How to Use WHOIS Lookup to Uncover Domain Owner Details

Quick answer: Enter the bare domain name, such as example.com, into a WHOIS lookup. Read the registrar, the creation and expiry dates, the status codes and the nameservers. Owner details may be redacted for privacy, but the registrar is always listed and can usually forward a message to the owner.

A WHOIS record is the public registration file for a domain name. Learning how to use WHOIS turns that file into practical answers: who manages a domain, how long it has existed, when it might expire and how to contact the people behind it.

This guide is a hands-on walkthrough. It covers running a lookup, reading each field and knowing what to do when the owner's details are hidden.

Key takeaways

• A lookup needs only the bare domain name, without https:// or a page path.
• The registrar, dates, status codes and nameservers are almost always visible.
• Personal owner details are often redacted, but organizations may still be named.
• Registrars usually offer a way to contact a hidden owner.
• RDAP is the modern, structured version of WHOIS and is now the official source for generic domains.

How to use WHOIS step by step

Step 1: Enter the domain correctly

Type only the domain, such as example.com, into a WHOIS Lookup. Leave out https://, www and anything after the first slash. For subdomains such as shop.example.com, look up the main domain, example.com, because registration happens at that level. Country-code domains, such as .de or .uk, are looked up the same way, although the amount of detail shown depends on that country's registry.

Step 2: Read the registrar section

The registrar is the company that manages the registration. Its name, its website and its abuse contact appear near the top of most records. This is the most reliable part of any record, because it is always present.

Step 3: Check the key dates

Three dates matter:

• Creation date: when the domain was first registered. Very new domains deserve extra care when they make big claims.
• Expiry date: when the registration runs out unless renewed. The guide to domain expiry explains what happens next.
• Updated date: the last time the record changed, for example after a transfer or a nameserver change.

Step 4: Understand the status codes

Status codes describe what can and cannot happen to a domain. clientTransferProhibited is common and simply means the domain is locked against unauthorized transfers. Codes such as redemptionPeriod or pendingDelete mean the domain has expired and may soon be released. The site's WHOIS Lookup explains each code in plain English.

Step 5: Look at the nameservers

Nameservers show which service runs the domain's DNS. They often hint at the hosting provider or platform, such as a website builder or a large DNS service. If the nameservers change unexpectedly, it can mean the domain has moved to a new host or, in rare cases, that someone else has taken control of it.

Step 6: Read the registrant fields

This is where owner details appear, if they appear at all. For many domains the fields show "REDACTED FOR PRIVACY" or the name of a privacy service. Organizations sometimes leave the company name and country visible, which can be enough to confirm who runs the domain.

A sample record, explained

The table below shows typical values and what they mean in practice.

Mistakes to avoid

• Looking up a subdomain or a full URL instead of the main domain.
• Reading the registrar as the owner.
• Treating a redacted record as suspicious on its own, when redaction is now the norm.
• Relying on an old cached result after a domain has changed hands.

Why owner details are often hidden

Since data protection rules such as the GDPR took effect in 2018, registrars have redacted most personal registration data by default. Many also sell or include privacy services that replace the owner's details with their own.

That privacy is a feature, not a fault. It protects individuals from spam, scams and unwanted contact.

The GoDaddy example

A very common search is "who owns domain name godaddy", usually typed when a WHOIS record lists GoDaddy as the registrar. That result means GoDaddy manages the registration, not that GoDaddy owns the domain.

Domains registered there with privacy enabled often show "Domains By Proxy, LLC", GoDaddy's affiliated privacy service, in place of the owner. The real owner's details stay private, but messages can usually be sent through the contact options the record or the registrar provides. GoDaddy, like several large registrars, also offers a paid broker service that approaches the owner on behalf of a buyer. The same logic applies to every registrar: the company listed is a service provider, not the owner.

What to do when the owner is hidden

There are still fair ways forward:

• use the contact form or relay email address that many registrars provide;
• check the website itself for an About page, imprint or privacy policy;
• report abuse, such as phishing, to the registrar's abuse contact;
• for legal matters, use ICANN's Registration Data Request Service, which passes requests for hidden data to participating registrars for many generic domains.

WHOIS and RDAP

WHOIS has been around since the early days of the internet, but its plain-text format varies from registry to registry. RDAP, the Registration Data Access Protocol, delivers the same kind of data in a consistent, structured format. Since January 2025, RDAP has been the official source of registration data for generic top-level domains such as .com.

The RDAP Lookup tool shows that structured view, and the guide to RDAP explains how it differs from WHOIS.

Put it into practice

Knowing how to use WHOIS well is mostly about reading the record calmly, field by field. The best place to start is a WHOIS Lookup on any domain, followed by the Domain Age Checker when the registration date is what matters most.

Frequently asked questions