Domain Dictionary

Understanding WHOIS: What Registration Records Reveal About a Domain

6 min read

Executive summary

WHOIS is the public registration record for a domain. Even when owner contact details are redacted for privacy, the record still reveals creation date, expiry date, registrar, status codes and name servers — all valuable due-diligence signals.

Introduction

WHOIS was designed when the internet was small enough that publishing the owner of every domain seemed reasonable. Privacy regulation changed that, but the record remains the authoritative source for a domain's registration facts.

Why it matters

Registration data tells you how long a domain has existed, whether it is locked against transfer, how soon it expires and whether it is caught in a redemption or pending-delete state. Every one of these affects what you can buy and when.

What a WHOIS record contains

Creation date — when the domain was first registered.
Updated date — the last change to the registration.
Expiry date — when the current term ends.
Registrar — the company managing the registration.
Status codes — EPP codes such as clientTransferProhibited, redemptionPeriod or pendingDelete.
Name servers — where the DNS is hosted.
Registrant details — often redacted or replaced by a privacy service.

Reading status codes

Status codes are the fastest way to understand where a domain sits in its lifecycle. clientTransferProhibited simply means transfer lock is on — normal and healthy. redemptionPeriod means it has already expired. pendingDelete means it will drop shortly and cannot currently be registered.

Why owner data is often hidden

Under GDPR and equivalent frameworks, registrars redact personal data for most registrants. Many owners also purchase privacy services. Redaction is not a red flag; it is now the default.

RDAP, the modern successor

RDAP returns the same information in a structured, standardised format and is progressively replacing legacy WHOIS across registries.

Best practices

Read status codes before assuming a domain is available.
Compare creation date with archive history — mismatches suggest a drop and re-registration.
Note the expiry date when planning a backorder.
Use the registrar's own contact form rather than scraping redacted data.
Re-check WHOIS immediately before bidding; lifecycle states move daily.

Common mistakes

Treating a redacted record as evidence of wrongdoing.
Assuming creation date equals continuous ownership.
Missing a pendingDelete status and bidding anyway.
Relying on cached third-party WHOIS data that is weeks old.
Contacting a registrant through unsolicited channels in breach of privacy rules.

Frequently asked questions

Why is the owner name hidden in WHOIS?

Privacy regulation and registrar privacy services redact personal data by default for most registrations.

Does WHOIS creation date prove domain age?

It proves when the current registration record began. A domain that dropped and was re-registered shows the newer date.

What is RDAP?

A structured, standardised replacement for WHOIS that returns the same registration data in JSON.