Free tool WHOIS lookup: who registered a domain, when, and until when
Ask the domain’s own registry, over RDAP, the protocol ICANN created to replace WHOIS. You get the registrar, the registration, update and expiry dates, every status code explained, the name servers and whether DNSSEC is on. Personal details are usually hidden for privacy, and the result says so instead of guessing.
- Straight from the registry
- Age and expiry
- Sent only when you click
Look up a domain
Enter a domain or paste a URL; “www.” and paths are removed. The result below is a dated sample until you click Look up.
data.iana.org, which never receives your domain), then asks the registry’s RDAP server for that one domain, for example rdap.verisign.com for .com. With “Also ask the registrar” on, it also asks the registrar’s RDAP server the registry points to. Only the domain name is sent. TapCub’s servers are not involved and store nothing.For example example.com or a full URL. International domains are converted to xn-- form.
Domain age
19 years, 1 month
Counted from the registration date in the registry.
Until expiry
697 days left
Most registrars renew automatically if auto-renew is on.
Summary
- OKgithub.com was registered on 2007-10-09 (source: rdap.verisign.com).
- OKTransfer lock is on: the domain cannot be moved to another registrar without unlocking it first.
- NoteDNSSEC is off for this domain.
- NoteContact details from the registrar (rdap.markmonitor.com).
- NoteContact details are hidden for privacy. To reach the owner, use the registrar’s contact form or abuse address.
- NoteSample result: looked up on 2026-11-11 while building this page. Click Look up for live data.
Registration details
| Field | Value |
|---|---|
| Domain | github.com |
| Registrar | MarkMonitor Inc. (IANA ID 292) |
| Registered | 2007-10-09 |
| Expires | 2028-10-09 |
| Last changed | 2026-09-07 |
| Name servers | dns1.p08.nsone.net, dns2.p08.nsone.net, dns3.p08.nsone.net, dns4.p08.nsone.net, ns-1283.awsdns-32.org, ns-1707.awsdns-21.co.uk, ns-421.awsdns-52.com, ns-520.awsdns-01.net |
| DNSSEC | Not signed |
| Abuse contact | abusecomplaints@markmonitor.com |
| Source | rdap.verisign.com + rdap.markmonitor.com |
| Registry data as of | 2026-11-11 14:15 UTC |
Status codes
EPP status codes, explained with ICANN’s descriptions.
| Status | Meaning | Set by |
|---|---|---|
clientDeleteProhibited | Registrar lock: the registry rejects delete requests. | Registrar |
clientTransferProhibited | Registrar lock: transfers to another registrar are rejected. A normal protection. | Registrar |
clientUpdateProhibited | Registrar lock: changes such as new name servers are rejected. | Registrar |
Contacts
As published. Most registries and registrars hide personal data.
| Role | Name | Organization | Country / region | |
|---|---|---|---|---|
| Registrant | Hidden | Hidden | US | Hidden |
| Technical | Hidden | Hidden | Hidden | Hidden |
Look it up at the registry
Copy the address into your browser.
{
"objectClassName": "domain",
"handle": "1264983250_DOMAIN_COM-VRSN",
"ldhName": "GITHUB.COM",
"links": [
{
"value": "https://rdap.verisign.com/com/v1/domain/github.com",
"rel": "self",
"href": "https://rdap.verisign.com/com/v1/domain/github.com",
"type": "application/rdap+json"
},
{
"value": "https://rdap.verisign.com/com/v1/domain/github.com",
"rel": "related",
"href": "https://rdap.markmonitor.com/rdap/domain/GITHUB.COM",
"type": "application/rdap+json"
}
],
"status": [
"client delete prohibited",
"client transfer prohibited",
"client update prohibited"
],
"entities": [
{
"objectClassName": "entity",
"handle": "292",
"roles": [
"registrar"
],
"links": [
{
"href": "http://www.markmonitor.com",
"type": "text/html",
"value": "https://rdap.markmonitor.com/rdap/",
"rel": "about"
}
],
"publicIds": [
{
"type": "IANA Registrar ID",
"identifier": "292"
}
],
"vcardArray": [
"vcard",
[
[
"version",
{},
"text",
"4.0"
],
[
"fn",
{},
"text",
"MarkMonitor Inc."
