WHOIS and RDAP: Domain Registration Lookup Guide
Published November 26, 2025 · Updated July 18, 2026 · 7 min read
WHOIS and RDAP: Understanding Domain Registration Data
WHOIS is the legacy query protocol people still use as a general name for domain registration lookups. RDAP is its standardized, web-based replacement. ICANN ended the contractual requirement for registries and registrars to provide WHOIS services for generic top-level domains on January 28, 2025.
Some country-code registries still expose legacy WHOIS, so a current checker may use RDAP first and fall back to WHOIS when needed.
What Registration Data Can Show
Run an RDAP or WHOIS lookup and you might see:
- Redacted or proxy contact data, depending on registry and registrar policy
- When the domain was first registered
- When it expires
- What registrar handles it (GoDaddy, Namecheap, etc.)
- The nameservers pointing the domain to its hosting
I say "might" because privacy has changed a lot. More on that in a second.
How to Look Up Registration Data
The quickest way is to use DomainOptic. We query RDAP first, use conservative DNS and WHOIS fallbacks when needed, and show an availability result. The registrar is the final authority.
Legacy systems may still support a terminal query:
\\\bash
whois example.com
\\\
You can also use ICANN Lookup for generic top-level domain registration data.
The Privacy Problem
Here is where WHOIS gets complicated. Back in the day, every domain owner's personal info was public. Your name, your address, your phone number - all visible to anyone who looked.
People hated this. Spammers scraped WHOIS databases to send junk mail. Scammers used the info for social engineering. Domain owners got harassed.
So registrars started offering "WHOIS privacy" - they replace your real info with their proxy details. Now when someone looks you up, they see the registrar's contact info instead of yours.
Then GDPR happened in 2018. European privacy regulations meant that personal data for EU registrants had to be redacted by default. Most WHOIS lookups now show "REDACTED FOR PRIVACY" where personal details used to be.
If you need to contact a domain owner today, you usually have to go through the registrar's contact form. They forward your message without revealing the owner's actual email.
When Registration Data Helps
Even with privacy protections, registration data is useful for:
Checking lifecycle dates. Registration and update dates can inform due diligence, but they do not prove ownership history or explain why a record changed.
Finding expiration dates. If a domain you want is taken, check when it expires. You might be able to snag it when the current owner forgets to renew.
Investigating sketchy sites. Security researchers can compare registrar, nameserver, status, and registration-date patterns across suspicious domains. Registration data alone does not identify the operator.
Protecting your brand. Registration status and registrar information can help you find the appropriate abuse, contact, or dispute process for a confusingly similar domain.
Common Status Codes
RDAP and legacy WHOIS responses can show status codes that tell you what the domain can and cannot do:
- clientTransferProhibited - owner locked it so nobody can transfer it away
- pendingDelete - being deleted, will be available soon
- redemptionPeriod - expired but owner can still reclaim it for a fee
The exact codes vary, but anything with "prohibited" means that action is blocked, and anything with "pending" means something is about to happen.
FAQ
Is looking up WHOIS free?
Public RDAP and WHOIS lookup tools are normally free. A registrar may charge for separate brokerage, monitoring, or historical-data services.
Can I hide my own WHOIS info?
Often, but availability and pricing depend on the registrar, registry, and top-level domain. Check whether your registrar offers privacy or proxy service for your specific domain and review what data remains public through RDAP.
How current is registration data?
It reflects data returned by the registry or registrar at lookup time, but it is not a reservation. Always confirm availability, status, and price at registrar checkout.
Should public registration data be my trust signal?
No. Verify a business through its website, legal disclosures, support channels, and independent reputation signals. Registration data is commonly redacted and is not proof of legitimacy.
Look up registration data for any domain →
Check domain availability