Whois Lookup: Who owns this domain?

What does a Whois lookup tell you?

When a domain is registered, the registrar reports the registration to the central database of that extension, known as the registry. Whois and its modern successor RDAP let you query the public information held in that database. The result shows when a domain was registered, which company manages it, which name servers it uses and which restrictions apply to it.

The Limitsiz Bulut Whois tool first requests structured data via the RDAP protocol and falls back to classic Whois servers for extensions without RDAP support. It shows the results in a single, tidy view, so you do not have to deal with the different output formats of different extensions. Lookups are free and require no sign-up.

What the fields in a Whois record mean

• Domain Name: the registered form of the domain. For domains with special characters you will see the punycode (xn--) equivalent here.
• Registrar: the company that manages the domain. Transfers, renewals and ownership changes are handled through this company.
• Creation Date: the date the domain was first registered, indicating its age; a deletion and re-registration in between resets this date.
• Expiry Date: the date the current registration period ends. Domains that are not renewed enter a grace process after this date.
• Updated Date: the date of the last change to the record; a name server change, renewal or transfer updates it.
• Name Servers: the servers that manage the domain's DNS records, which hint at the infrastructure hosting the site.
• Domain Status: the EPP status codes showing locks and ongoing processes on the domain.
• DNSSEC: shows whether the domain's DNS responses are cryptographically signed.

What do EPP status codes mean?

Status codes determine which operations can be performed on a domain. Codes starting with "client" are set by the registrar, while those starting with "server" are set by the registry.

• ok / active: there are no restrictions on the domain and it works normally.
• clientTransferProhibited: the transfer lock is on. This security measure prevents unauthorised transfers and is enabled by default on most domains. An owner who wants to transfer can remove it from their own panel.
• clientUpdateProhibited / clientDeleteProhibited: additional security locks that prevent the registration details from being changed or the domain from being deleted.
• clientHold / serverHold: the domain is not published in DNS, so the website and e-mail do not work. Usually applied because of a payment, verification or legal issue.
• redemptionPeriod: the expired domain is in its redemption period. Only the previous owner can recover it, for an additional fee.
• pendingDelete: the domain is about to be deleted and will become available for registration within a few days. It cannot be recovered at this stage.
• pendingTransfer: a transfer is in progress for the domain.

When would you use Whois information?

When the domain you want is taken

The expiry date helps you judge whether the domain might become available soon. However, most domains renew automatically, so an approaching expiry date does not mean it will be released. If you want to contact the owner, use the registrar's contact form or the anonymised contact address in the Whois record. Meanwhile, it is a good idea to look for available alternatives with our domain search or AI domain search.

When checking your own domain

Regularly check your expiry date, whether the transfer lock is on and whether your name servers look correct. Seeing the update in the Whois record after a name server change confirms that the change has reached the registry; DNS propagation across the internet can take a few more hours.

When preparing a transfer

Before moving your domain to another provider, make sure the status codes do not include clientTransferProhibited, that 60 days have passed since the last registration or transfer and that there is enough time left before the expiry date. For security reasons the transfer code (EPP/Auth code) never appears in a Whois record; you can only get it from your current registrar's panel.

When checking for fraud

If you are suspicious of a link sent to you by e-mail or message, check when the domain was registered. Domains registered a few days ago that imitate a well-known brand are frequently used for phishing. The registration date alone is not conclusive proof, but it is an important warning sign.

Common misconceptions about Whois results

• "The registrar is the company hosting the site." Not necessarily. A domain can be registered with one company while the site is hosted on another company's servers; for hosting information, look at the name servers and DNS records.
• "The expiry date has passed, so the domain is free." Not yet. An expired domain first goes through grace and redemption periods, and the whole process can take one to two months depending on the extension.
• "Records showing REDACTED are fake." No. The hidden details are still held by the registry; they are simply not shown in public output.
• "A transfer lock is a red flag." No. clientTransferProhibited is a routine security measure that protects the domain against unauthorised transfers.

Whois privacy, GDPR and KVKK

Following the European Union's GDPR, most registrars removed the name, address, phone number and e-mail of individual registrants from public Whois output. That is why you see "REDACTED FOR PRIVACY" in many lookups. In Türkiye, KVKK (the Turkish Personal Data Protection Law) takes a similar approach to protecting personal data. The registry and registrar still hold the real details; they are only hidden from public display.

For corporate domains, showing the company name can be an advantage in terms of trust; for individual registrations, Whois privacy adds protection against spam and social engineering attempts. On supported extensions you can manage Whois privacy from the Limitsiz Bulut client panel.

Whois for .tr and country-code extensions

.tr domains such as .com.tr are managed by TRABIS, and the information displayed publicly for these extensions differs from generic extensions. Each country-code extension (ccTLD) follows the rules of its own registry; some show detailed information while others share only basic dates. For the registration rules of Azerbaijan, Iran and Kazakhstan extensions, see our country-code domains page.

After the lookup

If the domain you are looking for is available, register it right away; if it is taken, consider alternative names and extensions. Once registered, you can make your domain ready to use within minutes with hosting, business e-mail and an SSL certificate. If you see a status code you do not understand or an unexpected change in your Whois record, contact our support team.