RDAP instead of WHOIS
WHOIS returns unformatted text that every registry structures differently. RDAP returns the same data as JSON over HTTPS, with fixed fields. For generic endings such as .com, .net, .org or .shop, RDAP has been the authoritative source since January 2025, and registries and registrars may switch WHOIS off.
- Registrar is the company the domain was registered through, often your hosting provider. Renewals, transfers and abuse reports go there.
- Expiry date: for most endings the domain expires yearly and is renewed automatically by the provider. .de has no expiry date; the domain runs until it is cancelled.
- Status values are EPP codes.
client transfer prohibitedis the transfer lock, and that is good.client holdorserver holdmean the domain is suspended and does not resolve.redemption periodandpending deletemean it is being deleted. - DNSSEC is on when a DS record is registered at the registry. If it is missing although the zone is signed, the chain is broken. Check it in the DNS lookup with type DS.
Why does the registrant say “redacted”?
Since the GDPR, almost all registries no longer publish names and addresses of private individuals. For companies the organisation is often still shown. If you need to reach the registrant, for example over a trademark issue, go through the registrar.
IP addresses
For IP addresses the tool asks the responsible regional registry (RIPE NCC for Europe, ARIN, APNIC, LACNIC, AFRINIC). You see the network, the operator and the abuse contact. That is where you report spam, attacks or port scans from this address. The host name for the address is shown by the DNS lookup via PTR.
Keep an eye on expiry
“Expiry reminder (.ics)” downloads a calendar entry 30 days before expiry. For certificates, the certificate expiry overview does the job.
FAQ
What is the difference between RDAP and WHOIS?
Both return a domain’s registration data. WHOIS is a text protocol on port 43 without a fixed format. RDAP uses HTTPS and JSON, has a uniform structure and supports tiered access. For generic endings RDAP has replaced WHOIS.
Why does .de show no expiry date?
DENIC has no term. A .de domain stays registered until the holder cancels it or the provider releases it over unpaid invoices. Billing runs through the provider.
Why can’t I see a domain’s owner?
The data is redacted for privacy. Contact is possible through the registrar, usually via a contact form or the abuse address.
Where do I report spam or an attack from an IP address?
At the abuse address registered for the network. The IP lookup shows it under “Report abuse”. Attach evidence such as log lines with timestamp and time zone.
Are my lookups stored?
No. The domain or IP address is only passed to the responsible RDAP server. Only the public directory of RDAP servers is cached.