Who is behind a domain or IP range?
Every domain and IP block is recorded in a public registry. This lookup queries those registries live using RDAP — the protocol that replaced classic whois — and shows the registration date, registrar, expiry, status, and nameservers exactly as the registry publishes them.
Reading the results
For domains
- Registered — when the domain was first created; young domains are a scam signal
- Expires — when the registration lapses
- Registrar — the company the domain was bought through
- Status — locks like clientTransferProhibited are normal protection
- Nameservers — who answers DNS, often revealing the hosting provider
For IP addresses
- Range — the block the address belongs to
- Organization — the ISP or company holding the allocation
- Country — where the block is registered (not necessarily used)
Why owner names are hidden
Since GDPR in 2018, registries redact personal registrant details by default, and most domains also use registrar privacy services. What remains public — dates, registrar, nameservers, status — is still enough for the checks that matter: a "bank" registered last month through a discount registrar, or an online shop whose domain expires in three weeks, tells you what you need to know.
Checking a suspicious site
Combine this with our other tools: decode any QR code with the QR decoder, unwrap shortened links with the link expander, then check the final domain's age here. For the IP behind a website, our IP lookup adds geolocation and ISP details on top of the registry data.