ICANN Lookup: How to Use It and What It Actually Shows You

When you need registration facts about a domain — who manages it, when it expires, whether it is locked — there is one source that sits above every other lookup tool: ICANN Lookup. It is run by the organisation that coordinates the domain name system itself, which makes it the closest thing to an official record that exists.

I use it constantly. Before buying a domain from a private seller, before advising a client on a recovery, before believing what any third-party tool tells me. Here is how it works and how to read what it gives you.

What ICANN Lookup Is

ICANN Lookup lives at lookup.icann.org and is officially called the Registration Data Lookup Tool. It queries registration data for domain names using RDAP — the Registration Data Access Protocol — which replaced the ageing WHOIS protocol as the standard way to retrieve domain records.

The distinction matters in practice. Older WHOIS servers return unstructured text that every registrar formats differently. RDAP returns structured, standardised data. When a third-party WHOIS site shows you conflicting or stale information, ICANN Lookup is the tiebreaker.

How to Use It: Step by Step

The process takes under a minute.

Step 1. Go to lookup.icann.org.

Step 2. Enter the domain name — just the domain, like example.com, without https or www.

Step 3. Click Lookup. The tool queries the registry and registrar RDAP servers and returns the combined record.

That is the entire process. The skill is in reading the result, which is where most people get lost.

Reading the Results: Every Section Explained

Domain Information

This block shows the domain name, the registry expiration date, and the dates of creation and last update. The expiry date here is the registry record — the authoritative one. If a seller tells you a domain is paid up until 2028 and ICANN Lookup shows expiry in 2026, trust the lookup.

The creation date tells you the age of the current registration. Note that this resets if a domain fully expires and is re-registered — a domain first used in 2005 but dropped and re-registered in 2020 will show 2020.

Status Codes

This is the section most people skip and the one that carries the most information. Domain status codes are standardised flags that describe exactly what state a domain is in:

clientTransferProhibited — the domain is locked against transfers at the registrar level. This is a normal, healthy security setting that most registrars enable by default.

clientHold or serverHold — the domain has been suspended and its DNS will not resolve. This usually means an expired registration, an unverified contact email, or a policy issue. If a live website suddenly went down, this code often explains why.

redemptionPeriod — the domain has expired and passed its grace period. The owner can still recover it, but only by paying a redemption fee, typically 50 to 200 dollars on top of renewal. Our guide to the domain expiry grace period explains the full timeline.

pendingDelete — the domain is days away from being released for public registration. No one, including the previous owner, can renew it now.

ok — no restrictions, nothing pending. Slightly ironically, a domain showing only ok is missing the transfer lock most registrars recommend.

Contact Information

Since GDPR, expect to see Redacted for Privacy in most personal fields. This is normal and applies to almost every domain owned by an individual. What remains visible and useful: the registrar name, the registrar abuse contact email and phone, and sometimes the registrant organisation and country.

If you need to reach a domain owner whose details are redacted, the practical routes are the privacy proxy email shown in the record, the website itself, or the methods in our guide on how to find who owns a domain.

Nameservers

The nameserver entries tell you where the domain points for DNS. This is often more revealing than people expect. Nameservers like dns1.registrar-servers.com indicate Namecheap. Nameservers containing cloudflare.com tell you the site runs behind Cloudflare. Parking nameservers like ns1.dns-parking.com indicate the domain is parked at a host, usually Hostinger, and not actively used.

ICANN Lookup vs Third-Party WHOIS Tools

Third-party WHOIS tools — including our own free WHOIS lookup — add convenience layers: cleaner formatting, DNS record display, availability checking, history in some cases. For day-to-day research, they are faster and friendlier.

ICANN Lookup earns its place in three situations. When two tools disagree, it is the authority. When you need domain status codes read directly from the registry, it shows them unfiltered. And when you are making a decision with money attached — buying a domain, recovering an expired one, diagnosing a suspension — you want the official record, not a cached copy.

The workflow I recommend: use a friendly WHOIS tool for routine checks and monitoring, and confirm anything important against ICANN Lookup before acting on it.

Common Problems and What They Mean

The lookup returns no data. Either the domain is unregistered — check availability, it may be free to register — or the TLD does not support RDAP through ICANN. Many country-code domains like .pk, .de, and .co.uk have their own national registry lookup tools instead.

The expiry date differs from your registrar dashboard. Registrars sometimes show a renewal-processed date before the registry updates. Give it 24 to 48 hours. If the mismatch persists, contact the registrar — the registry record is what actually governs.

The domain shows serverTransferProhibited. This lock is set by the registry rather than the registrar, commonly for 60 days after registration or a previous transfer. You cannot transfer until it clears.

Where This Fits in Your Domain Routine

ICANN Lookup is a verification tool, not a monitoring tool. It answers point-in-time questions accurately, but it will not watch your portfolio or warn you before an expiry. For ongoing oversight — every domain you own, across every registrar, with automatic alerts at 60, 30, 14, and 7 days — a domain management dashboard does the continuous work, and ICANN Lookup remains your source of truth for the moments that matter.

Never lose a domain again

Track every domain you own in one dashboard. Free for up to 15 domains.