[{"data":1,"prerenderedAt":25},["ShallowReactive",2],{"content-whois-lookup-en":3},{"about":4,"steps":7,"faq":12},[5,6],"When does a domain expire, which registrar holds it and which name servers are set? Who owns an IP address that shows up in your logs? Such questions used to be answered by WHOIS. Today there is RDAP, a standardized protocol with structured data that all major registries offer.","Using the official IANA directories, the tool automatically finds the registry responsible for the domain ending, IP range or AS number and shows registrar, status, registration and expiry date, name servers, DNSSEC as well as network owners and abuse contacts. Query a domain’s DNS records with the [[dns-lookup]]; work through network ranges with the [[subnet-calculator]].",[8,9,10,11],"Enter a domain (also as a URL or e-mail address), an IP address or an AS number.","Click “Look up”.","Read registrar, dates, status and name servers or network owner and range.","For abuse reports you find the abuse contacts in the list of contacts.",[13,16,19,22],{"q":14,"a":15},"What is the difference between WHOIS and RDAP?","WHOIS returns unstructured text in a format that differs between registries, over its own port. RDAP (Registration Data Access Protocol) is the modern successor: it uses HTTPS, returns uniform JSON and supports internationalized domains. For gTLDs such as .com, RDAP has been the official standard since 2025.",{"q":17,"a":18},"Why don’t I see the domain holder’s name?","Since the GDPR, most registries and registrars no longer publish personal data. For .de, DENIC for example only shows status and name servers. Holder details are usually only available for companies that publish them voluntarily, or on request with a legitimate interest.",{"q":20,"a":21},"How do I find out who owns an IP address?","Enter the IP address. The regional internet registries (RIPE, ARIN, APNIC, LACNIC, AFRINIC) return the network it belongs to, its owner – usually a provider or hoster – and often an abuse contact for complaints about spam or attacks.",{"q":23,"a":24},"Does the lookup run through a server?","Usually not: your browser asks the registry directly. Some registries (for example DENIC for .de) do not allow that, though. Then the no.tools API queries the registry’s official RDAP address and passes the result on without storing anything.",1792173708305]