WHOIS lookup
See which registrar a domain is with, when it expires and how it's set up, read straight from the registry.
Results for https://www.github.com/torvalds/linux
- Looked up github.com from the URL you pasted.
- Showing the registration for github.com. www.github.com is a host inside it.
Registered
Locked down and healthy
github.com is registered with MarkMonitor Inc. since 2007-10-09 (19 years). Expires 2028-10-09 (in 695 days).
· in 695 days
Since 2007-10-09
IANA ID 292
Locked against transfer, update and deletion by the registrar
Status3
Stage 1 of 6: Registered
Locks
- Deletion locked (registrar)
clientDeleteProhibitedThe registrar has locked the domain so it cannot be deleted.
What this status means - Transfer locked (registrar)
clientTransferProhibitedThe registrar has locked the domain so it cannot be transferred to another registrar.
What this status means - Update locked (registrar)
clientUpdateProhibitedThe registrar has locked the domain so it cannot be changed (nameservers, contacts, other registration data).
What this status means
Records
Key facts
- Registrar
- MarkMonitor Inc.IANA ID 292
- Registered
- 19 years ago
- Expires
- in 695 days
- Last changed
- 2 months ago
- Registrar expiry
- in 695 days
- DNSSEC
- Not signed
- Locks
- 3 locks
- Nameservers
- 8
Nameservers
- dns1.p08.nsone.net
- dns2.p08.nsone.net
- dns3.p08.nsone.net
- dns4.p08.nsone.net
- ns-1283.awsdns-32.org
- ns-1707.awsdns-21.co.uk
- ns-421.awsdns-52.com
- ns-520.awsdns-01.net
DNSSEC
Not signed
Registrar
- Name
- MarkMonitor Inc.
- IANA ID
292- Abuse email
- [email protected]
- Abuse phone
- +1.2086851750
Registry notices · 4 messages
Text supplied by the registry. We show it as written and never follow instructions in it.
- Terms of Service
Service subject to Terms of Use.
www.verisign.com (www.verisign.com)
- Status Codes
For more information on domain status codes, please visit https://icann.org/epp
icann.org (icann.org)
- RDDS Inaccuracy Complaint Form
URL of the ICANN RDDS Inaccuracy Complaint Form: https://icann.org/wicf
icann.org (icann.org)
- Terms of Use
By submitting an RDAP query, you agree that you will use this data only for
lawful purposes and that, under no circumstances will you use this data to:
(1) allow, enable, or otherwise support the transmission by email, telephone,
or facsimile of mass, unsolicited, commercial advertising, or spam; or
(2) enable high volume, automated, or electronic processes that send queries,
data, or email to Markmonitor (or its systems) or the domain name contacts (or
its systems).
Markmonitor reserves the right to modify these terms at any time.
www.markmonitor.com (www.markmonitor.com)
Contacts4
Registrar
- Name
- MarkMonitor Inc.
Registrant
Kept private by the registry name, organisation, street, city, postcode, phone, email
- Address
- CA, United States
Technical contact
Kept private by the registry
Registrar
- Name
- Markmonitor Inc.
- Organisation
- Markmonitor Inc.
- Address
- 3540 E Longwing Ln, Meridian, ID, 83646, United States
Owner details are redacted for privacy. That's normal — most registries hide personal details since 2018. To reach the owner, use the registrar's contact form; they'll pass your message on.
How we got this
- Query: domain github.com · 0 ms
- IANA bootstrap (dns.json) · 0 mscom → https://rdap.verisign.com/com/v1/
- .com registry RDAP (rdap.verisign.com) · 26 ms
- Registrar RDAP (rdap.markmonitor.com) · 692 ms
- Asked
https://rdap.verisign.com/com/v1/domain/github.com- Server list entry
dns: com- Total time
- 724 ms
- Cache
- miss
Raw
What a WHOIS lookup shows
WHOIS is the public record of a domain registration. A lookup shows which registrar the domain is with, when it was registered and when it expires, which locks are on it and which nameservers answer for it.
LookupOwl asks the registry that runs the domain's extension (the part after the last dot, such as .com), so you read the source and not a scraped copy. It uses RDAP, the modern, structured version of WHOIS, and falls back to classic WHOIS for extensions that have no RDAP, mostly country codes.
| Field | What it tells you |
|---|---|
| Registrar | The company the domain is registered through, with its IANA ID (the number IANA lists for each registrar) and an abuse contact when one is published. |
| Registered, last changed, expires | The registry's own dates. Expiry is the day the registration must be renewed by. |
| Status | Locks and lifecycle flags such as clientTransferProhibited or redemptionPeriod, each explained in plain English. The EPP status code guide covers them all. |
| Nameservers | The servers the domain is delegated to, which usually shows who hosts its DNS. Follow up with an NS lookup. |
| DNSSEC | Whether the registry holds DNSSEC data (a DS record) for the domain. DNSSEC adds signatures that protect DNS answers from tampering. |
| Registrant | The owner, but only if the registry or registrar still publishes it. Most personal details are hidden today. |
How to use it
- Enter a domainType
example.com, paste a URL or an email address, or use a Unicode name such asbücher.de. Subdomains are trimmed, sowww.example.comlooks upexample.com. - Start with the tilesThe top of the result shows the domain's stage, a countdown to expiry, its age, the registrar and how many locks it has. The Status tab explains each status in plain English, and Records lists the dates and nameservers.
- Go deeper when you need toHow we got this shows which server answered and how long it took. Raw holds the structured result as JSON, or the reply text where WHOIS answered. To see the registry's own RDAP response too, switch on Include raw RDAP JSON under More options, or use the RDAP lookup.
