D
Domain Expiry Watcher

Domain Lookup: How to Research Any Domain

How to look up any domain name to find ownership, registration dates, expiration, DNS records, and hosting details. Covers WHOIS, DNS tools, and more.

A domain lookup reveals the publicly available information behind any domain name: who registered it, when it was created, when it expires, which registrar manages it, which name servers it uses, and more. Whether you are researching a competitor, investigating a suspicious site, or checking on your own domains, a domain lookup gives you the data.

This guide covers the different types of domain lookups, the tools that perform them, and how to interpret what you find.

What Information Can You Find?

A domain lookup can reveal several categories of information, depending on which tools you use.

Registration Information (WHOIS)

WHOIS is the primary source of domain registration data. A WHOIS lookup returns:

  • Registrant: The person or organization that registered the domain (may be hidden by privacy protection).
  • Registrar: The company where the domain was registered (Namecheap, GoDaddy, Cloudflare, etc.).
  • Registration date: When the domain was first registered.
  • Expiration date: When the current registration period ends.
  • Last updated date: When the WHOIS record was last modified.
  • Name servers: The DNS servers that handle the domain's DNS records.
  • Domain status: Flags indicating the domain's current state (active, locked, pending transfer, etc.).

If the registrant has enabled WHOIS privacy (also called domain privacy or proxy privacy), the personal contact details are replaced with the privacy service's information. The registrar, dates, and name servers are still visible. For a full explanation, see what is WHOIS and the WHOIS guide.

DNS Records

DNS lookups show how a domain is configured at the technical level:

  • A record: The IPv4 address the domain points to.
  • AAAA record: The IPv6 address the domain points to.
  • CNAME record: An alias that points the domain to another domain name.
  • MX records: The mail servers that handle email for the domain.
  • TXT records: Text-based records used for verification (SPF, DKIM, domain ownership verification).
  • NS records: The authoritative name servers for the domain.

DNS records tell you where the website is hosted, where the email goes, and how the domain's infrastructure is set up.

Hosting Information

By looking up the IP address from the A record, you can determine the hosting provider. IP address ranges are assigned to specific organizations, so an IP lookup reveals whether the site is hosted on AWS, Google Cloud, Cloudflare, a shared hosting provider, or somewhere else.

Domain History

Historical lookup tools show how a domain has changed over time: previous owners, previous website content, DNS changes, and hosting changes. The Wayback Machine (web.archive.org) archives historical snapshots of websites. WHOIS history tools show past registration records.

How to Perform a Domain Lookup

WHOIS Lookup

The most common domain lookup. You can use web-based tools or the command line.

Web tools: Visit whois.domaintools.com, who.is, or your registrar's WHOIS lookup page. Enter the domain name and the tool queries the registry database.

Command line: On macOS or Linux, open a terminal and type:

whois example.com

On Windows, you can install a WHOIS utility or use one of the web tools.

The output includes all the registration information described above. For domains with privacy protection, you will see the privacy service's details instead of the owner's personal information.

DNS Lookup

DNS lookups query the domain's name servers for specific record types.

Web tools: dnschecker.org, mxtoolbox.com, and dig (online) provide DNS lookup interfaces.

Command line:

dig example.com A
dig example.com MX
dig example.com TXT
nslookup example.com

These commands return the specific DNS records for the domain, showing where the website is hosted, where email is routed, and what verification records are in place.

IP Address Lookup

Once you have the IP address from a DNS lookup, you can look up who owns that IP.

Web tools: ipinfo.io, whois.arin.net, and whatismyipaddress.com show the organization assigned to an IP address range.

This tells you the hosting provider. An IP in the 13.x.x.x range is likely AWS. 104.16.x.x is Cloudflare. 35.x.x.x is Google Cloud.

Historical Lookups

Wayback Machine (web.archive.org): Enter a domain to see archived snapshots of the website going back years. Useful for seeing what a domain was previously used for.

WHOIS history tools: DomainTools and SecurityTrails maintain historical WHOIS records showing past ownership and registration changes.

Reading WHOIS Results

WHOIS output can be dense. Here is how to read the important parts.

