Is an empty WHOIS record a red flag for a Chinese supplier?

No. China's Measures for the Administration of Internet Domain Names require registrars to collect and verify the holder's true, accurate and complete identity information, and separately bar them from providing a user's personal information to others without consent. Verified but undisclosed is the designed outcome, so a lookup that shows a privacy service or a registrar placeholder tells you nothing about the supplier's legitimacy.

Does WHOIS tell me who owns a Chinese supplier's website?

Usually not. The rules require registrars to offer a public query service for domain registration information, while also protecting the holder's personal information — so the public view typically shows registrar and status fields rather than a named holder. Even where a name appears, holding a domain is not a registered corporate fact and creates no legal link between the website and any company.

Does a domain's registration date show how old the supplier is?

No. A domain can be bought, sold and re-registered independently of any company, so an old domain may have been acquired last month and a new domain may belong to a company registered decades ago. Company age belongs to the registration record: the licence issue date is the entity's date of establishment.

What should I check instead of WHOIS?

The company registration record, using the 18-character Unified Social Credit Code taken from the business licence rather than a name or a website. The registered record is what identifies the entity, states its status and scope, and can be dated; the website is marketing that no authority checked against it.

Field noteA check that looks free

Do WHOIS lookups tell you anything about a Chinese supplier?

It is a standard line in sourcing guides: run a WHOIS on the supplier’s domain, and treat a hidden or freshly-registered record as a warning. Applied to Chinese suppliers that advice produces false alarms in both directions, because two rules in China’s domain regime pull against each other — identity is verified, and identity is withheld.

Published 9 August 2026 · 4-minute read · Regulation text checked 9 August 2026

Prepared by Currawong Web’s China-side verification network.

1. What a lookup actually returns

Domain registration data is not one global database with one policy. Across most of the world, contact fields have been redacted or proxied by default for years, so a lookup commonly returns registrar, creation date, expiry and status — and a privacy service where a name used to be. That is the ordinary state of the internet, not a property of Chinese suppliers.

What is specific to China is the rulebook behind those fields, and it is more demanding than buyers assume.

2. Verified identity, withheld record

China’s Measures for the Administration of Internet Domain Names (Ministry of Industry and Information Technology) set three requirements that sit in tension for anyone hoping to use WHOIS as a due-diligence tool:

Identity must be real and verified. A registrar must require the applicant to provide the holder’s true, accurate and complete identity information, and registries and registrars must verify that information for truthfulness and completeness. If it is inaccurate or incomplete the applicant must correct it — and if they do not, or supply false information, the registrar must not provide the registration service.
A public query service must exist. Registrars are required to publish their service terms and to provide public query services for domain registration information.
Personal information must not be handed over. Registries and registrars must store and protect users’ personal information and must not provide it to others without the user’s consent, except where law or administrative regulation provides otherwise.

Read together: the holder behind a Chinese domain has been identity-checked to a standard many jurisdictions do not require — and the same regime is why you cannot see the result. The check happened; it was not performed for you.

So the common inference is backwards. “WHOIS is private, therefore they are hiding something” describes a legal default, not a choice by your supplier. Conversely, a lookup that does show a company name proves only that a name was entered and verified at some point by a registrar — it is not a registered corporate fact, and it creates no legal relationship between that company and the goods you are buying.

3. Domain age is not company age

The creation date is the most-cited field and the most over-read. Domains are traded assets: an eight-year-old domain may have been acquired last month, and a domain registered this year may belong to a company established decades ago. The two facts are not connected by anything.

Company age has a proper source. The issue date on a business licence is the entity’s date of establishment, and it sits in the registered record where it can be checked against a code rather than inferred from a website. Contact details behind a domain also move on their own schedule — the domain rules give holders 30 days to update changed contact information, which is a different clock from the 30-day rule for changes to registered company items.

4. What to read instead

Start from the licence, not the website. Take the 18-character Unified Social Credit Code and check the current registration record against it. A website is marketing; no authority reconciled it with any registration.
Treat the domain as a contact channel, not evidence. An email address on a company domain shows the sender controls mail on that domain. That is worth something operationally and nothing evidentially.
Put the weight where it belongs. The questions that decide an order — is the entity active, what is it registered to do, who receives the payment — are answered in the registration record, and a saved document is a snapshot with a short shelf life.

This note describes domain-registration rules as published by Chinese authorities. It is not legal advice, and it is not a claim that any particular domain or holder is legitimate. We did not survey WHOIS responses for Chinese supplier domains; the description of what lookups typically return is general background, and only the rule statements above are sourced. Records reach us through licensed commercial data platforms that republish filings originating in the National Enterprise Credit Information Publicity System; an absence on a platform is not proof of absence in the official record.

Primary sources

Measures for the Administration of Internet Domain Names — Ministry of Industry and Information Technology, full text as published by the Cyberspace Administration of China. Articles 30 to 33 carry the identity-verification duty, the refusal-of-service rule for false information, the public query service, the bar on disclosing personal information without consent, and the 30-day contact-update rule. Checked 9 August 2026.
Regulations on the Registration and Administration of Market Entities (State Council Order No. 746) — the licence issue date as date of establishment, and the 30-day rule for changes to registered items. Checked 9 August 2026.