WHOIS Lookup Alternative: What the DNS Reveals About a Domain

Read the naming servers, zone contact and SOA serial a domain must publish, understand why registration records come back redacted, and open the registry lookup that holds them.

By Net Insight Published 2026-09-17 Updated 2026-09-17

Why a WHOIS lookup so often comes back empty

Ask most people what a WHOIS lookup returns and they will describe an owner’s name, an address, a phone number and a registration date. Ask the same question about a domain registered recently and the truthful answer is that most of those fields are withheld. The output is not broken; the fields exist and are redacted.

That gap between expectation and output is the reason this page exists in the shape it does. Rather than present a form that returns a wall of redacted lines and leave you to guess whether the lookup failed, it reads what a domain is obliged to publish in the DNS and shows what each of those fields actually means.

The fields that are genuinely public

Every delegated domain has to publish a set of records for the DNS to work at all, and those records are unconditionally public because resolvers need them. They are not registration data, but they answer several of the questions people actually arrive with.

Nameservers identify the infrastructure that runs the domain’s DNS. The number of them, and whether they belong to the registrar or to an independent provider, tells you how the domain is administered. It does not identify the registrant and does not identify the web host.

The start of authority record carries three useful fields. The primary name server names the machine that is authoritative for the zone. The contact mailbox is an administrative role address. The serial is a counter the primary server increments on every change, which makes it a change tracker rather than a date.

What redaction changed

Registration data was historically published in full by the registries and reproduced by anybody who queried WHOIS. Privacy rules in several jurisdictions, and the resulting policy changes at registrars, ended that. Most registrars now withhold personal contact fields from public output, and the practical effect is that a lookup for a private individual returns organisational boilerplate.

Two consequences follow. First, an empty contact field is not evidence of concealment by the owner; it is the default for almost every recent registration. Second, the fields that remain genuinely useful for research are the ones the DNS publishes: nameservers, the zone serial, the zone contact, and the technical configuration that reveals which services a domain uses.

The protocol that replaced WHOIS for delegated top-level domains is RDAP. Registry services answer it over HTTPS and return structured JSON, which is why this page links to the registry service rather than scraping an HTML WHOIS page. The link at the end of the report above opens that service with the name filled in; the registry will see your request, which is why the page does not perform it for you automatically.

Where the registration data is still worth reading

For a domain you are investigating, the registry record remains the authority on which registrar holds it, when it was created and when it expires. Those three fields survive redaction because they describe the registration rather than the registrant, and they are the fields that matter for questions about domain age, transfer locks and expiry.

For the technical side, the DNS is more informative than the registry. Which certificate authority is permitted to issue for a name is a security control, covered by the SSL and CAA check. Which resolvers answer for it and whether they agree is a comparison question, covered by the propagation checker. Whether mail is routed at all is covered by the MX record check.

What this lookup cannot tell you

It cannot tell you who owns a website. Domain ownership, hosting and content ownership are three different things, and a domain can be registered to one entity, served from the infrastructure of a second, and publish content belonging to a third.

It cannot give you a registrant’s identity, and it should not be read as a failure when it declines to. It cannot tell you whether a site is legitimate, whether it is trustworthy, or how long it has been operated — a domain can be registered years before it serves anything, and a recently registered domain can be entirely legitimate.

It also does not reveal who is behind an address. For that direction the questions are structural rather than registrative: IP check reports the network and approximate region for the connection you are using, and the ASN lookup reports which organisation announces an address range. Neither reaches an individual, which is worth stating plainly rather than leaving as an implication.

If what you actually need is the raw DNS answer set rather than an interpretation, DNS lookup shows the records themselves, and the DNS record reference explains which types are worth reading.

Keep this setup

Save the settings to your Sitefarm account. Uploaded files and generated results are not stored.

Questions worth asking

Why does this not show the domain owner's name and address?

Because those fields are not published in the DNS at all. They live in the registry and registrar record, and since the redaction rules took effect most registrars withhold them from public output. A lookup that returns empty fields has usually succeeded and simply has nothing to show.

Can I find out when a domain was registered from here?

Not from the DNS. A registration date is a registry field, so it comes from the registry lookup this page links to. The zone serial in the SOA record looks similar but means something entirely different: it counts changes to the zone, not age.

Are the nameservers the company that hosts the website?

Sometimes, often not. Nameservers identify who runs the DNS, which can be a registrar, a DNS provider, or the site owner. A website can be hosted entirely elsewhere while its DNS is managed by a third party.

What is the SOA contact address for?

It is an administrative mailbox written in DNS notation, where the first dot stands in for the at sign. It is frequently a role address such as hostmaster, and it is the zone's contact point rather than the registrant's.

Is the registration record public information?

Partially. The existence of a registration and the nameservers are public; personal contact details are generally withheld. The protocol that replaced WHOIS is RDAP, and the registry services answer it directly.