Domain Status Codes

WHOIS records include status codes that describe the domain's current state:

clientTransferProhibited: The registrar has locked the domain against transfers. This is normal and desirable for active domains.

clientDeleteProhibited: The registrar has locked the domain against deletion. Another standard protection.

clientUpdateProhibited: Changes to the domain record are blocked. Used for extra security.

serverHold: The registry has placed a hold on the domain, usually due to a legal dispute or policy violation. The domain will not resolve in DNS.

redemptionPeriod: The domain has expired and is in the redemption phase. The previous owner can still recover it by paying a fee.

pendingDelete: The domain is about to be released back to the general pool. It will become available for registration soon.

For domain investors and anyone watching for expired domains, the status codes tell you exactly where a domain is in its lifecycle. See domain grace periods for the full expiration timeline.

Dates to Watch

Creation date: When the domain was first registered. Older domains generally have more established presence and authority.

Expiration date: When the current registration ends. If this date is approaching and the domain is not renewed, it will enter the expiration process. See what happens when a domain expires.

Updated date: When the WHOIS record was last changed. Frequent updates might indicate an active owner making DNS or configuration changes.

WHOIS data is not always perfectly accurate. Privacy services mask owner details. Some registrants provide incomplete information. And WHOIS data can be stale, especially the "updated date" field. Use WHOIS as a starting point for research, not as a definitive source of truth.

Common Reasons for Domain Lookups

Researching a Domain Before Purchase

Before buying an existing domain, look up its history. Check for previous spam use, trademark conflicts, blacklisting, and whether the domain has been recently dropped (which might indicate the previous owner abandoned it intentionally).

Checking Domain Expiration

If you own multiple domains, looking up their expiration dates helps you keep track of renewals. For ongoing tracking, a tool like Domain Expiry Watcher automates this so you get alerts before any domain lapses. See the domain expiry guide for a complete management framework.

Investigating Suspicious Emails or Sites

When you receive a suspicious email or visit a questionable website, a WHOIS lookup can reveal when the domain was registered (brand-new domains are a red flag), who registered it, and whether the hosting matches what you would expect from a legitimate business.

Competitor Research

Looking up a competitor's domain reveals their hosting provider, CDN, email infrastructure, and how long they have had their domain. This competitive intelligence can inform your own infrastructure decisions.

Verifying Domain Ownership

During business acquisitions, partnerships, or domain purchases, WHOIS data confirms who controls a domain and through which registrar. This is the starting point for any domain transfer negotiation.

Finding Contact Information

If you need to reach a domain owner (to report abuse, negotiate a purchase, or resolve a technical issue), WHOIS may provide contact details. If privacy protection is enabled, most privacy services offer a forwarding mechanism that delivers messages to the registrant without revealing their identity.

Domain Lookup Tools Summary

| Tool | What It Shows | Best For | |---|---|---| | WHOIS (whois.domaintools.com) | Registration details, dates, registrar | Ownership research, expiry checking | | dig / nslookup | DNS records (A, MX, TXT, NS) | Technical DNS investigation | | ipinfo.io | IP ownership, hosting provider | Identifying hosting infrastructure | | Wayback Machine | Historical website content | Domain history research | | MXToolbox | DNS, MX, blacklist, and email config | Email and deliverability research | | SecurityTrails | Historical DNS and WHOIS data | Security research, change tracking |

Key Takeaways

  • A domain lookup reveals registration details, DNS configuration, hosting information, and domain history.
  • WHOIS is the primary tool for registration data: owner, registrar, dates, and status.
  • DNS lookups show the technical configuration: IP addresses, mail servers, and name servers.
  • Use domain lookups to research purchases, check expirations, investigate suspicious sites, and verify ownership.
  • WHOIS privacy hides personal details but not registrar, dates, or name servers.
  • For ongoing expiry tracking, automate the process with a monitoring tool rather than running manual lookups.

Automate domain expiry tracking

Domain Expiry Watcher checks your domains continuously and alerts you before they expire. Easier than manual WHOIS lookups.

Try Domain Expiry Watcher

Related Articles