You look up a domain and get a block of text full of dates, codes like clientTransferProhibited, and the words "REDACTED FOR PRIVACY" where you hoped to see a name. It looks official, and it probably contains exactly the answer you need, but it reads like a form written for lawyers.
A WHOIS record is actually one of the most practical documents on the internet once you know how to read it. It tells you when a domain was born, when it will expire, who manages it, whether it is protected from theft, and where its DNS lives. This guide walks through it field by field, explains why owner details are usually hidden, and shows what to do with what you find.
WHOIS and RDAP: the same idea, a better format
WHOIS is the old, text-based way of looking up domain registration data. It dates back to the early internet, and every registry formatted its answers slightly differently. RDAP (Registration Data Access Protocol) is its modern replacement: the same kind of information, but in a standard, structured format.
The WHOIS Lookup uses RDAP. It finds the official registry responsible for each domain extension through IANA's directory, for example Verisign for .com, and asks it directly, so you get the registry's own record rather than a third-party copy.
Reading the record, field by field
Registrar
The company you, or the owner, bought the domain through and pay to renew it, such as GoDaddy, Namecheap or Cloudflare. This is who you contact about renewals, transfers and account access. It is also who you report abuse to if a domain is used for phishing or spam.
Creation date
When the current registration began. This is how domain age is calculated. A domain created years ago has a history; one created last week does not. For a quick age calculation in years and months, the Domain Age Checker shows it directly, and our guide on checking whether a website is legit explains why a very young domain is a useful warning sign for shops.
One nuance: if a domain expired and someone registered it again later, the creation date starts from the new registration.
Updated date
The last time something in the record changed, such as name servers, contact details or status. A very recent update on a domain you manage that you did not change deserves a closer look.
Expiry date
When the registration runs out unless it is renewed. This is the date that matters most for your own domains. If it passes without renewal, your website and email stop working, and after a grace period, anyone can register the name.
Name servers
The DNS servers responsible for the domain. Whoever runs them is where every DNS change must be made. If you edit records at your registrar but the name servers point at Cloudflare, nothing will change; our guide to DNS records explained covers this common trap.
DNSSEC
Shows whether the domain's DNS answers are cryptographically signed, which protects visitors from forged DNS responses. "Signed" or "unsigned" is shown in the record.
Domain status codes, decoded
Status codes are the most confusing part of the record and some of the most useful. They come in two families: client codes set by the registrar, and server codes set by the registry.
| Status | What it means | Should you worry? |
|---|---|---|
ok or active | No restrictions; normal state | No |
clientTransferProhibited | Transfers to another registrar are blocked | No, it is a security lock |
clientUpdateProhibited | Record changes are blocked | No, extra protection |
clientDeleteProhibited | Deletion is blocked | No, extra protection |
serverTransferProhibited | The registry has blocked transfers | Usually protective; ask the registrar if unexpected |
autoRenewPeriod | Recently auto-renewed | No |
clientHold | The registrar has taken the domain off the internet | Yes, the site will not resolve |
serverHold | The registry has taken it off the internet | Yes, often legal or payment issues |
redemptionPeriod | Expired and scheduled for deletion; can still be recovered at a cost | Yes, act immediately |
pendingDelete | About to be released | Yes, usually too late to recover |
The most common one by far, clientTransferProhibited, is simply a lock that stops someone moving your domain to another registrar without your permission. Keep it on. Remove it only when you are deliberately transferring the domain yourself.
Why the owner's name is hidden
Before 2018, WHOIS records commonly showed the owner's name, email, phone number and home address. Spammers harvested them by the million. Since the GDPR came into force, registries and registrars redact personal contact details for most domains, and many owners also use privacy services.
So "REDACTED FOR PRIVACY" is normal, not suspicious. If you need to contact an owner, look for a contact page on the website, or use the contact form many registrars provide, which forwards your message without revealing the owner's address.
What you can do with a WHOIS record
Protect your own domains
Look up every domain your business relies on, including old ones that still receive email, and check:
- The expiry date is not coming up soon.
- Auto-renew is enabled at the registrar, with a valid payment card.
clientTransferProhibitedis on.- The name servers are the ones you expect.
Losing a domain by accident is one of the most painful and avoidable problems in running a website.
Troubleshoot a broken site
If a site suddenly stops working, check the record for an expiry date that has passed or a clientHold status. Then check that the name servers are correct. If the record looks healthy, the next step is testing the site itself from around the world with the Ping & Uptime Checker.
Research before buying a domain
If a domain you want is taken, the record shows when it expires. Many domains are renewed, but if you see an upcoming expiry with a redemptionPeriod or pendingDelete status, the name may become available.
Report abuse
For phishing or spam domains, the registrar field tells you who to report to. Most registrars have an abuse contact or form.
Plan a registrar transfer
Moving a domain to a new registrar goes smoothly when you prepare. Check the record first: the domain should not be close to expiry, and clientTransferProhibited must be removed at the current registrar before the transfer starts. Many registrars also block transfers for 60 days after a registration or a change of owner details. Once the transfer completes, look the domain up again to confirm the new registrar appears and the lock is back on.
When a record cannot be found
Some country-code extensions do not offer RDAP, and for those the lookup may not return a record. A "not found" response can also mean the domain is not registered at all, which you can confirm by trying to buy it at any registrar.
Five minutes that prevent the worst day
Put a reminder in your calendar twice a year: look up your domains, check expiry dates, locks and name servers, and fix anything unexpected. It takes five minutes with the WHOIS Lookup, and it protects you from the worst kind of outage, the one where your website and email vanish because a renewal quietly failed.
