Why does the WHOIS site show almost no owner details anymore?

Two reasons stacked on top of each other. Since the GDPR took effect in May 2018, registrars redact registrant name, email, address, and phone for most domains by default — you'll see 'REDACTED FOR PRIVACY' or a registrar-hosted contact form instead of a person. And since January 28, 2025, ICANN no longer requires registrars to run the old WHOIS service on port 43 at all; the authoritative source for gTLD registration data is now RDAP. Many public WHOIS websites still scrape whatever legacy endpoints remain, so they look increasingly empty or stale. Query RDAP directly and you at least get the fields that are still public — registrar, dates, status, nameservers — in a clean, structured form.

Can I find out who personally owns a domain?

Usually not, and that's by design. For the vast majority of gTLD domains the registrant's personal contact details are redacted for privacy. What you can reliably see is the sponsoring registrar, the creation and expiry dates, the domain's status flags, and its nameservers. If you need to actually reach the owner, the path is the registrar's abuse or contact channel, or an ICANN-recognized request for non-public data — not a lookup tool. A lookup tells you which registrar to talk to; it doesn't hand you a name and phone number.

The expiry date passed but the site still works. Is the domain still owned?

Almost certainly yes. An expired domain doesn't drop instantly. It moves through an auto-renew grace period (often up to 45 days), then a 30-day redemption period where only the original owner can restore it for a fee, then 5 days of pendingDelete before it's released to the public pool. Check the RDAP status flags: autoRenewPeriod, redemptionPeriod, or pendingDelete tell you exactly which stage the domain is in and how much time is realistically left.

Views: 13

Check Domain Owner and Expiry Date (RDAP/WHOIS)

Check any domain's owner, registrar, and expiry date with RDAP: read status flags like redemptionPeriod, see what GDPR hides. Free instant check, no sign-up.

Check your domain for this issue now

Free, no sign-up. Runs the exact check this guide describes and shows what to fix.

Problem

You need to know who holds a domain, which registrar it lives at, or when it expires — maybe you’re chasing a domain you want, auditing your own portfolio, or trying to figure out whether a name is about to become available. So you type it into a WHOIS site, and you get back a wall of REDACTED FOR PRIVACY and a “contact the registrar” link. Nothing useful. It didn’t used to look like this, and the reason it does now is a change most people never heard about: the old WHOIS plumbing is being switched off, and the tools that still lean on it are showing you the ghost.

What actually changed

Two things happened, a few years apart, and together they explain every empty lookup you’ve seen lately.

First, privacy. When the EU’s GDPR took effect in May 2018, registrars couldn’t keep publishing registrant name, email, address, and phone for the world to scrape. So they didn’t. For most domains, those fields are now redacted by default — replaced with a privacy placeholder or a relay form. That’s not a bug in the lookup tool; that’s the law working as intended.

Second, the protocol itself. WHOIS is a 1980s design finalized in RFC 3912: a raw text stream over port 43 with no structure, no standard fields, and output that varies wildly between registries so that every parser is a pile of special cases. Its replacement, RDAP — the Registration Data Access Protocol — returns clean, structured JSON, and it became an Internet Standard (STD 95, RFC 9082/9083) in June 2021. On January 28, 2025, ICANN sunset the old WHOIS obligation: registries and registrars are no longer contractually required to run WHOIS on port 43, and RDAP is the definitive source for gTLD registration data. WHOIS still answers in a lot of places — voluntarily, for now — but it’s the format that’s dying, not the data.

The practical upshot: if a lookup looks broken, the fix usually isn’t a better WHOIS site. It’s asking RDAP instead.

What you can actually read

Strip away the redacted contact block and there’s still a lot of signal in a registration record. The fields that stay public, and that matter:

Registrar — the company the domain is registered through. This is who you contact for anything: renewals, transfers, abuse, recovery.
Creation and expiry dates — when the domain was first registered and when the current registration term ends. RDAP exposes these as structured events (registration, expiration, last changed), not free text you have to guess at.
Status flags — the EPP status codes, the single most useful and most ignored part of the record (more below).
Nameservers — the delegation on file at the registry. Worth comparing against live DNS: if the registry lists one set of nameservers and the domain resolves from another, something is mid-change or misconfigured.

The status flags that matter

EPP status codes are the domain’s state machine, and reading them turns “the site is down, I don’t know why” into a precise diagnosis. The ones worth memorizing:

clientHold / serverHold — the registrar or registry has pulled the domain from DNS. This is why a paid-up domain can suddenly stop resolving: it’s not a DNS bug, it’s a hold, usually for a billing or verification problem. Nothing you change in your zone will fix it until the hold is lifted.
autoRenewPeriod — the domain passed its expiry date and the registry auto-renewed it into a grace window. It’s expired-but-recoverable, cheaply, right now.
redemptionPeriod — the domain was deleted and is in the ~30-day Redemption Grace Period. Only the original registrant can get it back, and only by paying a restore fee that’s deliberately steep. You cannot register it; you restore it.
pendingDelete — the last 5 days. Redemption is over, nobody can save it, and at the end it drops to the public pool. If you’re waiting to grab a name, this flag is your countdown.
clientTransferProhibited — a normal, healthy lock most registrars set to prevent unauthorized transfers. Not a problem; just something you’ll clear before moving a domain.

An expired domain isn’t a binary. It walks through auto-renew → redemption → pendingDelete → released, and the status flag tells you exactly which door it’s standing in.

Check it with DechoNet

RDAP Lookup queries the authoritative RDAP service for the domain and shows the registrar, the creation/expiry/updated events, the current status flags, and the registry’s nameservers — structured, not a text blob you have to decode. When a public WHOIS site shows you nothing, this is where the still-public data actually lives.
DNS Lookup reads the domain’s live nameservers and records, so you can compare what the registry has on file against what the domain is actually serving — the fastest way to catch a domain that’s mid-transfer or pointing at the wrong place.

Resolution Checklist

Run the domain through RDAP first. If it returns structured data, that’s your authoritative source — trust it over any scraped WHOIS page.
Read the expiry event, not just “expires soon.” Note the exact date and whether the domain has crossed it.
Read the status flags. redemptionPeriod or pendingDelete means the clock is nearly out; clientHold means the domain is registered but deliberately pulled from DNS.
Note the registrar — that’s your one real contact point for renewals, recovery, transfers, or abuse. There is rarely a shortcut around it.
If contact details are redacted (they usually are), don’t fight it. Use the registrar’s channel or an ICANN request path for non-public data.
Compare registry nameservers with live DNS. A mismatch means a change in flight or a misconfiguration.

When to Escalate

If RDAP returns empty or errors for a gTLD that clearly exists, the registry’s RDAP service may be having a bad day — retry, and fall back to WHOIS as a cross-check rather than assuming the domain is gone.
For .kr and some other ccTLDs, registration data lives with the national registry (KISA/KRNIC for .kr) under its own rules and its own RDAP/WHOIS service; a gTLD lookup won’t tell you the .kr story.
If your own domain shows an unexpected clientHold, redemptionPeriod, or a wrong expiry date, that’s a registrar conversation to have today — those states are reversible right up until they aren’t.