What is WHOIS Lookup?
WHOIS is an internet protocol used to query registration databases for domain names, IP addresses, and autonomous systems. When you register a domain, your registrar submits your details to the authoritative registry for that TLD. WHOIS lookup retrieves this publicly available registration information including registrar name, registration and expiry dates, name servers, and domain age.
ToolsNovaHub uses RDAP (Registration Data Access Protocol), the modern JSON-based successor to legacy WHOIS. RDAP provides structured, standardised responses over HTTPS with better international character support and consistent field names. It is now used by all major registries including Verisign for .com and .net domains.
WHOIS data is used by security researchers to identify domain owners behind phishing sites, businesses to check domain history before purchase, administrators to verify name server configuration, and legal teams for intellectual property matters.
How to Use It?
Enter a domain name without http:// or www and click Lookup →. The tool queries the authoritative RDAP endpoint directly and shows registrar, creation and expiry dates, domain age, name servers, and country. The Raw RDAP Data section shows the complete structured JSON response. Use ❏ Copy Raw to copy it.
💡 Real-World Example
Example: A buyer is considering purchasing a domain that's "for sale" via a third party. A WHOIS Lookup shows the domain was registered only 3 months ago and expires in 9 months — a red flag suggesting it isn't an aged, established domain as the seller claimed.
🔄 The Domain Lifecycle
Every domain name moves through a predictable lifecycle from registration to potential expiry. Understanding this cycle helps you interpret WHOIS dates correctly and avoid accidentally losing a domain:
| Stage | Typical Duration | What Happens |
|---|
| Active / Registered | 1–10 years (renewable) | Domain is live and fully under owner's control |
| Expired (grace period) | 0–45 days after expiry | Owner can still renew at normal price; site may be suspended |
| Redemption Period | ~30 days | Domain locked; owner can reclaim only by paying a steep redemption fee |
| Pending Delete | ~5 days | Domain is queued for release; cannot be renewed by anyone |
| Available / Re-registration | — | Domain released back to the public — anyone can register it |
This tool's Domain Timeline visualises where a domain currently sits within its CURRENT registration period (created → today → expires) — useful for spotting domains nearing renewal.
🔐 Domain Status Codes Explained
The "Status" field uses standardised EPP (Extensible Provisioning Protocol) codes. These often LOOK alarming but are usually completely normal:
clientTransferProhibited
The DEFAULT protective lock most registrars apply automatically. Prevents unauthorized transfers to another registrar. Completely normal — the owner can remove this themselves at any time.
clientUpdateProhibited / clientDeleteProhibited
Similar protective locks against accidental changes/deletion, set by the registrar at the owner's request or by default. Normal for actively-managed domains.
pendingDelete
⚠️ The domain has expired and is in its final countdown before being released to the public — typically 5 days remaining.
redemptionPeriod
⚠️ The domain has expired and entered the ~30-day redemption window. The original owner can still recover it, but usually only by paying a redemption fee (often $80–$200) to their registrar.
serverHold
⚠️ Applied by the REGISTRY (not the owner) — often due to a legal dispute, court order, or policy violation. The domain will not resolve while this status is active.
active / ok
No restrictions — the domain is in normal good standing.
⏳ The Redemption Period — Why It Matters
When a domain expires and isn't renewed within its initial grace period (typically 0–45 days, varies by registrar), it enters the Redemption Grace Period (RGP) — roughly 30 days during which:
- The domain is taken OFFLINE (website and email stop working)
- DNS records may be removed by the registry
- The ORIGINAL owner can still recover it, but typically must pay a substantial redemption fee on top of the normal renewal price — often 10–20× the standard renewal cost
- No one else can register the domain during this period
After redemption period ends, the domain enters pendingDelete (about 5 days) and is then released for anyone to register — including domain-squatters who actively monitor expiring domains. Lesson: always set renewal reminders well before the "Expires On" date shown by this tool — don't rely on the grace/redemption periods as a safety net.
