Live RDAP / WHOIS Domain & IP Allocation Inspector (2026)

Query official IANA/ICANN Registration Data Access Protocol (RDAP) JSON endpoints in real time to inspect domain lifecycle dates, EPP transfer locks, DNSSEC DS records, and ARIN/RIPE/APNIC IP netblocks.

Facebook X (Twitter)WhatsApp LinkedIn

Live RDAP / WHOIS Domain & IP ASN Registration Inspector — Interactive Console

Runs locally in your browser • Instant output

Quick Presets:

Registrar / RIR Authority

Cloudflare, Inc. (IANA ID: 1910)

2798149201_DOMAIN_COM-VRSN

Registration & Expiry

Created: 2023-07-14T09:18:42Z

Expires: 2027-07-14T09:18:42Z

DNSSEC & Registry Lock

Signed (delegationSigned: true — ECDSAP256SHA256)

Updated: 2026-01-10T14:22:11Z

EPP Status Flags & Authoritative NameserversBuilt-in Verified Snapshot (Click 'Query Live RDAP' for live registry)

clientTransferProhibitedclientUpdateProhibitedclientDeleteProhibited

Nameservers:

NS1.CLOUDFLARE.COMNS2.CLOUDFLARE.COM

Ready

Embed / Cite This Tool (Markdown & HTML)

GitHub / Reddit Markdown Badge

[![Live RDAP / WHOIS Domain & IP ASN Registration Inspector](https://img.shields.io/badge/ZerosUniverse-Free_Tool-ff6a00)](https://www.zerosuniverse.com/tools/whois-rdap-domain-ip-lookup/)

Blog / Documentation HTML Citation

<a href="https://www.zerosuniverse.com/tools/whois-rdap-domain-ip-lookup/">Live RDAP / WHOIS Domain & IP ASN Registration Inspector — ZerosUniverse</a>

2026 Quick-Reference Cheat Sheet & Benchmark Table: Live RDAP / WHOIS Domain & IP ASN Registration Inspector

Quick Answer & 2026 Technical Summary (rdap whois lookup online)Updated 2026 Standard

The Registration Data Access Protocol (RDAP, standardized in RFC 7480–7484 and RFC 9082/9083) is the official successor to the 1980s port-43 WHOIS protocol. While legacy WHOIS returns unstructured, inconsistent plain text over unencrypted TCP port 43, RDAP delivers standardized JSON over HTTPS, supports internationalization, and provides tiered access controls. Use this interactive rdap whois lookup online above to test whois domain age checker, icann rdap json lookup, and epp domain status codes explained locally in your browser with zero server uploads.

Target Keyword Spec: rdap whois lookup online  |  Modules: Live Standardized IANA RDAP JSON Engine • Domain Age & Phishing Risk Evaluator • EPP Status Code & Transfer Lock Auditor

Primary Focus: rdap whois lookup online

Core Capability: whois domain age checker

Privacy Mode: 100% Client-Side (Zero Upload)

Technical Parameter / Module	Standard / Keyword Spec	Architecture & Validation Rule	Operational Use Case (2026)
Live Standardized IANA RDAP JSON Engine	`whois domain age checker`	Queries official ICANN-mandated HTTPS RDAP endpoints (`rdap.org` / Verisign...	SOC Phishing & Lookalike Domain Triage
Domain Age & Phishing Risk Evaluator	`icann rdap json lookup`	Calculates exact domain age in days since initial registration and expiry c...	Domain Hijacking Defense Audit
EPP Status Code & Transfer Lock Auditor	`epp domain status codes explained`	Translates Extensible Provisioning Protocol (EPP) status flags (`clientTran...	Network Footprint & Netblock Ownership Verification
Execution & Privacy Architecture	`100% Client-Side WebCrypto / JS Sandbox`	0 Bytes Sent to External Servers	Safe for internal SOC & authorized lab artifacts
NIST SP 800-53 / OWASP Alignment	`OWASP ASVS v4.0.3 / NIST CSF 2.0`	Deterministic Rule & Header Verification	Maps findings to actionable hardening controls
Cryptographic & Entropy Standard	`SHA-256 / AES-256-GCM / Argon2id`	≥ 128-bit Effective Security Margin	Meets 2026 post-quantum & zero-trust baselines

In-Depth ZerosUniverse Tutorial

What is WHOIS Lookup & What Registration Data Does It Reveal?

