A WHOIS lookup can tell you who registered a domain, which registrar they used, when the domain was created, when it expires, and which nameservers it uses.
It is usually the first thing to check when you want to buy a domain that someone else owns, verify who is behind a website, or figure out why your own domain has stopped working.
The complication is that most domain lookups now hide the owner’s name and contact information. How that works depends on the extension. A .ca domain is handled differently from a .com, .net or .org.
Here is how to look up both.
Looking up a .ca domain
All .ca domains are maintained in a single registry operated by CIRA, the Canadian Internet Registration Authority.
The best place to start is CIRA’s WHOIS lookup. Registrar lookup tools, including ours, ultimately pull from the same registry, but CIRA’s own lookup is authoritative and also connects you to its domain-holder contact system.
What you see depends on how the domain was registered.
If the registrant is a business, organization or other non-individual, the WHOIS record normally shows the organization’s name along with its contact information, such as an address, phone number and email address.
CIRA’s own domain is an easy example. Look up cira.ca and you can see the organization’s name and public contact details.
If the registrant is an individual, the contact fields are normally shown as “REDACTED FOR PRIVACY.”
CIRA has provided this privacy protection for individual registrants since 2008. It is enabled by default and does not cost extra. An individual registrant can choose to make their details public, but most do not.
Even when the owner’s information is hidden, several important fields remain visible:
- Registrar: The company through which the domain was registered.
- Creation date: When the domain was originally registered.
- Expiry date: When the current registration period ends.
- Domain status: Status codes that can indicate whether the domain is locked, suspended, expired or pending deletion.
- Nameservers: The servers responsible for the domain’s DNS, which can often provide clues about its hosting or DNS provider.
A status such as clientTransferProhibited is usually nothing to worry about. It normally means the owner has enabled transfer protection. A status such as serverHold or pendingDelete, on the other hand, can indicate a problem or a domain that is moving through the expiry process.
Reaching the owner of a private .ca domain
CIRA hides the contact information of individual registrants, but it still gives people a way to reach them.
Its contact a domain holder service lets you send a message that CIRA forwards to the domain’s administrative contact. You do not see the registrant’s email address, and the registrant can decide whether to respond.
This is the proper route if you want to make an offer to buy a domain, raise a trademark concern, or simply tell the owner that something appears to be wrong with their website.
There are two things worth keeping in mind.
First, the system only works if the registrant’s contact information is still current. Someone who registered a domain many years ago may have used an email address they rarely check or no longer use. If you do not receive a response, that does not necessarily mean the owner is ignoring you.
Second, this is one reason domain owners should keep their contact information up to date. A legitimate buyer, security researcher or other person trying to reach you may have no other way to make contact.
If the .ca domain is registered to a business and the WHOIS record shows public contact information, you can contact the business directly. In many cases, however, using the contact form on the company’s own website will get a faster response than emailing a generic domain-administration address.
Looking up a .com, .net, .org or other domain
Domains such as .com, .net and .org are spread across many different registries, so there is no single registry lookup equivalent to CIRA’s .ca service.
The easiest option is ICANN’s lookup tool, which directs your query to the appropriate registry or registrar. Most registrars also provide their own domain lookup tools.
Privacy works somewhat differently for these domains.
Since 2018, registrars have generally hidden registrant contact information from public lookup results, largely as a result of privacy rules introduced around GDPR.
There has also been a technical change behind the scenes. In January 2025, ICANN ended the requirement for registrars to operate the traditional WHOIS protocol and moved toward its replacement, RDAP.
For most users, this makes very little difference. Modern lookup tools handle RDAP automatically and display essentially the same information.
However, some older WHOIS websites and command-line tools may no longer return useful results. If a tool you have used for years suddenly produces little or no information, the move from WHOIS to RDAP may be the reason.
Because registrant details are usually hidden, the most useful fields for a .com or similar domain are often the same ones you would check for a .ca:
- the registrar
- the registration and expiry dates
- the domain status codes
- the nameservers
If you need to contact the owner, many registrars provide a contact form or relay email address that forwards messages without revealing the registrant’s real address.
Domains using a privacy service may also display a proxy or relay email address. Messages sent to that address are generally forwarded to the domain owner.
