← ALL TOOLS
// RECON & INTEL · SERVER

WHOIS / RDAP Lookup

Registrar, creation and expiry dates, status and name servers for a domain or IP, from RDAP with a WHOIS fallback.

RECON · SERVER-SIDE · RATE LIMIT 30/MIN

Rate limited: 10 runs in a burst, 30 per minute. Results are never stored. Too long to share as a link.

HISTORY

Your last 5 runs appear here for 7 days, on this device only.

RESULT

Fill in the form and run the tool; the result appears here.

WHOIS / RDAP Lookup looks up registration details for a domain or an IP address: registrar, creation, expiry and last-updated dates, status codes and name servers for domains, or the registered network block for IP addresses. RDAP is tried first, with a WHOIS text fallback. For a name like www.example.com, the tool falls back to the parent domain.

How to read the result

The table shows the parsed registrar, dates, status codes (like clientTransferProhibited, which blocks an unauthorised transfer) and name servers. The Source row says whether the answer came from RDAP or a port 43 WHOIS server; the raw record underneath is the untouched response, cut at 32 KB.

For an IP query, the extra rows show the allocated range (start and end address), the network's name, type and country, which describe who holds the block, not who is using the address today.

Defender tips

  • Renew domains well before expiry and enable a registrar transfer lock; an expired or unlocked domain is one of the cheapest ways to lose control of a brand.
  • Watch for unexpected status or name server changes on domains you own. A change you did not make is worth investigating immediately.
  • Registrar privacy services can hide contact details entirely; a redacted record is not itself suspicious, it is often policy (GDPR-driven redaction for many registrars).

FAQ

Why does the result not show who owns the domain?

The parsed view lists the registrar, dates, status and name servers only. Contact details, where the raw record has them at all, are usually redacted: most registrars hide personal data by default, especially for registrants in the EU/EEA and the UK, since GDPR came into effect. This is normal and not a sign of anything hidden.

What is the difference between RDAP and WHOIS?

RDAP is the newer, structured JSON protocol meant to replace free-text WHOIS; it is more reliable to parse and increasingly the primary source, so this tool prefers it and only falls back to port-43 WHOIS when needed.

How current is the data?

It is a live query at the time you run it, sent through the public RDAP bootstrap service (rdap.org) to the registry's own RDAP server, or to the registry's WHOIS server, not a cached copy.