"Whois Records Explained: What Domain Registration Data Can Tell You"
Registrar, registration and expiry dates, status codes — Whois is more than a quick lookup, and every field has a story. RDAP migration, GDPR redaction, the domain life cycle, and drop-catching timing.
Check Whois before buying a domain, check it before a domain deal, check it when a site looks suspicious — this "public registry of the internet" is part of many people's routine, yet what each field actually says deserves a proper walkthrough.
What Is in a Whois Record
A complete Whois record answers these questions:
- Registrar — where the domain was purchased (Alibaba Cloud, GoDaddy, Namecheap…)
- Registration / expiry dates — the domain's "date of birth" and its renewal deadline
- Status codes — which life-cycle stage the domain is in and which locks protect it
- Authoritative DNS (NS) — which servers hold the resolution rights
- DNSSEC — whether the DNS records carry a digital signature
Note one distinction that is easy to mix up — the registrar is the public-facing sales channel, while the registry is the central operator of each TLD (Verisign runs .com, CNNIC runs .cn). Whatever registrar you register a .com with, the record ultimately lives in Verisign's registry — and Whois queries exactly that central record, which is why it is authoritative and up to date.
RDAP: Whois's Modern Successor
Classic Whois is a child of the 1980s — connect to port 43, receive one large blob of unstructured text, with every operator using its own format. Under ICANN policy, mainstream TLDs have migrated to RDAP (Registration Data Access Protocol) — HTTPS + JSON, structured fields, internationalization support, and tiered data returned according to who is asking.
This site's Whois lookup prefers RDAP and automatically falls back to classic Whois for niche suffixes, with results from both protocols formatted. Users will not notice the difference, but for the domain-data ecosystem RDAP marks the start of a full replacement.
After GDPR: Why You Can No Longer See the Registrant
Before 2018, Whois showed a registrant's name, email, phone, and address directly — which also made it a gold mine for marketing scrapers and scammers. After GDPR took effect, registries stopped publishing this personal data, replacing it with REDACTED FOR PRIVACY placeholders or the registrar's privacy-forwarding email.
So the dependable output of modern Whois is information about the domain itself (registrar, dates, status, DNS) — not "who is behind this domain". To identify a registrant legitimately, only two proper routes exist — the registrar's disclosure process (requiring a justified reason such as a trademark), or a court order.
Status Codes: The Domain's Health Report
Status codes are the densest field in a Whois record. The common ones:
| Status code | Meaning |
|---|---|
| clientTransferProhibited | Transfer to another registrar blocked (default anti-hijack protection) |
| clientDeleteProhibited | Deletion blocked |
| redemptionPeriod | Expired, now in the high-fee redemption window (about 30 days) |
| pendingDelete | Awaiting deletion (released after about 5 days) |
| serverUpdateProhibited | Changes frozen at the registry level |
redemptionPeriod and pendingDelete are the core signals for drop-catchers — when a domain you covet enters the redemption period, the previous owner has most likely not renewed, and after the 35-day countdown it can be registered again. Conversely, do not panic if your own domain shows transferProhibited — that is protection, not a problem.
The Full Life Cycle of a Domain
String the dates and statuses together and a domain's life cycle looks like this:
Registered → renewal grace period (0–45 days, renewable at the regular price) → redemption period (30 days, steep redemption fee) → pendingDelete (5 days) → deleted and released. Once released, anyone can register it — the old domain's SEO history and backlink weight are reshuffled, which is exactly why the "domain drop-catching" business exists.
The expiry date also helps you gauge a website's credibility — a domain claiming to be a "ten-year-old site" but registered last month, or expiring next year with no sign of the owner renewing, both deserve extra suspicion.
In Practice: 5 Things to Check on Any Domain
- Registration date — domain age (paired with content quality to judge "established site" vs "fresh coat of paint")
- Expiry date — how long until it lapses
- Registrar — a credible channel or not (phishing sites love small registrars + fresh domains)
- Status codes — normal state or not (a site showing redemptionPeriod can vanish any day)
- Authoritative DNS — where it is hosted (Cloudflare, Alibaba Cloud DNS, or some odd NS)
Beyond the IP detail pages, we also generate a standalone profile page for every domain — after using the Whois tool, click the domain in the results to jump there, for example ipchase.com's profile page. Pair it with DNS resolution diagnostics to see whether its records match the Whois record, and a domain's health picture is complete.
Check your own network: run a full disguise check on the homepage, or try the fingerprint test.