Live RDAP / WHOIS Domain & IP Allocation Inspector (2026)

The Registration Data Access Protocol (RDAP, standardized in RFC 7480–7484 and RFC 9082/9083) is the official successor to the 1980s port-43 WHOIS protocol. While legacy WHOIS returns unstructured, inconsistent plain text over unencrypted TCP port 43, RDAP delivers standardized JSON over HTTPS, supports internationalization, and provides tiered access controls.

Following the enforcement of the EU General Data Protection Regulation (GDPR) and ICANN's Registration Data Policy, registries and registrars redact personal registrant contact fields (Name, Street, Phone, Email) by default to prevent spam and identity theft, while keeping Registrar details, creation dates, nameservers, and EPP status codes public.

`clientTransferProhibited` is a registrar-level lock indicating that the domain cannot be transferred to another registrar unless the account owner explicitly unlocks it first. Production domains should always have `clientTransferProhibited` (and ideally Registry Lock `serverTransferProhibited`) enabled to prevent unauthorized domain hijacking.

Threat actors continuously register fresh lookalike or typosquatted domains immediately prior to launching credential-harvesting campaigns. A domain registered less than 14 to 30 days ago (`creationDate`) claiming to be an established bank, SaaS portal, or IT helpdesk is a high-confidence phishing indicator.

A Registry (such as Verisign for `.com` or Public Interest Registry for `.org`) manages the master database and authoritative TLD nameservers for an entire top-level domain. A Registrar (such as Cloudflare, Namecheap, or MarkMonitor) is an ICANN-accredited retailer that sells domain registrations to end users and submits records to the Registry.