Domain Ownership & History
What "REDACTED FOR PRIVACY" Means in WHOIS (and What You Can Still Find)
6 min read · Updated 2026-10-20
If a WHOIS lookup shows "REDACTED FOR PRIVACY" where the owner's name should be, nothing is wrong with the record. The registrar has hidden the owner's personal details, as most registrars have done since 2018.
This guide explains what the label means and what the record can still tell you. If you need to reach the owner, or find out who they are, the later sections cover how.
Why WHOIS is redacted
For most of its history, WHOIS published the name, email, phone number and postal address of every domain owner to anyone who asked. When the EU's General Data Protection Regulation (GDPR) took effect in May 2018, that clashed with the law for any owner who was a person.
ICANN, which sets the rules for generic domains like .com, responded with a temporary policy that let registrars hide personal data. Rather than sort EU owners from everyone else, most registrars hid it for all owners worldwide. ICANN later replaced the temporary policy with a permanent one, and redaction is now the normal state of a WHOIS record.
Redacted is not the same as a privacy service
Both hide the owner, but they work differently, and the record looks different.
| Redacted | Privacy service | |
|---|---|---|
| What WHOIS shows | "REDACTED FOR PRIVACY" in the name, address and phone fields | The privacy company's name and address, such as "Domains By Proxy, LLC" or "Withheld for Privacy ehf" |
| Who is listed as registrant | The real owner, with their details hidden | Often the privacy company, holding the domain for its customer |
| Who applies it | The registrar, by default | The owner, by choosing the service at their registrar |
| How to reach the owner | The registrar's relay email or contact form | The privacy company forwards email |
Many records have both. The registrar redacts the fields, and the owner has also signed up for privacy.
What a redacted record still shows
Redaction covers personal contact details. The rest of the record stays public:
- The registrar, its IANA ID and its abuse contact email and phone
- When the domain was created, last updated and when it expires
- Its status codes, such as
clientTransferProhibited - Its nameservers and whether DNSSEC is on
- Usually the registrant's state or province and country
- The registrant's organization, when the owner has agreed to publish it
The creation date is worth a second look. Sales and registrar transfers keep it. If the domain lapsed and someone registered it again, it starts over.
How to contact the owner
The email field in a redacted record is usually a relay address or a link to a web form. Messages sent there are forwarded to the owner, who doesn't have to reply.
If the domain is being used for spam, phishing or malware, write to the registrar's abuse contact instead. Registrars are required to look into abuse reports, and they can suspend the domain. The hosting company can take the site down.
How to ask for the owner's details
- ICANN's Registration Data Request Service. RDRS is a free way to ask participating registrars for hidden registration data. You give your reason, such as a legal claim or a security investigation, and the registrar decides whether to disclose.
- A UDRP complaint. If the domain infringes your trademark, the dispute provider gets the registrant's details from the registrar and passes them to you.
- A court order or subpoena served on the registrar.
who.is is not a registrar. We show the public record and can't see or share details a registrar has hidden.
Finding who owned it before redaction
Records captured before 2018 were published in full, and archives that kept them still have the names. A WHOIS history lookup shows how many records we hold for a domain and the years they cover, back to 2007.
If the domain's creation date is from before 2018 and those records show one owner right up to the switch, that owner may still hold it. How to Find Out Who Owned a Domain Before explains how to read the records.
Country-code domains
Domains under country codes, such as .uk, .de and .fr, follow their own registry's rules. Some hid individuals' details long before GDPR. Others show more or less than a .com record. You may see different wording in place of "REDACTED FOR PRIVACY", or fields that are left out entirely.
Key takeaways
- REDACTED FOR PRIVACY means the registrar has hidden the owner’s personal details, as most have done since GDPR took effect in 2018.
- A privacy service is different: the privacy company’s own name appears in the record, and it forwards email to the owner.
- The registrar, dates, status codes, nameservers and usually the owner’s country stay public.
- To reach the owner, use the relay email or form in the record. For abuse, write to the registrar’s abuse contact.
- Records captured before 2018 often still name the owner at that time.
See who owned a domain before
Look up how many past WHOIS records we hold for any domain, from before and after 2018.
Frequently asked questions
Is REDACTED FOR PRIVACY the same as domain privacy?▾
No. Redaction is applied by the registrar and hides the owner's details while keeping them as the registrant. A privacy service replaces the owner's details with the privacy company's own. A record can have both.
Can who.is show me the hidden details?▾
No. We show the public record as registries and registrars publish it, and we don't have access to hidden data. Our WHOIS history archive holds records captured before redaction, and those may name an earlier owner.
Can I make my own WHOIS details public again?▾
Usually, yes. Registrars are expected to let owners agree to publish their contact details. Look for the option in your domain's settings at your registrar. Businesses sometimes do this so customers can see who runs the site.
Why can I still see the owner's country?▾
The state or province and the country don't identify a person on their own, so registrars usually leave them public.