How to Read a WHOIS Result
What information a domain WHOIS contains, what each field means and how to check expiry, registrar and nameservers.
What Is WHOIS?
WHOIS is a protocol (and database) that contains information about domain owners. Every registered domain creates a WHOIS record with contact details, dates, registrar and nameservers.
There are three distinct roles in WHOIS that are often confused:
- Registry: The organisation that manages a TLD — e.g. Verisign for
.com, Nominet for.uk. It holds the "master list" of NS records for every domain under that TLD. - Registrar: The company through which the domain was registered — e.g. GoDaddy, Namecheap, Cloudflare Registrar. Manages the relationship with the owner.
- Registrant: The domain owner — the person or company that purchased it.
What a WHOIS Result Contains
| Field | What it means |
|---|---|
| Registrant | The domain owner (name, email, phone — often masked for GDPR) |
| Registrar | The company through which the domain was registered (GoDaddy, Namecheap, etc.) |
| Created Date | When the domain was first registered |
| Expiry Date | When it expires — after this it enters a grace period before being released |
| Updated Date | Last WHOIS record update |
| Name Servers | The DNS servers serving this domain |
| Status | Domain status (clientTransferProhibited, redemptionPeriod, etc.) |
Domain Status Codes — What They Mean
The status code in WHOIS tells you a lot about the current state of the domain:
- clientTransferProhibited — The domain cannot be transferred to another registrar (common, protective)
- clientDeleteProhibited — Cannot be deleted — typically for premium/critical domains
- clientUpdateProhibited — WHOIS details cannot be changed without removing the lock
- pendingTransfer — Transfer in progress (takes 5–7 days)
- redemptionPeriod — Domain has expired but is in a grace period (30–90 days, renewal with extra cost)
- pendingDelete — Being prepared for release — cannot be renewed
redemptionPeriod, renew it immediately — once it enters pendingDelete there is no recovery.
The Domain Life Cycle
It is worth understanding what happens after a domain expires:
- Active: Normal operation.
- Expired: The expiry date has passed. The domain stops working. The owner can renew at the standard price for ~30 days (varies by TLD).
- Redemption Period: ~30–45 days. Renewal with extra cost (€50–200 additional). Still possible but expensive.
- Pending Delete: ~5 days. Nothing can be done — the domain is being deleted.
- Available: The domain is released and can be registered by anyone.
How to Use WHOIS Results
Checking if a domain is available
If no WHOIS record is returned, the domain is probably available. Always confirm availability with a registrar as well.
Tracking when a competitor's domain expires
Many people monitor domains they want to acquire — if they expire and are not renewed, you can register them. There are also "domain backorder" services that do this automatically.
Finding the registrar for a transfer
If you purchased a website or business and want to transfer the domain, WHOIS tells you where it is and who to contact. For a domain transfer you also need the EPP/Auth code (authorization code) — request it from the current registrar.
Checking nameservers
Especially useful when changing DNS providers — you confirm that the new nameservers appear in the registry. Note: updating nameservers in WHOIS/registry and DNS propagation are two separate things.
Check WHOIS data for any domain:
→ Domain WHOIS CheckerGDPR and WHOIS Privacy
Since 2018 (GDPR), personal details in WHOIS are automatically hidden for domains owned by Europeans. Many registrars also offer WHOIS Privacy (or Domain Privacy) service that replaces your details with a proxy email/address.
Important: WHOIS privacy does not hide the domain from WHOIS — it only hides contact details. The domain still appears as registered, with registrar, dates and nameservers visible.
When to Use WHOIS
Practical uses of WHOIS:
- Buying a domain: Check whether it's available and when it expires if taken
- Changing DNS: Confirm that the new nameservers appear in the registry
- Security audit: Verify that a domain actually belongs to who claims to own it
- Domain monitoring: Watch domains you are interested in for changes
- Anti-phishing: Check if a suspicious domain was recently registered (typosquatting indicator)