WHOIS Lookup
Domain registrar, dates, status and name servers via RDAP. Runs in your browser.
About this whois lookup
This WHOIS lookup shows who a domain is registered with, when it was created, when it expires and how it is locked, straight from the official registry. It also looks up IP address blocks and AS numbers, so you can find the network behind an address and its abuse contact.
It uses RDAP, the Registration Data Access Protocol that ICANN made the official source for generic top-level domains in January 2025, replacing the old text-based WHOIS. RDAP answers in structured JSON over HTTPS, so the page can show clean fields, explain every status code and point out what has been redacted for privacy.
Your browser asks the registry directly: Verisign for .com and .net, Public Interest Registry for .org, a regional internet registry for IP addresses. There is no middleman server, and the page names the registry it is about to contact.
Features
Registrar, dates and domain age
Registrar name and IANA ID, registration date with the domain's age in years and months, last change, and expiry with a countdown that turns red under 30 days.
Every status code explained
clientTransferProhibited, serverHold, redemptionPeriod, pendingDelete and the rest each get a plain sentence on what it means for the domain and what you can do.
Name servers and DNSSEC
The name servers the registry delegates to, each linking to a DNS lookup, plus whether the domain is DNSSEC-signed and its DS key tags and algorithms.
Abuse contact
The registrar's or network's abuse email and phone, which is where reports of phishing, spam and malware should go.
IP and ASN records
For an IP address: the network name, range, CIDR, type, country, and owner contacts from ARIN, RIPE NCC, APNIC, LACNIC or AFRINIC. For an AS number: its name, holder and registration date.
How to use the whois lookup
- 1Enter a domain, IP address or AS number.
- 2The page asks the official registry over RDAP.
- 3Read the registrar, dates, status codes, name servers and abuse contact.
When to use it
Checking when a domain expires
Before buying a domain from someone, or when a domain you rely on looks abandoned, the expiry date and status show whether it is about to lapse. redemptionPeriod or pendingDelete means it is already on its way out.
Moving a domain to another registrar
A transfer fails if clientTransferProhibited is set, and registrars also refuse domains that were registered or transferred very recently. The status list and dates show both before you start.
Reporting phishing or spam
Look up the domain in the phishing link to get the registrar's abuse email. If the link is full of %2F-style codes, decode the URL first to see the real domain. For the server sending the spam, look up its IP to reach the hosting network instead.
What is the difference between WHOIS and RDAP?
WHOIS dates from the 1980s. You connect to port 43, send a name and get back free-form text, laid out differently by every registry. It has no standard format, no encryption and no way to say "this field was removed for privacy".
RDAP (RFC 9082 and RFC 9083) fixes those problems. It runs over HTTPS, returns JSON with defined field names, supports internationalised domain names, and has a standard way to mark redacted data (RFC 9537). IANA publishes a bootstrap list of which RDAP server handles each top-level domain and each IP range, which is how this page knows where to ask.
Why is the domain owner's information hidden?
Since May 2018, when the GDPR took effect, ICANN's registration data policy has required registries and registrars to stop publishing personal details of domain holders. Name, street address, phone and email are now redacted for most registrations, everywhere in the world.
Redaction is normal and is not a warning sign by itself. To contact an owner, use the registrar's contact form or relay email, which forwards your message without revealing their address. Organisations sometimes keep their company name visible, and the registry record for .com and .net is "thin" anyway: the registrar holds the details, and this page links to the registrar's RDAP record when the registry provides it.
What do domain status codes mean?
Status codes come from EPP, the protocol registrars use to manage domains. Codes starting with client are set by the registrar; server codes are set by the registry, which outranks the registrar.
- ok or active: nothing pending, the domain works normally.
- clientTransferProhibited: a lock against hijacking. Normal. Your registrar removes it on request before a transfer.
- clientHold or serverHold: the domain is pulled from DNS and does not resolve. Often unpaid or unverified contact details.
- autoRenewPeriod: the registry renewed it at expiry; the registrar has up to 45 days to cancel.
- redemptionPeriod: expired and deleted, but restorable by the old owner for about 30 days, usually for a fee.
Which domains does this lookup cover?
All generic TLDs must run RDAP, and many country codes do too. This page can contact 23 registry servers, which together cover .com, .net, .org, .info, .io, .ai, .me, .xyz, .app, .dev, .uk, .top, .online, .shop, .biz, .tv, .nl, .ca, .au, .in, .fr, .br and hundreds of newer extensions, plus every IP address and AS number.
Some country codes, such as .de, .jp, .cn and .bd, do not publish RDAP at all. For those the tool links to the IANA page that lists the registry's own WHOIS service. For any other extension whose RDAP server is not on the list, you get a link that opens the official record in a new tab.
Why use Mavros
| Mavros | Typical upload sites | |
|---|---|---|
| Data source | The registry's own RDAP server, called from your browser | A cached copy on the site's server |
| Status codes | Every code explained in plain English | Raw codes, sometimes with a link to ICANN |
| Redaction | Redacted fields listed (RFC 9537) and explained | Blank fields or "REDACTED" with no context |
| IP and ASN | Same box, all five regional registries | Separate tool or not supported |
| Domain age and expiry countdown | Calculated for you | Dates only |
| CAPTCHAs and ads | None | Common after a few lookups |
Tips
- Typed a subdomain like shop.example.com? The tool tries the full name, then the registered domain, and tells you which one it found.
- A domain that comes back Not found is probably unregistered, but premium and reserved names exist. Confirm with a registrar.
- Check the name servers here against the live DNS records after moving DNS providers. A mismatch means the registrar still points at the old ones.
- Found a phishing site? Report the domain to its registrar's abuse address and the server's IP to the hosting network, which you can find with the IP lookup.
Questions
How do I find out who owns a domain?
Look it up here to see the registrar and any details the owner left public. If the owner is redacted, use the registrar's contact form, which forwards messages to the registrant.
Why does it say the data is redacted?
Privacy rules. Since 2018 the GDPR and ICANN policy stop registries and registrars from publishing personal data such as names, addresses and emails of domain holders.
What does clientTransferProhibited mean?
It is a registrar lock that blocks transfers to another registrar. It protects against hijacking. Ask your registrar to remove it when you want to move the domain.
Is RDAP the same as WHOIS?
RDAP does the same job as WHOIS in a modern way: HTTPS, structured JSON, internationalised names and standard redaction. For generic TLDs it has been the official source since January 2025.
Why can't it look up my .de or .bd domain?
Those registries do not run a public RDAP service. Their data is only on port-43 WHOIS or the registry website, which a browser page cannot query directly.
Can I look up who owns an IP address?
Yes. Enter the IP and the tool asks the regional internet registry responsible for it. You get the organisation the block is assigned to and its abuse contact. To check your own address first, open What is my IP.