domain age, registrar, expiration date, and nameservers, all of which remain useful signals—a domain registered days ago with privacy protection and unfamiliar nameservers, for example, is a common red flag pattern worth noticing when evaluating an unfamiliar site.

Frequently Asked Questions

Why can't I see the actual owner's name and address in a WHOIS lookup anymore?

Most registrars redact personal contact information by default for individual domain registrants to comply with privacy regulations, showing a generic placeholder instead. Business registrants sometimes still show more detail, depending on the registrar's policy.

Can I use WHOIS to find out who owns a specific IP address instead of a domain?

Yes—WHOIS lookups also work for IP addresses, returning the organization or internet service provider a given IP block is registered to, which is a separate but related use of the same lookup system.