How to Check a Domain: Availability, WHOIS & Verification Guide
Few digital actions feel as definitive as registering a domain name. It carves out a space under your control—but only if you know what you’re actually looking at. With over 350 million domains registered worldwide, according to the Verisign Domain Name Industry Brief (Verisign, the .com registry operator), the ability to check a domain’s availability, ownership, and authenticity isn’t just a convenience—it’s a core digital security skill.
Registered domains worldwide: Over 350 million · .com domains registered: Approximately 160 million · Average domain registration cost: $10–15 per year · ICANN-accredited registrars: Over 2,000 · WHOIS protocol standard: Established in 1982 · Domain expiration grace period: 30–45 days typical
Quick snapshot
- Domain WHOIS data is publicly available for most TLDs (ICANN Registration Data Lookup Tool).
- Domain flipping in good faith is legal (ICANN UDRP Policy).
- The legal boundaries of domain flipping vary significantly by jurisdiction. (ICANN’s RDAP transition)
- WHOIS privacy services can limit the effectiveness of fraud detection (ICANN’s RDAP transition).
- RDAP became the definitive source for gTLD registration data on January 28, 2025, sunsetting legacy WHOIS (ICANN Update).
- Requests for non-public registration data are handled through the Registration Data Request Service (ICANN RDRS).
Five numbers that frame the domain checking landscape:
| Metric | Value |
|---|---|
| Total registered domains worldwide | Over 350 million |
| Number of .com domains | Approximately 160 million |
| Average domain registration cost | $10–15 per year |
| ICANN-accredited registrars | Over 2,000 |
| WHOIS protocol standard established | 1982 |
| Domain expiration grace period | 30–45 days typical |
How can I check a domain?
There are three main routes to checking a domain, each best suited for a slightly different scenario. The tools are mostly free, and the most authoritative one is run by the global regulator itself.
Using WHOIS lookup
The upshot: ICANN’s Lookup is the single most authoritative tool for generic top-level domains. Make it your default, not your backup.
Legacy WHOIS is effectively sunset for gTLDs. The modern standard is the Registration Data Access Protocol (RDAP). ICANN provides the definitive RDAP Lookup tool at lookup.icann.org (ICANN Registration Data Lookup Tool FAQ). It queries the registry directly and can fall back to legacy WHOIS if RDAP data is incomplete. ICANN’s prior WHOIS service no longer exists and now redirects to this tool.
Checking domain availability with registrars
- GoDaddy offers free availability checks via its WHOIS lookup, surfacing ownership and registration details (GoDaddy WHOIS Domain Lookup).
- Namecheap tells you if a domain is taken and offers alternatives (Namecheap Whois Lookup).
- IONOS provides a WHOIS lookup but notes that some TLDs should be checked through their responsible registry (IONOS Whois Domain Lookup).
These registrar tools are ideal when you are actively shopping for a domain because they combine the lookup with a purchasing path.
Using domain checker tools
- Quick checks with purpose-built tools. Whois.com, WHOIS XML API, and FetchWhois provide fast, browser-based lookups without the shopping interface.
“WHOIS lookup tools often present availability by showing minimal or missing registration fields for unregistered domains,” notes WHOIS XML API (WHOIS XML API WHOIS Lookup). For bulk or programmatic checks, dedicated APIs are more efficient than manual web searches.
How do I check my current domain?
If you already own a domain, keeping tabs on its registrar, expiration, and DNS records is crucial to avoid losing it—or to spot configuration problems early.
Finding your domain registrar
- Your registrar is listed in the WHOIS / RDAP record. ICANN’s Lookup surfaces the sponsoring registrar clearly. You can also check the registry’s own lookup if you know the TLD operator.
- Cross-check with your purchase records. Emails from the registrar or your hosting control panel are the most reliable secondary source.
Checking domain expiration date
The upshot: Expiry dates are mandatory public data in WHOIS. Typical grace periods run 30 to 45 days, but exact terms depend on the registrar.
Your domain’s expiration date is a mandatory field in WHOIS data. ICANN’s Lookup and most registrar panels display it prominently. Setting up auto-renewal is standard practice, but double-checking the date directly in WHOIS gives you an independent verification (ICANN About Whois Search).
