Whois/RDAP lookup
Returns registrar, creation/expiry dates, status flags and nameservers via RDAP — structured and GDPR-compliant.
How this tool works
The whois lookup uses RDAP (Registration Data Access Protocol) — the modern JSON-based successor to the old whois protocol. You get registrar, creation date, status flags (clientHold, clientTransferProhibited, etc.), nameservers and — where the registrar releases it — owner data. An expiry date only appears where the registry keeps one and publishes it: .de domains are open-ended and have none, .at runs no public lookup, .ch and .li answer without a date. Where it is missing, the reason is shown. Unlike classic whois tools, RDAP returns structured data and is GDPR-aware: personal owner data is often redacted post-GDPR.
Typical use cases
- Before buying an aftermarket domain, verify status flags and expiry
- On suspected domain hijacking, check if clientUpdateProhibited is set
- Confirm nameserver changes post-migration
- Pull expiry into monitoring for renewal reminders
- Trademark disputes: establish since when a domain has been registered
Frequently asked questions
Why is owner data often "REDACTED"?
Since GDPR 2018 registrars must not publish personal data of individuals anymore. Corporate domains may still show data but are often anonymised via privacy services.
What is the difference between whois and RDAP?
RDAP is the modern variant: JSON instead of free text, well-defined status codes, internationalised names, HTTPS-based. ICANN officially retired whois in 2025 — only RDAP is supported going forward.
Which status flags are critical?
clientHold = domain not resolving; clientUpdateProhibited = owner cannot change anything (hijacking protection); clientTransferProhibited = transfer lock; pendingDelete = about to be free. Always read all flags before buying.
Why is there no expiry date for .de?
Because there is none. DENIC answers via RDAP (rdap.denic.de) and returns status and last-changed date, but no expiration event — a .de domain is allocated open-ended and does not expire, it is terminated. The old port-43 protocol shows nothing different. Other endings differ: .at runs no public lookup at all, .ch and .li answer without a date, generic endings such as .com do publish it. We always put the reason in the response instead of showing an empty line.
Is data cached?
Yes — one hour per domain and language, to avoid hammering registry servers. The "cached" flag in the response tells you whether data is fresh.
Related tools
Continuous monitoring vs. one-shot?
XICTRAQ monitors uptime, SSL, security headers, GDPR and performance 24/7. Free plan, no credit card.