Early WHOIS was fully public: anyone could see a registrant's name, address, phone and email. That fueled spam, scams and doxxing.
What GDPR Changed
Since 2018, ICANN requires registries to hide personal data by default for EU-related registrants. Today, most .com lookups show "REDACTED FOR PRIVACY" or the registrar's privacy service instead of a real person.
Three Flavors of Privacy
- Registry-level redaction: GDPR-driven hiding, applied by default.
- WHOIS Privacy services: registrars (free or paid) substitute proxy details; email still forwards to you.
- Mandatory publication: some ccTLDs like .de and .uk still require real registrant data to stay public.
Can You Still Reach the Owner?
Yes — just with more effort. Visible clues remain: the registrar, key dates, name servers (reverse lookups can reveal an owner's other domains), and older domains that never enabled privacy. ABC Lookup surfaces any email or phone found in WHOIS/RDAP in a dedicated contact block, which is how many domain buyers reach sellers directly.
Seller's Advice
If you list domains for sale, keep a forwarding email in WHOIS or a contact form on the landing page — a large share of inbound offers arrive through WHOIS contact data.