Registration report for a domain or IP address: registrar, expiry, transfer lock and DNSSEC — or the RIR network, holder and abuse contact for an IP. RDAP-first with WHOIS fallback.
we only read public registry data (RDAP/WHOIS) — nothing is stored
Enter a domain or IP address above to run the check.
These tools show symptoms. A full infrastructure audit finds the causes — risks, cost leaks and single points of failure, mapped in two weeks.
The report is built from RDAP, the structured successor to WHOIS, falling back to classic WHOIS for registries that have not migrated. RDAP is why the dates, statuses and lock flags come back as fields rather than as a wall of text that differs per registry.
What you get is the registration side of a domain: who it is registered through, when it expires, whether it can be transferred right now, and whether DNSSEC is signed at the registry.
Give it an IP address instead and the same report covers the network side: which regional registry the address sits in (ARIN, RIPE NCC, APNIC, LACNIC or AFRINIC), the covering prefix, the organisation holding it and the abuse contact for reporting malicious traffic.
Why is the registrant's name hidden?
Most registries redact personal data by default. Redaction is the registry's policy, not a gap in the lookup — the operational fields that matter for infrastructure work, the dates, statuses and nameservers, are still published.
What is clientTransferProhibited, and should I worry?
It is the transfer lock, and seeing it is good. It stops a transfer request from being accepted without you unlocking the domain first, which is the cheapest available defence against domain hijacking. A production domain without it is one compromised registrar account away from moving.
The expiry date is far away but my site went down. Is the domain the problem?
Then it is not registration. Expiry only tells you the domain still belongs to you; whether it resolves is a DNS question — start with the DNS health check, which looks at the delegation and the nameservers.
Why do two lookups of the same domain show different fields?
Registries publish different subsets, and some only answer classic WHOIS. A .com and a country-code domain will not return the same shape of record no matter which tool you use.
What do I get for an IP address?
The registry side of the network: the covering prefix, the organisation it is allocated to, the country on record and the abuse mailbox to report bad traffic to. Private and special ranges — 10.0.0.0/8, 192.168.0.0/16, documentation space — are explained instead, because no registry holds data for them.