What is a WHOIS Lookup and How Does RDAP Work?
What is a WHOIS Lookup?
A free WHOIS lookup tool retrieves public domain registration data so you can check domain expiry, estimate domain age, and see who owns a domain at the registrar layer—creation and expiry dates, nameserver hosts, DNSSEC delegation status, and status codes such as transfer locks. Modern registries expose this through RDAP, which returns structured JSON instead of legacy port-43 text.
Why use this Domain Intelligence Dashboard?
Acquisition teams verify expiry runway before renewals or transfers. Security reviewers check DNSSEC, transfer prohibitions, and SSL reachability alongside registry facts. Developers debugging DNS compare published nameservers with live A/AAAA resolution—without installing CLI whois clients or parsing inconsistent text output.
Key Features
RDAP-backed registrar and timeline parsing, domain health score with risk and best-practice checklists, nameserver provider detection, client-side DNS resolution, SSL enrichment, tabbed detail views (Overview, Registration, DNS, Security, Timeline, Raw Data), copyable plain-text reports and raw JSON, and quick jump to DNS Lookup with hostname prefill.
How to Look Up Domain WHOIS/RDAP Data
Follow these steps to get accurate results from the tool interface above.
- Enter a domain (example.com) or paste a full URL—paths and query strings are stripped automatically.
- Press Enter or click Lookup. Subdomains such as www.example.com resolve to the registrable apex (example.com). After a successful lookup, wait about 4 seconds before the next one to avoid registry rate limits; failed lookups can be retried immediately.
- Review the health score, status badges, domain timeline, and risk/best-practice checklists.
- Open Overview, Registration, DNS, Security, Timeline, or Raw Data tabs for structured fields with one-click copy.
- Use Quick Actions to copy a plain-text report, copy raw RDAP JSON, or quick jump to DNS Lookup with the hostname prefilled.
WHOIS/RDAP fields explained (registrar, expiry, DNSSEC, locks)
How this free WHOIS lookup maps Registration Data Access Protocol (RDAP) responses into registrar, DNS, security, and health metrics—useful when you need to check domain expiry, domain age, or who owns a domain. RDAP reference last verified: July 2026 (IANA bootstrap + RFC 7483 field mapping).
RDAP vs legacy WHOIS
This tool queries public RDAP registries first (RFC 7483 structured JSON with typed entities, events, and status codes). Legacy WHOIS port-43 text varies by registrar and is harder to parse consistently. Routing uses the IANA RDAP DNS bootstrap file, with rdap.org as a fallback when a TLD is missing from cache. Open the Raw Data tab to see the exact JSON payload that drove the dashboard—for example truncated fields like `"ldhName": "EXAMPLE.COM"` and `"status": ["clientTransferProhibited"]`.
Registrar & registrant fields
Registrar name and handle come from RDAP entities with role registrar—this is usually what people mean by “who owns this domain” at the commercial layer. Registrant names are often redacted under GDPR/WHOIS privacy; the dashboard marks Privacy Protected when redaction markers appear in vCard data. Personal email or phone is intentionally unavailable from most public registries.
Registration events timeline
eventAction registration, last changed, and expiration drive the timeline and domain-age signals—handy as a domain age checker and to check domain expiry runway. Lifeline percent estimates remaining registration time between created and expiry dates when both events are present.
Nameservers & DNS provider
nameservers[].ldhName lists authoritative hosts published in RDAP. Provider detection matches common patterns (Cloudflare, Route 53, GoDaddy, Google Cloud DNS). Client-side A/AAAA resolution then shows current address records alongside registry data so you can compare published NS with live answers.
DNSSEC & transfer lock
secureDNS.delegationSigned maps to Enabled/Disabled/Unknown in Security. Domain status codes such as clientTransferProhibited indicate registrar locks that block unauthorized transfers. In Raw Data you may see snippets like `"secureDNS": { "delegationSigned": false }` or `"status": ["clientTransferProhibited"]`—those values feed the security checklist directly.
Domain health score
Scoring weighs expiry runway, DNSSEC, SSL reachability, nameserver redundancy, and transfer lock. Grades: Excellent (90+), Good (70+), Fair (50+), Poor (<50). Treat it as a checklist signal for renewals and migrations—not a legal or security certification.
SSL enrichment
After RDAP loads, a lightweight HEAD request to https://{apex} checks whether TLS answers for the hostname. A reachable certificate raises confidence that the domain is live on HTTPS; unreachable hosts surface as unknown/fail without blocking the WHOIS result. This confirms TLS is negotiable—it does not replace a full certificate transparency or chain audit.
Subdomain & URL normalization
Inputs with protocols, paths, or query strings normalize to a hostname before lookup. Registry RDAP endpoints reject many subdomains with HTTP 400; the tool queries the public suffix / registrable domain instead and notes when the apex differs from your input.
Rate limits & errors
Upstream registries may return HTTP 429—surfaced as a user-facing retry message. After each successful lookup the UI enforces about a 4-second cooldown so rapid retries do not amplify registry throttling. HTTP 404 means no RDAP object for that domain. Invalid or private hosts are rejected before any network call.
Frequently Asked Questions
Expandable answers for common debugging bottlenecks and data privacy questions.
Related tools
Explore other related utilities that complement this tool.
Official Documentation & References
Authoritative specifications and platform documentation for this utility.