Viewing DNS records
- DNS records control where your domain sends traffic. You can view them in your registrar’s control panel or use command-line tools like
nslookupordig. - Third-party DNS lookup tools provide a quick visual breakdown of A, CNAME, MX, and NS records without needing to log into anything.
The implication: checking your domain isn’t a one-time setup. It’s recurring maintenance tied to your registrar, your expiration date, and your DNS configuration. A lapse in any one can take the site offline.
How to check if a domain is real or fake?
In an era of phishing, brand impersonation, and look-alike domains, a domain check is a key security step. Fraudulent domains often leave data footprints that are easy to spot once you know where to look.
Verifying domain ownership
- Consistent WHOIS records across public databases is a good sign. Discrepancies between ICANN’s Lookup, the registrar’s data, and third-party checkers are a red flag.
- Cross-check the registrant organization. If a bank’s supposed verification domain has a different registrant than the bank’s main domain, treat it with extreme caution.
Checking creation and expiration dates
The catch: Fraudulent domains almost always have very recent creation dates. A “bank verification” domain registered three days ago is almost certainly a scam.
The creation date is the single fastest heuristic for domain fraud. ICANN’s Lookup gives you the exact creation date. Compare it against the claimed entity’s known domain history. If the dates don’t match the story, the domain is suspicious.
Using WHOIS to detect suspicious domains
- The first line of defense. Cross-reference the domain creation date with the claimed entity’s known history. Suspicious domains often hide behind privacy services, or have mismatched registration data.
- Check the nameservers. Legitimate organizations typically use their own or a major provider’s nameservers. A random or unfamiliar nameserver is another red flag.
The pattern: fraud is almost always exposed by a date or data discrepancy. Checking the creation date against the entity’s known history is the fastest filter available.
Is domain flipping illegal?
The line between a smart investment and an illegal act depends entirely on intent and timing. Here is how the law draws that line.
What is domain flipping?
- Buy low, sell higher. Domain flipping is the practice of buying domains with the intent to resell them at a profit, mirroring real estate or art flipping.
Legal vs illegal domain flipping
- Flipping itself is perfectly legal. It crosses into illegality when it constitutes cybersquatting—registering a domain in bad faith with the intent to profit from a trademark (ICANN UDRP Policy).
- The key factor is intent. Buying a domain because it is a generic, descriptive term is legal. Buying it because it matches a known brand and trying to sell it back to that brand is not.
Cybersquatting laws
- Legal frameworks matter. The U.S. Anticybersquatting Consumer Protection Act (ACPA) and ICANN’s Uniform Domain-Name Dispute-Resolution Policy (UDRP) provide the primary frameworks for trademark owners to reclaim domains registered in bad faith (ICANN UDRP Policy).
The trade-off: domain investment is legal, but a UDRP fight over a trademarked name can erase any speculative profit. Investors should steer clear of names that directly match existing commercial trademarks.
What is domain flipping?
Distinct from cybersquatting, legitimate domain flipping is a recognized investment strategy with its own risks and rewards.
How domain flipping works
- Identify valuable domains. Flippers look for undervalued, brandable, or expiring domains through marketplaces, backordering services, and drop-catching tools.
- List on secondary markets. Domains are listed on exchanges like Afternic, Sedo, or GoDaddy Auctions.
Profit potential and risks
The warning: Most domains never sell. Carrying costs—annual registration fees typically $10–15 per year—can stack up while you wait for a buyer.
The profit can be enormous, but the market is speculative. “Profit depends on domain value, market demand, and timing,” is a standard industry axiom. Investors need patience and a long time horizon.
Examples of successful domain flips
- Business.com sold for $7.5 million in 1999 (Wikipedia Business.com).
- Voice.com sold for $30 million in 2019 (Wikipedia Voice.com).
- PrivateJet.com and Sex.com also rank among the highest-value public sales.
Why this matters: the domain aftermarket is a high-stakes blend of real estate and venture capital. Big wins exist, but so do big losses and holding costs.
Step-by-step guide to checking a domain
Following a systematic approach ensures you don’t miss anything. Here is a method that covers the essentials, from public data to practical verification.
