About this tool

This is the starting point for most domain investigations: before reading content or checking hosting, an investigator wants to know who registered the name, when, and under what registrar. The lookup works on a domain or a full URL; a URL is reduced to its registrable domain first.

Example inputs: example.comdigitpol.comhttps://www.wikipedia.org/wiki/Domain_name

What the result shows

Registrar
The company that sponsors the registration, taken from the registrar entity in the RDAP response. This is not the website host.
Events
Registration, expiration, last-changed and transfer dates as recorded by the registry at the time of the query.
Status
EPP status codes such as clientTransferProhibited that describe locks and restrictions applied to the domain.
Nameservers
The authoritative nameservers delegated for the domain, which usually identify the DNS provider.
Entities
Registrant, administrative, technical and abuse contact roles, often redacted under privacy rules.
DNSSEC
Whether the registry records the delegation as signed, taken from the secureDNS field.

Investigation use cases

  • Confirming which registrar sponsors a suspect domain before sending an abuse report
  • Checking whether a domain is locked or pending transfer before an acquisition
  • Cross-referencing nameservers to identify the DNS provider in a fraud case
  • Establishing a baseline registration snapshot for a monitored domain

Limitations

RDAP coverage and the fields returned vary by registry, personal contact details are frequently redacted, and legacy port-43 WHOIS is not queried, so some older or thin-registry data may be unavailable.

Frequently asked questions

Is this the same as the old WHOIS protocol?

No. It queries RDAP, the structured JSON replacement for WHOIS, which most registries now serve as their authoritative source.

Why are the registrant name and address missing?

Most registrars redact personal registrant data or substitute a privacy proxy under data protection rules; this is normal and not evidence of wrongdoing.

Can I look up an IP address here?

No, this tool takes a domain or URL. Use the IP lookup tool to check network registration for a resolved address.

Is the full report free?

The lookup is free within daily limits; a sealed, downloadable report is an account or paid feature.

Need evidence you can keep?

Every lookup produces a full public-source report sealed with a SHA-256 digest. Accounts keep a saved history and can download the DIGITPOL PDF report.