When someone registers a domain using your trademark, you often cannot do much until the domain goes live. But there is an earlier signal: the WHOIS record. The moment a domain's nameservers are configured, a registrar transfer completes, or the registration status changes, that information appears in the public WHOIS database. PageCrawl can monitor these records and alert you the instant anything changes.

What WHOIS Records Contain

Every registered domain has a WHOIS record maintained by its registrar and published through a global network of servers. The record contains:

Registration details: Domain name, creation date, expiration date, last updated timestamp.

Registrar information: The company where the domain is registered (GoDaddy, Namecheap, Cloudflare Registrar, etc.) and the registrar's WHOIS server address.

Status codes: EPP status codes that describe the domain's current state. A domain with only clientTransferProhibited is likely parked or inactive. Domains with ok status have no restrictions and are ready to use. Status codes change before any other observable behavior does.

Nameserver records: The DNS servers the domain points to. An inactive domain typically points to parking nameservers. When the registrant is ready to launch a site, they update these to point to their hosting provider - this is often the clearest signal that activation is imminent.

Registrant contact: In most jurisdictions, the registrant's name and contact information are published, though GDPR compliance has led many registrars to redact this for European registrants.

WHOIS data is updated in near real-time when changes are made through a registrar's control panel. PageCrawl queries the authoritative WHOIS server for each TLD directly, so you see the same data the whois command-line tool returns.

Why Monitoring WHOIS Changes Matters

Trademark Domain Squatting

Cybersquatters register domains containing trademarks to hold them for ransom, attract confused visitors, or redirect traffic to competitors. The pattern is predictable: a domain is registered, left inactive for weeks or months, then suddenly activated.

Monitoring WHOIS lets you catch the activation event. When nameservers change from a parking provider to a web host, that change appears in the WHOIS record before the website is live. You have a window to act before the domain starts affecting your brand.

Competitor Domain Intelligence

Watching domains your competitors register - even inactive ones - reveals strategic intent. A competitor that registers yourtown.competitorname.com may be expanding into your market. A registrar transfer from a budget registrar to a premium privacy-protected one often signals a domain is being prepared for serious use.

Domain Expiration Monitoring

Domains you care about (a former partner's domain, a product name you plan to acquire, a competitor's key domain) can expire without warning. WHOIS records show the expiration date, and changes to that date (renewals, redemption status changes) appear as WHOIS record changes. Combined with PageCrawl's change detection, you get alerted when any of these fields shift.

Registrar Transfer Alerts

Domain transfers between registrars are a common precursor to changes in ownership or hosting. Monitoring WHOIS lets you detect when a domain you care about changes hands, even if the public-facing website stays the same.

How to Set Up WHOIS Monitoring in PageCrawl

Step 1: Create a New Monitor

Go to your PageCrawl workspace and click "Add monitor." Enter the domain URL you want to track - this can be a URL like https://pagecrawl.io or just the domain name. PageCrawl extracts the registrable domain automatically.

Step 2: Switch to Advanced Mode and Select WHOIS Record

On the monitor creation page, switch to Advanced mode. In the tracked element type selector, open the Advanced group and select WHOIS Record. PageCrawl will display an information panel confirming that it will query the public WHOIS record for this domain once per day, in compliance with WHOIS server rate limits.

Step 3: Configure Notifications

Choose how you want to be notified. Email is enabled by default. You can also send alerts to Slack, Discord, Microsoft Teams, Telegram, or any webhook endpoint. If you are monitoring dozens of domains, a dedicated Slack channel works well.

Step 4: Save and Wait for the First Check

PageCrawl runs the first WHOIS check within a few minutes of saving the monitor. The result is stored as the baseline. Every subsequent daily check is compared against this baseline. If anything in the WHOIS text changes, you receive an alert showing exactly what changed.

Reading WHOIS Change Alerts

When a WHOIS change is detected, PageCrawl shows you a text diff of the WHOIS record. Lines removed from the previous check appear in red, lines added in green.

The most important changes to watch for:

Nameserver changes - look for lines starting with Name Server:. A change from parking.example.com to ns1.hostingprovider.com means the domain owner is setting up hosting.

Status code changes - clientHold being removed means a domain previously suspended by the registrar is being released. addPeriod disappearing means the domain is out of its initial registration grace period and the registrant is committed.

Expiration date changes - a renewed domain shifts its Registry Expiry Date forward. A domain in redemption has a different status code pattern entirely.

Registrar changes - the Registrar: line changing indicates a transfer between registrars, which sometimes precedes a change in ownership.

Focusing Alerts With AI

WHOIS records contain timestamps that update frequently. The Updated Date: field changes every time any detail of the registration is touched, including routine automated updates by the registrar. Without guidance, every timestamp refresh would trigger an alert.

PageCrawl's AI analysis solves this. When creating a WHOIS monitor, fill in the "What matters to you" field with a plain-English description of what you care about. For example:

• "Alert me only if the nameservers change"
• "I want to know if the registrar or ownership changes, but not timestamp updates"
• "Notify me when the domain status changes or gets closer to expiry"

PageCrawl's AI reads the diff and uses your description to decide whether the change is relevant to you. Routine timestamp refreshes are silently ignored. Nameserver updates, registrar transfers, or status code changes that match your stated interest trigger an alert. You describe what matters in plain language, and the AI handles the filtering.

Monitoring Multiple Domains at Scale

If you are running a brand protection program, you may need to monitor hundreds of domains. PageCrawl handles this efficiently:

Templates: Create a WHOIS monitor template with your preferred notification channels and rules already configured. When you add new suspicious domains to your watch list, apply the template to configure them consistently.

Tags: Label groups of monitors by campaign or trademark. Filter the dashboard to see all monitors for a specific trademark at once.

Bulk import: Use the PageCrawl API to programmatically add monitors when your legal team identifies new suspect registrations. The API accepts the same parameters as the UI.

Summary digests: If daily individual alerts become too noisy, switch to a weekly summary digest. This shows all changes detected across all WHOIS monitors in a single email, grouped by monitor.

Combining WHOIS Monitoring With Uptime Monitoring

WHOIS monitoring tells you about registration record changes, but it does not tell you when a domain's website goes live. For complete coverage, add a second monitor for the same domain using fullpage text tracking.

PageCrawl's recovery notification system handles this case. If the website is currently unreachable (returning a timeout or error), PageCrawl tracks the failure state. The moment the domain resolves and the page loads successfully, PageCrawl fires an alert immediately. No waiting for a 3-hour window.

Together, these two monitors give you complete coverage: the WHOIS monitor catches preparation (nameserver changes) and the fullpage monitor catches activation (the website going live).

Cost and Rate Limits

WHOIS monitoring in PageCrawl has no per-query API cost. PageCrawl queries the public WHOIS servers directly using the same protocol as the whois command, which is free and open. To respect these public servers, WHOIS monitors are limited to one check per day (1440 minutes minimum frequency). For most brand protection use cases, daily checks are more than sufficient - WHOIS records rarely change more than once in a 24-hour period.

Nameserver changes typically take 24-48 hours to propagate globally anyway. A daily WHOIS check catches the change within one day of it being made, which is fast enough to be actionable.