WHOIS Lookup Tool

Look up registration details for any domain — registrar, owner, expiry date, nameservers and status. Free, real-time, no account needed.

Enter any domain name to retrieve its WHOIS registration record instantly.

Real-time WHOIS query

Not stored or logged

No sign-up needed

What This Tool Does

This WHOIS lookup queries the authoritative WHOIS server for the relevant TLD in real time and returns the full registration record for any domain. Results are never cached — every lookup is a live query. The tool automatically follows registrar-level referrals to retrieve the most detailed record available, parses the raw output into structured fields, and presents both a clean parsed view and the original raw WHOIS response for full transparency.

Registration Dates

Exact creation, last update and expiry dates with a live countdown showing days remaining or elapsed since expiry.

Registrar Details

The registrar name with a direct link to the registrar's website for transfers, renewals or support.

Domain Status Codes

All EPP status codes showing current administrative state — lock status, pending operations and more.

Nameservers

All authoritative nameservers currently configured for the domain, showing which DNS provider holds authority.

How to Read Domain Status Codes

Status codes define the current administrative state of a domain registration under the EPP (Extensible Provisioning Protocol) standard. The most common codes you will encounter:

Status code	What it means
clientTransferProhibited	Registrar lock against transfer to another registrar. Standard protective practice — does not indicate a problem.
clientUpdateProhibited	Changes to the registration record are locked. Often applied alongside transfer locks on high-value domains.
serverTransferProhibited	Registry-level lock, typically applied during ICANN's mandatory 60-day post-registration window.
pendingDelete	Domain has expired, redemption window has closed, and it is queued for deletion. Will soon enter the public registration pool.
redemptionPeriod	Registration has lapsed but the original owner can still recover it at a premium fee before deletion proceeds.
pendingTransfer	A transfer to a new registrar is in progress, typically completing within 5–7 days.

Tips for Using WHOIS Data

Expiry countdown — the days-remaining badge on the registration card tells you exactly where a domain sits today. Check it well before the renewal deadline, as the multi-stage grace period after expiry includes premium recovery fees.
Redacted contacts — "Redacted for privacy" is entirely normal for personal registrations under GDPR and similar regulations. It does not indicate anything suspicious about the domain.
Nameservers vs hosting — the nameservers here show which DNS provider holds authority. The actual web server may be hosted elsewhere entirely. Use DNS Lookup to retrieve the full A, AAAA and MX records.
DNSSEC unsigned — most domains are unsigned. DNSSEC adds cryptographic signature verification to DNS responses but is not required for normal operation.
No data returned — some registries restrict public WHOIS access. If nothing appears, confirm the domain exists first with a DNS Lookup.

Frequently Asked Questions

What does a WHOIS record actually contain?

A WHOIS record is the official registration profile maintained by the domain registry. It contains the registrar name, the exact dates of registration, last update and expiry, the authoritative nameservers, and EPP status codes governing which administrative actions are currently permitted. It traditionally also included registrant contact details such as name, organisation, email address and phone number, though nearly all of these fields are now redacted for personal registrations under GDPR and equivalent privacy regulations.

The data you see here is fetched live from the authoritative WHOIS server for the domain's TLD — not from a cached database — so it reflects the current state of the registration at the moment you run the lookup. The raw WHOIS response is also available in full below the parsed view for cases where the structured extraction misses a field that appears in the raw text.

Why are registrant contact details redacted?

Registrar-applied privacy protection became the default for almost all personal domain registrations after GDPR came into force in May 2018, and equivalent privacy regulations have followed in other jurisdictions. The real registrant information — name, address, phone number and email — is held securely by the registrar and only disclosed through formal legal channels: trademark disputes filed through ICANN's UDRP process, law enforcement requests with appropriate legal authority, or ICANN arbitration proceedings.

Seeing "Redacted for privacy" in every contact field is completely normal and does not suggest anything suspicious about the domain or its owner. Before GDPR, WHOIS showed all contact information publicly, which led to significant spam, harassment and social engineering abuse — privacy protection has substantially improved security for domain registrants. Businesses registering domains for commercial purposes often still show an organisation name, which is displayed when available.

What is the domain expiry lifecycle after a registration lapses?

A domain does not disappear the moment it expires. Most registries enforce a multi-stage grace period sequence. First comes an auto-renew grace window (typically 0–45 days) where the original owner can renew at the standard renewal price — if the registrar has auto-renew enabled this triggers automatically during this period. Next is the redemption period (approximately 30 days) where the domain can still be recovered but at a significant premium recovery fee charged by the registrar, often $100–300 on top of the renewal cost.