Why the owner’s name often does not matter
Most people running a WHOIS lookup are trying to answer a practical question, and in many cases you do not actually need the owner’s name or home address.
“Can I buy this domain?”
Start by looking at the expiry date, nameservers and whether the domain currently hosts an active website.
A domain pointing to a parking service may be unused or offered for sale. Parking pages often include a “this domain may be for sale” link that leads directly to a marketplace or broker.
An active website on a domain that was recently renewed is much less likely to become available simply by waiting for it to expire.
If there is no obvious sales link, try contacting the owner through CIRA’s contact form, the registrar’s contact system or any contact information available on the website itself.
If a .ca domain expires, it goes through several stages before becoming available again. Eventually, eligible expired .ca domains can enter CIRA’s To Be Released process, where registrars compete to register them on behalf of customers.
We explain that process in more detail in what happens when your domain name expires.
If the domain you want is already taken, we also cover some alternatives in so the domain name you wanted is taken.
“Is this website legitimate?”
The domain’s creation date is one of the most useful things to check.
For example, a company claiming to have operated for twenty years while using a domain that was registered six weeks ago deserves additional scrutiny.
For a .ca domain registered to an organization, the registrant information can also be useful. If the organization named in the registry has no obvious connection to the business presented on the website, that may be worth investigating.
On the other hand, a redacted WHOIS record is not suspicious by itself. Privacy protection is normal and widely used.
“Who do I contact about a problem with this site?”
For phishing, malware, spam or other abuse, you usually do not need the registrant’s personal information.
The domain lookup should identify the registrar and normally provide an abuse contact. You may also be able to identify the hosting or DNS provider from the domain’s nameservers.
Those are generally the right places to send an abuse report.
“Why did my own domain stop working?”
A domain lookup is also one of the quickest troubleshooting tools for your own website or email.
Check:
- whether the domain has expired
- whether the status shows something unusual such as
serverHold - whether the nameservers are the ones you expect
- whether the registrar listed is still the company you use
Each of these points can indicate a different problem.
This is one of the first checks we make when a client tells us their website or email has suddenly stopped working, and it often takes only a few seconds to identify the issue.
What other people can see about your domain
The same rules apply when someone looks up a domain you own.
If you registered a .ca as an individual, your personal contact details are normally hidden and people who want to reach you can use CIRA’s contact system.
If the .ca is registered to a business or organization, its contact information may be publicly visible. That is normal for an organizational registration, but it also means the email address listed in the record may attract sales messages and spam.
For that reason, it can make sense to use a role-based address such as domains@ rather than someone’s personal email address.
For a .com or other non-Canadian domain, public lookup results will normally redact most registrant information.
Some registrars also offer separate domain privacy services. These can provide additional privacy at the registrar level and may supply a relay address so that legitimate messages can still reach you.
Our earlier article on WHOIS protection explains in more detail what domain privacy does and does not protect.
Whatever kind of domain you own, keep your registration contact details current.
Registrars may need to verify this information, and inaccurate or unreachable contact details can sometimes create problems with the domain. More practically, if someone discovers that your website has been compromised or wants to make a serious offer to buy your domain, your registration contact information may be the only reliable way for them to reach you.
The bottom line
For a .ca domain, start with CIRA’s lookup. Individual registrants are normally protected by privacy redaction, while organizations may have their information displayed publicly. CIRA’s contact service still gives you a way to reach a private registrant.
For .com, .net, .org and most other extensions, use ICANN’s lookup tool and expect the registrant’s contact information to be hidden.
In either case, the information that remains public (the registrar, registration dates, domain status and nameservers) is usually enough to answer the most important questions. When it is not, the registry or registrar’s contact system provides the next step.
This article is on a domain registrar’s blog, so the usual disclosure applies: we’re CanSpace, a Canadian company and CIRA-certified .ca registrar. Every .ca we register for an individual comes with CIRA’s privacy protection on by default, and we offer the equivalent privacy service on .com and other extensions.
If the domain you looked up turns out to be available, you can register it with us. If you already have one registered elsewhere and would rather manage it alongside Canadian hosting, our hosting plans include a free transfer, and our support team can check a domain’s status for you if a lookup leaves you unsure what you are looking at.
