Network Tools Updated 2026-05-25

Domain WHOIS Lookup — what registration data still tells you

PortJar's Domain WHOIS Lookup walks the IANA referral chain to the authoritative registrar and returns the parsed registration record — the right tool when expiry, ownership, or registrar lock is in question.

Every time a client onboards a domain we manage on their behalf, the first question is the boring one: who registered it, when does it expire, and which registrar holds the lock. Get that wrong and you discover, three weeks before a planned migration, that the domain is registered under a former employee’s account at a registrar nobody has credentials for. PortJar’s Domain WHOIS Lookup is the fastest way to pull the registration record without logging into anything.

What the tool does

It queries the IANA root WHOIS server, follows the referral to the authoritative registrar’s WHOIS endpoint, and returns the full record — both the parsed key fields (registrar, creation date, expiry date, name servers, status flags) and the raw text the registrar returned. The two-step referral matters: many registry-level WHOIS responses are stubs that only tell you which registrar to ask, and a tool that stops at the stub will miss expiry and status data that lives downstream.

After GDPR, public WHOIS for most generic TLDs hides registrant contact details — you will see “REDACTED FOR PRIVACY” instead of the registrant name. The registrar field, dates, name servers, and status flags remain visible, and those are usually the fields that matter operationally.

How to use it

Open portjar.com/tools/domain-whois and enter the domain. The tool resolves to whichever registrar holds the domain, so you do not need to know which one in advance. The output gives you the parsed view first; expand the raw record when you need to see registrar-specific fields that the parser does not surface.

For repeated lookups on the same domain — say, monitoring a status change before a transfer — re-run the query rather than refreshing; some registrars rate-limit WHOIS and cache layers can return a stale view.

When you’d reach for it

  • A client asks Stack Harbor to take over DNS or hosting for a domain and we need to confirm the registrar before requesting an authorization code or planning a nameserver delegation.
  • A renewal is approaching and the client is unsure whether auto-renew is on at the registrar. The Expiry Date plus the clientAutoRenew status flag together tell you whether action is needed.
  • A planned transfer is blocked and you need to see whether clientTransferProhibited or serverTransferProhibited is set, and which side (client = registrant-controlled, server = registry-controlled) holds the lock.
  • A vendor email reports that the domain is “pending deletion” or “redemption period.” The WHOIS status field is the authoritative source for those states.
  • After a phishing or impersonation incident, comparing the creation date and registrar of a lookalike domain against the real one. A two-week-old creation date and a budget registrar is a strong signal.

What to make of the output

A populated registrar field and an expiry date in the future is the baseline. Make sure both the expiry date and the name server list match what the client believes — clients often think the domain is at one registrar when it is actually at another acquired entity.

Status flags carry most of the operational signal. clientTransferProhibited is the normal “registrar lock” state and protects against unauthorized transfers — leave it on. clientHold or serverHold means the registry has suspended the domain, usually for non-payment or compliance reasons, and the domain is not resolving for anyone. pendingDelete and redemptionPeriod are countdowns; if you see them, you have a window measured in days, not weeks.

A “REDACTED FOR PRIVACY” registrant field is normal post-GDPR for .com, .net, .org and most ccTLDs that follow ICANN policy. Some ccTLDs (.ca and .fr for example) follow local registry rules and may show or hide different fields. The absence of registrant data is not a tool failure.

A WHOIS query that fails outright — connection refused, no response, server overloaded — is usually transient. The PortJar tool documents this case explicitly because some TLD WHOIS servers are flaky. Wait a minute and try again before assuming there is a real problem with the domain.

Stack Harbor inventories registrar, expiry, and lock status on every domain we manage as part of Environment Management as a Service.

Book consult