How it works
Enter a domain name (like example.com) or an IP address (like 8.8.8.8) and the tool queries RDAP - the Registration Data Access Protocol - for that record. RDAP is the modern, JSON-based successor to the legacy port-43 WHOIS protocol, returning the same registration facts in a structured, reliable form. Domain queries route to the authoritative registry or registrar; IP queries go to the Regional Internet Registry (RIR) that holds the allocation, ARIN, RIPE NCC, APNIC, LACNIC or AFRINIC.
The tool detects whether you entered a domain or an IP and shows the relevant fields. For a domain: registrar of record, creation, updated and expiry dates, EPP status flags, authoritative nameservers and - where not redacted - the registrant. For an IP: the network name, allocated address range, country and RIR. The full underlying record is always available under Raw RDAP JSON for fields the summary does not surface.
Read the output top-down. The expiry date carries a coloured badge for days remaining - red at 7 or fewer, amber at 60 or fewer - so a lapsing domain is obvious at a glance. Check the registrar to know where to renew or report abuse, confirm the nameservers match your expected DNS provider (a mismatch can mean a stale or hijacked delegation), and scan the status flags for protective locks such as clientTransferProhibited. A creation date only days old on a supposedly established brand is a classic phishing red flag.
Key WHOIS / RDAP fields and status codes
| Field | What it means & how to read it |
|---|---|
| Registrar | The ICANN-accredited company managing the registration: where you renew, transfer, or send abuse reports. |
| Created | When the domain was first registered. A recent date on a supposedly long-established brand is a warning sign. |
| Updated | The last change to the record: a renewal, nameserver change or contact edit. Not website content changes. |
| Expires | When the current term ends. Unless renewed, the domain enters a grace period and can eventually be deleted and re-registered. |
| Nameservers | The authoritative DNS servers for the zone. They reveal the DNS/hosting provider and confirm the delegation is correct. |
| Status | EPP status codes describing locks and lifecycle (see below). Registry-set codes begin server; registrar-set codes begin client. |
| Registrant | The registering person or organisation. Often redacted under GDPR, so it may appear anonymised or blank. |
| Range / Country (IP) | For IP lookups: the allocated CIDR block, the RIR that assigned it, and the registered country of the operator. |
Common EPP status codes
- ok / active, no pending operations; a normal state.
- clientTransferProhibited, a registrar lock blocking transfers to another registrar; a sensible anti-hijack default.
- clientHold / serverHold, removed from the DNS zone; the domain will not resolve.
- pendingDelete, scheduled for deletion after its lifecycle windows expire.
- redemptionPeriod: expired and deleted, but still restorable by the registrant, usually for a fee.
Frequently asked questions
What is the difference between WHOIS and RDAP?
WHOIS is the original protocol: plain text over port 43, with output that varies between registries. RDAP returns the same data as standardised JSON with consistent field names and support for internationalisation and access control. This tool uses RDAP, which is why the results are structured and reliable.
Why is the registrant name blank or redacted?
Since GDPR, most registries and registrars redact personal contact details from public registration data by default. The registration still exists and the technical fields remain visible, but the registrant name, email and address are often withheld or replaced with a privacy proxy.
Can I look up an IP address as well as a domain?
Yes. Enter an IPv4 or IPv6 address and the tool queries the Regional Internet Registry holding the allocation. Instead of registrar and expiry you get the network name, allocated range, RIR and country, useful for identifying who operates a given IP block.
Does an expiry date mean the domain is available that day?
No. After expiry a domain typically passes through an auto-renew grace period and then a redemption period before it is actually deleted and released. The exact windows vary by registry, but the process usually takes several weeks, during which the original owner can still recover it.
Why did my lookup return no data or an error?
Some top-level domains do not publish RDAP endpoints, and a few registries rate-limit or restrict queries. An invalid or unregistered domain, or a private/reserved IP range, also returns nothing. Check the spelling and confirm the TLD exposes RDAP.