After redemption comes a short pending-delete window (around 5 days) during which the domain cannot be renewed or recovered by anyone. Finally the domain is released back into the public pool and becomes available for registration by anyone. The expiry countdown shown in the results tells you exactly where any domain sits in this cycle today — if it shows "Expired Xd ago", that indicates how far into the grace period the domain currently is.

What do domain status codes like clientTransferProhibited mean?

Domain status codes follow the EPP (Extensible Provisioning Protocol) standard used by most registries worldwide. They define what administrative operations are currently permitted on the registration. clientTransferProhibited means the registrar has applied a transfer lock — the domain cannot be moved to a different registrar without the current registrar first unlocking it. This is standard practice for protecting domains against unauthorised transfer and does not indicate any problem.

clientUpdateProhibited locks changes to the registration record itself. serverTransferProhibited is a registry-level lock often automatically applied during ICANN's mandatory 60-day cooling-off period after initial registration or after a registrar transfer completes. pendingDelete means the registration has fully lapsed and is awaiting deletion. redemptionPeriod means it is in the recoverable-but-expensive window before deletion. Multiple status codes can be active simultaneously and are all shown in the results.

What do nameservers in WHOIS tell me?

The nameservers listed in WHOIS show which DNS provider currently holds authoritative control over the domain's DNS zone — meaning all requests to resolve any hostname under the domain are answered by these servers. Changing nameservers transfers DNS authority from one provider to another and is the most impactful change you can make in a domain's configuration, as it redirects all DNS queries for the domain.

Nameservers ending in cloudflare.com indicate DNS is managed through Cloudflare. awsdns.com entries indicate Amazon Route 53. domaincontrol.com is GoDaddy's nameserver. The nameservers in WHOIS show where DNS authority sits — not necessarily where the website, email or other services are hosted. Use our DNS Lookup tool to query those nameservers and see the actual A, AAAA, MX and TXT records they serve.

What is DNSSEC and why does it appear in WHOIS?

DNSSEC (Domain Name System Security Extensions) adds cryptographic signatures to DNS responses, allowing resolvers to verify that records have not been tampered with or forged in transit. The DNSSEC field in WHOIS shows whether the domain's DNS zone has been signed. A value of unsigned is the norm for most domains and does not indicate a problem — DNSSEC adoption remains relatively low outside certain industries and government domains.

signedDelegation means DNSSEC is active and the registry has a DS record published, completing the chain of trust from root to TLD to domain. DNSSEC does not encrypt DNS traffic — it validates integrity and authenticity, protecting against cache poisoning attacks where a malicious resolver could redirect users to fraudulent servers. If you operate your own DNS and want to enable DNSSEC, the process depends on your DNS provider and requires publishing DS records at the registrar level after signing the zone.

Why does a WHOIS lookup sometimes return no data?

Several situations can produce an empty WHOIS result. Some registries — particularly country-code TLDs — restrict or entirely block public WHOIS access, either publishing data only through a web interface or requiring formal requests. A domain that was very recently registered may take a short time to propagate into the registry's WHOIS system. A typo in the domain name, or querying a subdomain (e.g. mail.example.com) instead of the registrable domain (example.com), will return nothing since WHOIS only tracks the registrable domain itself.

If a WHOIS lookup returns nothing, confirm the domain is actually registered by running a DNS Lookup first — if DNS records exist the domain is registered even if WHOIS data is restricted. The tool also queries IANA's bootstrap data to find the correct WHOIS server for each TLD, but for very new or obscure TLDs this lookup can occasionally fail to identify the right endpoint.

Can I look up any domain including subdomains and full URLs?

Yes — you can paste a full URL (e.g. https://www.example.com/page), a bare domain (example.com), or a subdomain (blog.example.com) and the tool automatically extracts the registrable domain before querying. The tool supports multi-part TLDs such as .co.uk, .com.au and .co.nz, correctly reducing shop.example.co.uk to example.co.uk for the WHOIS query.

WHOIS only tracks registration at the registrable domain level — there is no separate WHOIS record for individual subdomains. If you need to investigate the DNS configuration for a specific subdomain, use the DNS Lookup tool which can query any hostname including subdomains and return all associated records.

Is this WHOIS tool free and does it log queries?

Completely free, no account required, no query limits. Every lookup queries the authoritative WHOIS server directly in real time. Results are never cached on Convixy's servers — each submission is a fresh live query. Your queries are not stored in a database, not associated with any user profile, and not shared with third parties.

Standard web server access logs record the URL of each page request — which includes the domain you searched as a URL query parameter — for security and uptime monitoring purposes. These logs are periodically rotated and are not used for user tracking, profiling or advertising. The raw WHOIS response can be copied to your clipboard using the "Copy Raw WHOIS" button in the raw response panel.