]
]
],
"entities": [
{
"objectClassName": "entity",
"roles": [
"abuse"
],
"vcardArray": [
"vcard",
[
[
"version",
{},
"text",
"4.0"
],
[
"fn",
{},
"text",
""
],
[
"tel",
{
"type": "voice"
},
"uri",
"tel:+1.2086851750"
],
[
"email",
{},
"text",
"abusecomplaints@markmonitor.com"
]
]
]
}
]
}
],
"events": [
{
"eventAction": "registration",
"eventDate": "2007-10-09T18:20:50Z"
},
{
"eventAction": "expiration",
"eventDate": "2028-10-09T18:20:50Z"
},
{
"eventAction": "last changed",
"eventDate": "2026-09-07T09:22:52Z"
},
{
"eventAction": "last update of RDAP database",
"eventDate": "2026-11-11T14:15:15Z"
}
],
"secureDNS": {
"delegationSigned": false
},
"nameservers": [
{
"objectClassName": "nameserver",
"ldhName": "DNS1.P08.NSONE.NET"
},
{
"objectClassName": "nameserver",
"ldhName": "DNS2.P08.NSONE.NET"
},
{
"objectClassName": "nameserver",
"ldhName": "DNS3.P08.NSONE.NET"
},
{
"objectClassName": "nameserver",
"ldhName": "DNS4.P08.NSONE.NET"
},
{
"objectClassName": "nameserver",
"ldhName": "NS-1283.AWSDNS-32.ORG"
},
{
"objectClassName": "nameserver",
"ldhName": "NS-1707.AWSDNS-21.CO.UK"
},
{
"objectClassName": "nameserver",
"ldhName": "NS-421.AWSDNS-52.COM"
},
{
"objectClassName": "nameserver",
"ldhName": "NS-520.AWSDNS-01.NET"
}
]
}The registry’s JSON, as returned.
Share these inputs: the values go after the # in the link, so they never reach a server.
https://tapcub.com/tools/whois-lookup
Version v1.0Updated Update history
What a WHOIS record can tell you
Facts about the registration, not about the website.
Registrar
The company the domain was registered through. It is who you contact to transfer, renew or report abuse; the abuse contact is shown when published.
Dates
Registered is when the current registration began, so a domain that expired and was registered again starts over. Expires is the paid-up date; Last changed covers any update, such as new name servers.
Status codes
clientTransferProhibited and similar locks are normal protection. clientHold, serverHold, redemptionPeriod and pendingDelete mean the domain is not working or is being removed.
Contacts
Since GDPR most registries and registrars hide personal data. “Hidden” is the honest answer, not an error; the registrar’s contact form is the way to reach the owner.
WHOIS does not show who hosts the website or the email. Use the DNS lookup for that: the A, MX and NS records point to the providers.
Three steps
No sign-up, no CAPTCHA.
-
1
Enter the domain
Type it or paste any URL from the site.
-
2
Look up
The tool finds the right registry from IANA’s list and asks it directly, then the registrar if you leave that ticked.
-
3
Read or copy
Check the summary and status codes, or download the raw RDAP JSON.
RDAP, the replacement for WHOIS
Classic WHOIS is plain text over port 43, which browsers cannot open. RDAP returns structured JSON over HTTPS. ICANN calls it the replacement for WHOIS, and since 28 January 2025 gTLD registries and registrars are no longer required to run WHOIS (.com, .name and .post excepted).