⚖️ Registrar vs Registry — What's the Difference?
| Registrar | Registry |
|---|
| What it is | The company YOU buy/manage your domain through | The organisation that operates the entire TLD (e.g. all .com domains) |
| Examples | GoDaddy, Namecheap, Google Domains, BigRock | Verisign (.com/.net), PIR (.org), NIXI (.in) |
| Who you contact for renewal/transfer | ✅ Registrar | ❌ Not directly — registries don't deal with end customers |
| Who sets the EPP status codes | Most client* statuses (clientTransferProhibited, etc.) | Most server* statuses (serverHold, pendingDelete) and overall TLD policy |
| Shown in this tool as | "Registrar Information" card | "RDAP Source" field (shows which registry's RDAP server responded) |
Think of it like renting an apartment: the registrar is your landlord (who you pay rent to and call for issues), while the registry is the city government that maintains the overall zoning rules for the whole neighbourhood (the TLD).
📊 Understanding Your Results
Status
"clientTransferProhibited" is the default protective lock on most domains — it does NOT mean anything is wrong. "pendingDelete" or "redemptionPeriod" indicates the domain has expired and is being released.
Created On / Expires On
Created On shows the ORIGINAL registration date (domain age = trustworthiness signal). Expires On is the current registration period's end — renewing extends this date.
Registrar
The company the domain is registered THROUGH (e.g. GoDaddy, Namecheap) — not necessarily who owns or uses the domain.
Name Servers
Show which DNS provider controls the domain's records. A mismatch between expected and actual nameservers can indicate a hijacked or recently-transferred domain.
Domain Age
Calculated from the Created On date to today. Older domains (5+ years) generally carry more trust/SEO value than brand-new registrations.
⚠️ Common Errors & What They Mean
❌ "Domain not found or RDAP not supported"
Either the domain doesn't exist/is misspelled, OR it uses a country-code TLD (ccTLD) that hasn't migrated to RDAP yet (some older ccTLDs still only support legacy WHOIS).
⚠️ Registrant info shows "REDACTED FOR PRIVACY"
This is normal and expected since GDPR (2018) — almost all registrars now redact personal contact details from public WHOIS by default.
🔎 Name servers don't match what I configured
DNS/nameserver changes at the registrar can take a few hours to reflect in RDAP. If you JUST changed nameservers, wait and re-check.
💡 Advanced Tips
💰
Evaluating a domain purchase
Check Domain Age (older = more established) and Expires On (avoid domains expiring very soon — you may need to negotiate a transfer before expiry).
⚠️
Spotting phishing domains
Domains created very recently (days/weeks ago) that closely mimic a brand name are a major red flag — check Domain Age before trusting an unfamiliar lookalike domain.
🔎
Cross-reference with DNS
If the name servers shown here don't match a major provider (Cloudflare, AWS Route53, etc.) for a business you'd expect to use one, investigate further with
DNS Lookup.
⏰
Set renewal reminders
Note the Expires On date and set a calendar reminder 30 days before — domains that lapse can be snapped up by squatters within hours of expiry.
📜 WHOIS vs RDAP vs DNS Lookup
| Tool | Shows | Best For |
|---|
| WHOIS/RDAP (this tool) | Registrar, dates, registration status, nameservers | "Who owns/controls this domain and until when?" |
| DNS Lookup | Live A/MX/TXT/NS records | "Where does this domain actually point to right now?" |
| IP Lookup | Hosting location of the IP a domain resolves to | "Where is this server physically/network-wise?" |
FAQ
Why is registrant contact info hidden? +
Since GDPR (2018), most registrars redact personal contact data from public WHOIS. You see 'Data Redacted for Privacy'. Law enforcement can request this through legal channels.
What does 'clientTransferProhibited' mean? +
The registrar has locked the domain against outgoing transfers. It is the default active status protecting against unauthorised transfer.
How do I check if a domain expires soon? +
The Expires On field shows the exact expiry date. If within 30 days, renew immediately to avoid losing the domain.
Why do results differ between WHOIS tools? +
Different tools query different sources. Our tool queries the authoritative registry RDAP endpoint directly for the most accurate current data.
What is RDAP vs legacy WHOIS? +
Legacy WHOIS used unformatted text over port 43. RDAP uses HTTPS with structured JSON, standardised field names, and access controls. All major registries have migrated to RDAP.