NameRobo
Free WHOIS Lookup Tool
What WHOIS still tells you in 2026
The WHOIS protocol was designed in the early 1980s to answer a simple operational question: who is responsible for this network address? For domains, it evolved into a public registry of registrant names, contact emails, mailing addresses, and lifecycle dates. That contact-data layer has been substantially stripped away by GDPR-era privacy regulations — most lookups now return placeholder redaction notices instead of actual registrant details. What remains is still genuinely useful: registrar of record, creation and expiration dates, last-updated timestamp, name server records, and EPP status codes that tell you whether the domain is locked, transferring, or pending deletion.
Reading what the lookup returns
WHOIS responses contain two layers of data: registry data (from the authoritative TLD registry, like Verisign for .com) and registrar data (from the company where the domain was actually purchased). These can disagree — the registry record updates on a propagation delay, while the registrar record may have more recent details. EPP status codes like "clientTransferProhibited" mean the domain is locked against outbound transfers, which is the normal state for active domains. "pendingDelete" or "redemptionPeriod" codes signal an expiring or recently expired domain. Two WHOIS tools pointing to different servers can return different data for the same domain, which is normal rather than a sign of error.
When RDAP is the better starting point
RDAP (Registration Data Access Protocol) is the IETF-standard replacement for WHOIS, delivering the same registration data as structured JSON over HTTPS rather than plain text over TCP. It is increasingly the default lookup method for tooling and automation because the output schema is consistent across registries — no parsing logic for registrar-specific text formats. For manual one-off lookups, either protocol works. For scripted checks, bulk domain monitoring, or any integration that consumes registration data, RDAP is significantly more reliable. If a TLD does not yet expose an RDAP endpoint, fall back to WHOIS; both protocols may return incomplete data for country-code TLDs with restrictive registry policies.
Common questions
Why is so much WHOIS data redacted now?
GDPR, which took effect in 2018, required registrars to limit public disclosure of personal data for EU-based registrants. Most major registrars then extended the same redaction globally rather than implement jurisdiction-specific logic. ICANN has been developing a formal access model for legitimate use cases, but as of 2026 the default for most consumer and small-business domains is redacted contact data.
What's the difference between WHOIS and RDAP?
WHOIS is a plain-text protocol over TCP port 43 with no standard output format. RDAP is its HTTPS-based JSON replacement with a consistent schema defined by IETF RFCs. They return the same underlying data, but RDAP is far more consistent and machine-readable across registries. RDAP also supports authentication for accessing non-redacted data in some registries.
Can I find the actual owner of a domain anymore?
For most domains registered by individuals or small businesses through major registrars, contact data is redacted by default. Registrars are required to offer a relay mechanism (a contact form or anonymized email) so legitimate parties can reach domain owners. For corporate domains, the registrant organization name often remains visible even when contact details are redacted.
Why do two WHOIS tools sometimes disagree?
WHOIS tools query different servers — some query the TLD registry directly, others query the registrar. Registry and registrar records update on different schedules and contain slightly different fields. Additionally, some WHOIS tools cache results; a freshly expired or newly transferred domain may show different states depending on when each tool last queried the authoritative source.