- IANA publishes which RDAP server serves each ending (RFC 9224); the tool matches the longest ending
- The query is
GET <server>/domain/<name>(RFC 9082); the answer format is RFC 9083 - Status codes are EPP codes written as words (RFC 8056); the explanations follow ICANN’s EPP status page
- Redacted fields are marked with RFC 9537 or with values such as “REDACTED FOR PRIVACY”; both show as Hidden
- Many country endings, including .cn, .io, .de and .jp, are not in IANA’s RDAP list; for those the tool links to the registry instead of guessing
| WHOIS (port 43) | RDAP | |
|---|---|---|
| Format | Free text, differs by registry | JSON with defined fields |
| Transport | Plain TCP | HTTPS |
| Finding the server | Lists kept by each tool | IANA bootstrap file |
| Hidden data | Ad hoc wording | Can be marked as redacted (RFC 9537) |
| From a browser | Not possible | Yes, where the server allows it |
github.com, looked up on 2026-11-11
The default result above: Verisign answers for .com, then MarkMonitor, the registrar.
| Field | Value | Reading |
|---|---|---|
| Registrar | MarkMonitor Inc. (IANA ID 292) | The company the domain is registered through |
| Registered | 2007-10-09 | About 19 years old |
| Expires | 2028-10-09 | Paid up two years ahead |
| Status | clientDelete / clientTransfer / clientUpdateProhibited | Registrar locks against deletion, transfer and changes |
| Name servers | NS1 (nsone.net) and Amazon Route 53 (awsdns) | DNS served by two providers |
| Registrant | Hidden, country US | Personal data withheld by the registrar |
Registration data changes when domains renew or move; click Look up for today’s values.
Misreading WHOIS
A few conclusions the data does not support.
“Hidden means something to hide”
Privacy redaction is the default at most registrars and registries since GDPR. It says nothing about the site.
Reading Registered as “site launch”
It is when the current registration began. A site may have launched years later, or the domain may have changed hands.
Not found = available
Usually, but reserved names, premium names and recently deleted domains also return “not found”. Check at a registrar before you plan around it.
Where an unknown domain shows up
Domains turn up in analytics as referrers and in bot reports as crawler operators. A quick registration check helps decide what to make of them.
Referring domains
Sources lists every site that sends visitors. A referrer registered last week with hidden details deserves a closer look before you count it as a channel.
Learn moreBots on a separate line
TapCub keeps crawlers out of human reports. Look up the operator behind an unfamiliar crawler’s domain.
Learn moreOne snippet
Analytics and live chat share the same snippet, so a new site you own needs one install.
Learn moreWHOIS lookup questions
Still have a question?
Chat with the team behind TapCub — we usually reply within a few hours on business days.
How do I find out who owns a domain?
Look it up above. You see the registrar and, if published, the registrant’s organisation and country. Most personal details are hidden today; the registrar’s contact form or abuse address is the way to reach the owner.
What is the difference between WHOIS and RDAP?
Both return domain registration data. WHOIS is an old text protocol on port 43; RDAP returns structured JSON over HTTPS and was created to replace it. Since January 2025 gTLD registries and registrars must offer RDAP and no longer have to run WHOIS.
Why does it say .cn or .io is not supported?
Those registries do not publish an RDAP server in IANA’s list, and their WHOIS servers cannot be reached from a browser. The tool shows the registry’s own lookup page (for .cn, CNNIC’s) instead of an unreliable copy of the data.
Why is the registrant hidden?
Registries and registrars redact personal data to comply with privacy laws such as GDPR. Organisations sometimes leave their company name visible; individuals almost never do.
What does clientTransferProhibited mean?
The registrar has locked the domain against transfer to another registrar. It is a normal safeguard; the owner unlocks it in the registrar’s control panel when they want to move.
How do I check when a domain expires?
The Expires date and the “until expiry” count show it. Expired domains often stay in a grace period and then a 30-day redemption period before they are deleted.
Update history
New features, fixes and data refreshes for this tool, newest first.
-
· v1.0
LaunchedFirst release.
Data this tool relies on
- IANA RDAP bootstrap file — checked 2026-11-11, reviewed every 3 months (next review by 2027-02-11)
Missing something or found an error? Tell us — requests that come up often go into the next update. All tool updates
Know which sites send you visitors
TapCub lists every referring domain next to the visits and conversions it brings, with bots on a separate line.