Read our complete step-by-step editorial guide, architecture breakdown, and defensive best practices on ZerosUniverse.

Read Full Guide

How to Use Live RDAP / WHOIS Domain & IP ASN Registration Inspector

Enter a Domain Name or IPv4/IPv6 Address

Type any domain (e.g., `cloudflare.com`, `google.com`, `iana.org`) or public IP address (e.g., `1.1.1.1` or `8.8.8.8`).

Execute the Live RDAP HTTPS Query

Click Inspect Registration to query the authoritative TLD registry or Regional Internet Registry (RIR) in real time.

Audit Domain Lifecycle, Locks & Nameservers

Review the calculated Domain Age, Creation/Expiration timestamps, Registrar IANA ID, EPP status badges, and DNSSEC state.

View or Export Raw RFC 9083 RDAP JSON

Toggle the raw JSON viewer to inspect underlying vCard (`vcardArray`) entity objects or copy the structured summary for OSINT reports.

Key Capabilities & Technical Architecture

Live Standardized IANA RDAP JSON Engine

Queries official ICANN-mandated HTTPS RDAP endpoints (`rdap.org` / Verisign / ARIN / RIPE) directly from your browser for structured, machine-verified registration records.

Domain Age & Phishing Risk Evaluator

Calculates exact domain age in days since initial registration and expiry countdown, flagging newly registered domains (<30 days) commonly used in phishing campaigns.

EPP Status Code & Transfer Lock Auditor

Translates Extensible Provisioning Protocol (EPP) status flags (`clientTransferProhibited`, `serverDeleteProhibited`, `clientHold`) into clear security postures.

RIR IP Netblock & Abuse Contact Resolver

Supports both domain names and IPv4/IPv6 addresses—automatically routing IP queries to ARIN, RIPE, APNIC, LACNIC, or AFRINIC to display allocated CIDR blocks and abuse contacts.

Practical Use Cases

SOC Phishing & Lookalike Domain Triage

Verify whether a suspicious sender domain was registered 48 hours ago via a privacy-shielded registrar or has a decade-long enterprise registration history.

Domain Hijacking Defense Audit

Confirm that critical production domains enforce `clientTransferProhibited`, `clientUpdateProhibited`, and signed DNSSEC delegation (`secureDelegation`).

Network Footprint & Netblock Ownership Verification

Look up any IPv4 or IPv6 address to identify the owning organization, parent CIDR allocation, Regional Internet Registry handle, and abuse reporting desk.

Frequently Asked Questions (FAQs)

What is RDAP and why did ICANN replace legacy Port 43 WHOIS with it?+

Why are registrant names and emails often hidden in modern WHOIS/RDAP lookups?+

Following the enforcement of the EU General Data Protection Regulation (GDPR) and ICANN's Registration Data Policy, registries and registrars redact personal registrant contact fields (Name, Street, Phone, Email) by default to prevent spam and identity theft, while keeping Registrar details, creation dates, nameservers, and EPP status codes public.

What does the EPP status code 'clientTransferProhibited' mean?+

`clientTransferProhibited` is a registrar-level lock indicating that the domain cannot be transferred to another registrar unless the account owner explicitly unlocks it first. Production domains should always have `clientTransferProhibited` (and ideally Registry Lock `serverTransferProhibited`) enabled to prevent unauthorized domain hijacking.

Why is Domain Age one of the strongest indicators in phishing detection?+

Threat actors continuously register fresh lookalike or typosquatted domains immediately prior to launching credential-harvesting campaigns. A domain registered less than 14 to 30 days ago (`creationDate`) claiming to be an established bank, SaaS portal, or IT helpdesk is a high-confidence phishing indicator.

What is the difference between a Domain Registry and a Domain Registrar?+

A Registry (such as Verisign for `.com` or Public Interest Registry for `.org`) manages the master database and authoritative TLD nameservers for an entire top-level domain. A Registrar (such as Cloudflare, Namecheap, or MarkMonitor) is an ICANN-accredited retailer that sells domain registrations to end users and submits records to the Registry.