WHOIS
Lookup

This tool queries RDAP (the modern WHOIS replacement) and shows registration data including registrant details (where not privacy-protected), registrar, creation date, and expiry date. If the owner has WHOIS privacy enabled, you'll still see the registrar name, which may offer a contact form for purchase enquiries.

Enter the domain here and check the expiry date. Bear in mind that most registrars auto-renew domains, and even after expiry there's typically a 30-90 day redemption period before the domain is released for public registration. The creation and last-updated dates also give useful context about how actively the domain is being managed.

Domain expiry scam emails are very common. They try to get you to "renew" with a different, more expensive registrar. Check the actual expiry date here, confirm your real registrar name, and only renew through your actual registrar. If the email is from a company you don't recognise, it's almost certainly a scam.

Enter your domain here and it shows the registrar name, their abuse contact details, and the nameservers currently assigned. This tells you exactly which company controls the domain so you can log in and manage it. Common with older domains that were set up by a previous web developer or business partner.

Look at the domain registration details. A recently created domain (days or weeks old) selling products at suspiciously low prices is a red flag. Check the creation date, registrar, and whether WHOIS privacy is hiding the owner. Legitimate businesses typically have domains registered for years and often show verifiable registrant details.

Enter your domain here and check what personal information is visible. The behaviour you should expect depends on the TLD. For .uk (.co.uk, .uk, .org.uk), Nominet's consent-based rules mean the public WHOIS does not display your name or address unless you have consented to disclosure; UK individuals are redacted by default. For international TLDs (.com, .net, .org and so on), if you have purchased a WHOIS privacy / proxy service from your registrar, your name, address, and contact details should be replaced with the proxy service's details. If your real information still shows on an international TLD, the privacy service may not be enabled or may have lapsed. Since GDPR, most registrars also redact personal details by default for domains with EU registrants regardless of any paid privacy add-on.

EPP status codes indicate the current state and transfer restrictions on a domain. "clientTransferProhibited" prevents unauthorised transfers. "clientDeleteProhibited" prevents accidental deletion. "ok" means the domain has no restrictions. Codes starting with "client" are set by your registrar; "server" codes are set by the registry. A healthy domain typically shows several "prohibited" statuses, which are protective locks.