Loading network utility...
Loading network utility...
Domain ownership information is cataloged globally across ICANN-accredited registries and Regional Internet Registries (RIRs). This technical guide details how to query WHOIS and RDAP systems, decode EPP security flags, and navigate GDPR privacy masking.
Run live checks and calculations directly on LotsofNetwork.
For over three decades, the primary mechanism for auditing domain registrations was the WHOIS protocol, established in 1982 and codified in RFC 3912. Legacy WHOIS operates over TCP port 43, returning unstructured, free-form text with no standardized schemas, international character support, or unified access controls.
To modernize Internet governance, ICANN and the IETF standardized the Registration Data Access Protocol (RDAP) across RFC 7480 through RFC 7484. RDAP delivers machine-readable JSON payloads over encrypted HTTPS, provides granular access tiering, natively supports multilingual internationalized domain names (IDNs), and enables standardized error codes.
Network investigators and sysadmins utilize three primary methods to inspect domain registration data:
1. Browser-Based Web Inspection: Utilizing LotsofNetwork's free WHOIS Lookup tool parses both RDAP and legacy registry servers, presenting registration dates, nameservers, registrar abuse contacts, and status flags in a unified dashboard.
2. Terminal Command Line: Execute native whois queries directly from macOS or Linux terminal shells.
3. Programmatic REST API Queries: Fetch structured JSON payloads directly from authoritative RDAP endpoints.
# Method 1: Query legacy WHOIS via terminal whois lotsofnetwork.com # Method 2: Query authoritative RDAP JSON endpoint via cURL curl -s -H "Accept: application/rdap+json" https://rdap.org/domain/lotsofnetwork.com | jq . # Method 3: Query specific registrar WHOIS server directly whois -h whois.verisign-grs.com "domain lotsofnetwork.com"
Every registered domain name is governed by the Extensible Provisioning Protocol (EPP). EPP status flags define whether a domain can be transferred, updated, renewed, or deleted:
Always ensure your valuable domain names have 'clientTransferProhibited' enabled. This registrar lock prevents domain hijacking attacks where attackers attempt unauthorized transfers to hostile registrars.
| EPP Status Code | Operational Meaning | Security Impact | Action Required to Modify |
|---|---|---|---|
| ok / active | Domain is in normal operational state | Normal | None (Operational) |
| clientTransferProhibited | Registrar lock preventing unauthorized domain transfers | High Protection | Unlock domain in registrar control panel |
| clientUpdateProhibited | Prevents modification of nameservers, contacts, or DNSSEC | Maximum Security | Registrar panel unlock required |
| serverHold | Registry suspended domain (unpaid / abusive / legal order) | Critical (Offline) | Contact registry or registrar immediately |
| autoRenewPeriod | Grace period (0-45 days) where registrar renews domain automatically | Transitional | Domain owner can renew without penalties |
| redemptionPeriod | Domain expired beyond grace period; pending permanent release | High Danger | Requires hefty redemption restoration fee ($80-$250) |
| pendingDelete | Domain is queued for permanent deletion; returns to public pool in 5 days | Final Phase | Cannot be saved; backorder via drop-catching service |
When a domain reaches its expiration date, it does not immediately become available for someone else to register. It progresses through a standardized ICANN lifecycle:
1. Active Registration: The domain is functional and pointing to authoritative nameservers.
2. Auto-Renew Grace Period (1 to 45 days): The domain stops resolving active websites, but the original owner can renew at standard retail pricing.
3. Redemption Grace Period (30 days): The registry holds the domain in purgatory. The owner can reclaim it, but registrars impose steep redemption penalty fees.
4. Pending Delete (5 days): The registry prepares the domain for total purge. No renewals are permitted.
5. Dropped / Public Availability: The domain drops at a designated registry drop time and becomes freely registerable on a first-come, first-served basis.
Prior to 2018, WHOIS records exposed personal names, home addresses, phone numbers, and personal email addresses publicly, generating massive email spam and privacy concerns.
Following the European Union General Data Protection Regulation (GDPR), ICANN adopted the Temporary Specification for gTLD Registration Data. Today, personal identifying data for natural persons is automatically redacted by default across all ICANN-accredited registrars.
However, organizational registrant data, registrar technical contacts, nameservers, and official abuse reporting email addresses remain public and enforceable under ICANN bylaws.
AI Mobile App Developer & Full-Stack Systems Engineer•Dhaka, Bangladesh
Bayajit Islam is an AI Mobile App Developer and Full-Stack Systems Engineer based in Dhaka, Bangladesh. With 2+ years of hands-on production experience building cross-platform apps for iOS, Android & Desktop with Flutter & Dart, asynchronous backends with FastAPI & Python, and modern web applications with Next.js, TypeScript, and Docker, he engineered LotsofNetwork as a zero-latency, privacy-first diagnostic platform for developers and network administrators.
Quick answers to common questions on this topic.
High-speed, zero-cost engineering tools built for network diagnostics and developer workflows.
Detect IP, GeoIP, ISP, ASN & PTR
Reverse IP to PTR hostname & verify FCrDNS
Query A, AAAA, MX, TXT & NS records
Audit SPF, DKIM & DMARC records
Check global DNS record propagation across Anycast resolvers
Calculate CIDR, masks & host ranges