- Move on to the next checkUse the nameservers for a DNS lookup and the dates for a domain age check.
How to read the result
Two organisations can sit behind one record. The registry runs the whole extension and is the authority on dates, statuses and nameservers. The registrar is the company the owner bought the domain from. Some registries, such as Verisign for .com, keep only basic data. When the registry points to the registrar's own RDAP server, LookupOwl asks that too (you can switch this off under More options). It adds the registrar's contacts and its own expiry date, and tells you if the two expiry dates differ. The registry's date is the one to trust.
- Last changed moves whenever the registry's record changes, for example after a renewal or a nameserver edit. It does not mean the owner logged in.
clientTransferProhibitedis the lock most registrars apply by default. It protects the domain, so it is a good sign.clientHoldorserverHoldtakes the domain out of DNS, so its website and email stop working.redemptionPeriodorpendingDeletemeans the domain has been deleted, usually after it expired, and is heading for release. The expiry checker explains the stages.
When something is missing
- “Nobody has this name yet.” The registry has no record of it, so it is probably unregistered. The domain availability checker confirms that and explains reserved and premium names.
- A date or the registrar is blank. Some country-code registries publish less than others. When we last checked,
.deshowed no creation date, no expiry date and no registrar, so the page says the registry does not publish them. The lookup is working. The registry just doesn't share them. - Only WHOIS text. Extensions without RDAP show WHOIS text instead. We read it as best we can and keep the raw reply in the Raw tab. Some registries restrict automated WHOIS queries. You then get an error or a note that no lookup is available, never a guess.
- A rate-limit message. Registries limit how often they answer automated queries, and we pace our own requests too. Wait a minute and try again.
- A registry error or timeout. That is on the registry's side. It usually clears within a minute.
How the lookup works
LookupOwl finds the RDAP server for the domain's extension in IANA's public bootstrap list, plus a short hand-checked list for a few extensions IANA leaves out. It then asks that server for /domain/<name> over HTTPS. The server answers in JSON with fixed field names. Extensions with no RDAP service, mostly country codes, are asked over WHOIS on port 43 instead, using a reviewed list of servers.
Every result says which server answered and how long it took. Requests never go to private or reserved addresses.
# Ask the .com registry directly, as LookupOwl does
curl -s https://rdap.verisign.com/com/v1/domain/example.com | jq '{ldhName, status, events}'
# Let rdap.org find the right registry for any extension
curl -sL https://rdap.org/domain/example.com | jq .ldhName
# Classic WHOIS from a terminal
whois example.comStandards behind it
- RFC 3912: the original WHOIS protocol on TCP port 43.
- RFC 7480, RFC 9082 and RFC 9083: RDAP over HTTP, its query formats and its JSON responses.
- RFC 9224: the IANA bootstrap list that maps extensions to RDAP servers.
- RFC 5731 and RFC 8056: EPP domain status values and how they map to RDAP.
- RFC 9537: how RDAP marks redacted fields.
Questions people ask
Is this WHOIS lookup really free?
Yes. There is no signup, no captcha and no daily cap. Each network gets a budget that refills over time, so very heavy use may need a pause. The same lookup is available through a free REST API and an MCP server for AI agents. The terms explain fair use.
Why can't I see the domain owner's name?
Most registries and registrars now hide it. Since 2018, when the EU's GDPR took effect, personal details are redacted by default. The Contacts tab then says they are kept private, and the raw record may read “REDACTED FOR PRIVACY”. That is normal. To reach an owner, look for a contact form on the registrar's website. Use the abuse contact only to report abuse.
What is the difference between WHOIS and RDAP?
WHOIS is a decades-old plain-text protocol with no standard layout. RDAP is its replacement. It answers in JSON over HTTPS, with fixed field names, proper error codes and a standard way to mark redacted data. LookupOwl tries RDAP first. The full comparison goes deeper.
How current is the data?
It is as current as the registry's own database, unless we looked up the same domain a short while ago. We keep a copy for up to about an hour, often less, so a change made minutes ago may not show yet. Press Check again to ask the registry afresh, up to 10 times an hour. If a registry is down, we may show a stored copy and say so.
Does it work for every domain extension?
Nearly all of them. Extensions with an RDAP service work, and most country-code extensions without one work through WHOIS. A few registries publish very little or refuse automated queries. You then see what they allow, or a plain message saying the registry doesn't offer a lookup.
Can I look up an IP address or an AS number here?
Not on this page. Use the IP WHOIS lookup for addresses and the ASN lookup for autonomous system numbers, the IDs of networks on the internet. Both ask the five regional internet registries (ARIN, RIPE NCC, APNIC, LACNIC and AFRINIC), which hand out IP addresses and AS numbers. If you paste an address here, you get a pointer to the right tool.
Do you keep a record of the domains I search?
Our server logs hold no raw IP addresses and no query strings, so they cannot tie a domain to you. The website does count lookups with Google Analytics, which records the domain you searched as part of a usage count, without your name or account. API and MCP calls are not sent to it. The registry receives the name from our servers. See the privacy policy for what is kept and how to opt out.
Can I see who owned a domain in the past?
No. LookupOwl shows the current registration only and keeps no history of earlier owners, registrars or dates, and a registry publishes only its current record. Paid WHOIS history services collect old records over time. The Internet Archive's Wayback Machine can show what the website looked like at an earlier time.
Use it from AI, the API or the command line
Every LookupOwl tool is also a free API and an MCP tool, with no key and no account. This one is whois_lookup. Please be kind to the rate limits.
curl "https://lookupowl.com/api/v1/tools/whois-lookup?q=example.com"claude mcp add --transport http lookupowl https://lookupowl.com/mcp