What a registration record holds
Every domain and every block of IP addresses is registered to someone. The record of that registration is public, and this tool reads it.
The old way to read it was WHOIS, a plain-text protocol from 1982 that returned whatever free-form text each registry felt like sending. RDAP replaced it. It returns the same facts as structured data over HTTPS, with consistent field names, so a lookup gives you the same shape of answer whichever registry holds the record. This page asks rdap.org, which forwards the question to the registry that actually owns it.
Reading a domain record
| Field | What it tells you |
|---|---|
| Registrar | The company the domain was bought through, and where the owner manages it. Not the same as the registry, which runs the whole top-level domain. |
| Registered | When the name was first taken. A domain registered long ago is usually an established one. |
| Updated | The last change to the record: a transfer, a name server change, a renewal. |
| Expires | When the current registration period ends. If it lapses the domain stops resolving and can eventually be registered by someone else. |
| Status | Codes describing locks and pending operations. The tool explains each one it finds. |
| Name servers | Which servers answer DNS questions for the domain. Change these and you have moved the domain's DNS. |
| DNSSEC | Whether the zone is cryptographically signed, so resolvers can detect tampered answers. |
Why the owner's name is usually missing
Until 2018 most domain records listed the registrant's name, postal address, email and phone number. The GDPR made publishing personal data that way unlawful for European registrants, and registrars applied the change worldwide rather than run two systems. Most records now show the registrar and the dates, and replace contact details with a redaction note or a forwarding address.
Many registrars also sell privacy services that substitute a proxy's details even where publication would be allowed. If you need to reach a domain holder, the abuse or technical contact in the record, or a form at the registrar, is normally the route. Law enforcement and trademark holders can request the underlying data through legal channels.
Reading an address record
Address blocks work differently. IANA hands large ranges to the five regional internet registries: ARIN for North America, RIPE NCC for Europe and the Middle East, APNIC for Asia and the Pacific, LACNIC for Latin America, and AFRINIC for Africa. Each registry assigns smaller blocks to providers and organisations, who may assign smaller blocks again.
So an address lookup shows a range rather than a single address, the organisation it is assigned to, and often a parent block it was carved out of. Organisation details here are usually not redacted, because a company holding address space is not a private individual. The abuse contact in this record is where to report attacks or spam coming from that range.