- Start at ICANN Lookup. Go to lookup.icann.org and enter the domain. Verify the registrar, creation date, and expiration date.
- Check the creation date. If the domain is only days or weeks old, treat it with caution—especially if it claims to represent a long-standing entity.
- Verify the registrar. Cross-check the registrar name with the registrar’s own website and WHOIS portal. This confirms the domain’s management chain.
- Check expiration. An expiring or recently expired domain is risky for long-term use. Note the grace period window.
- Assess the data pattern. Is the registrant information consistent? Are the nameservers familiar? Privacy protection is normal, but a lack of any data for a supposedly active domain is suspicious.
Confirmed facts vs. What remains unclear
The domain name system is remarkably transparent, but some grey areas persist for investors and security researchers.
Confirmed facts
- Domain WHOIS data is publicly available for most TLDs through ICANN’s RDAP Lookup (ICANN Registration Data Lookup Tool FAQ).
- Domain flipping in good faith is legal under U.S. law and ICANN policy (ICANN UDRP Policy).
- RDAP has replaced WHOIS as the definitive protocol for gTLD registration data as of January 2025 (ICANN Update).
What remains unclear
- The exact legal boundaries of domain flipping vary by jurisdiction; what is legal in the U.S. may be interpreted differently elsewhere.
- WHOIS privacy services can mask the true registrant, making it difficult to distinguish legitimate privacy from fraudulent concealment.
The uncertainty is not a flaw in the system—it is a reflection of competing interests between privacy and transparency. For the average user, the public data is enough. For advanced investigations, the Registration Data Request Service (ICANN’s RDRS) exists as a pathway to non-public information.
Key perspectives from the industry
The domain checking ecosystem rests on decades of technical standards and policy work. Two authoritative voices frame the current landscape.
WHOIS is a standard protocol for querying domain registration data.
ICANN official documentation (ICANN Registration Data Lookup Tool FAQ)
As of Q2 2024, over 350 million domain names were registered globally.
Verisign Domain Name Industry Brief (Verisign, the .com registry operator)
What this means for domain buyers and owners
For anyone buying, selling, or investigating a domain name, the landscape has a clear starting point: ICANN’s RDAP Lookup at lookup.icann.org. Buyers should verify availability and history before committing funds. Investors must respect trademark boundaries or risk a UDRP dispute. Security researchers have a fast, free, authoritative tool to vet suspicious links. For the average domain owner, the lesson is clear: the tools are free, the data is public, and the consequences of skipping a check are entirely avoidable. Start with ICANN, confirm at the registrar, and keep your expiry and DNS records under active management.
icann.org, whois.com, seo.domains, dynadot.com, registrars.nominet.uk, katsauslehti.fi
Frequently asked questions
What is a domain name?
A domain name is a human-readable web address (like example.com) that maps to a numerical IP address. It consists of a second-level domain and a top-level domain, and is registered through an ICANN-accredited registrar.
What is WHOIS?
WHOIS is a standard protocol for querying domain registration data, including registrant, registrar, creation date, and expiration dates. For gTLDs, it has been largely replaced by RDAP as of 2025.
How often should I check my domain?
At minimum, check your domain’s expiration date and DNS records every 6 to 12 months. If you are troubleshooting or investigating security incidents, check as needed.
Is domain checking free?
Yes. ICANN’s Lookup, registrar WHOIS tools, and third-party checkers like Whois.com and WHOIS XML API all offer free basic lookups.
What information does WHOIS provide?
A standard WHOIS or RDAP query returns the domain name, registrar, registrant contact information (unless privacy-protected), creation and expiration dates, and nameservers.
Can I check domain availability without purchasing?
Yes. Every major registrar and ICANN’s own Lookup tool will tell you if a domain is already registered without requiring you to buy anything.
What is the difference between a domain registrar and a registry?
The registry (e.g., Verisign for .com) maintains the master database of domain names for a TLD. The registrar (e.g., GoDaddy, Namecheap) is the company that sells domain registrations to the public under contract with the registry.
How to check domain history?
Domain history can be checked using the WHOIS creation and update dates, the Wayback Machine for content history, and specialized domain history services that track ownership changes and expiration patterns.
Related reading