Frequently asked questions

Domainat is a free WHOIS and domain toolkit. Search any domain or IP address to see who registered it, through which registrar, when it was created and when it expires — plus its DNS records, SSL certificate, email security and network diagnostics.

Yes, it's free and there's no sign-up. To keep the service fast for everyone there's a fair-use limit on how many searches one visitor can make per minute.

A domain name (example.com), a subdomain, an Arabic or other internationalized domain (موقع.مصر), or an IPv4/IPv6 address. You can also paste a full link — Domainat keeps just the domain.

WHOIS is the long-standing public record of who registered a domain. RDAP (Registration Data Access Protocol) is its modern, structured replacement, now required for all generic extensions. Domainat asks RDAP first and falls back to WHOIS for registries that still only use it.

Every extension whose registry publishes data: all generic extensions (.com, .org, .app…) and well over a thousand in total through RDAP, plus country extensions that still use WHOIS (.sa, .ae, .de, .jp and many more). A few registries, such as .eg, publish no data online — Domainat tells you and links to the registry's website.

Most registrars redact personal data for privacy (GDPR and similar laws). Domainat hides the "REDACTED" fields and, when the registrar provides one, shows a "Contact the owner" button that leads to the registrar's contact form.

Codes like clientTransferProhibited are standard EPP statuses set by the registrar ("client") or the registry ("server"). Domainat explains each one in plain language — for example, a transfer lock protects against unauthorized transfers, while clientHold means the domain is suspended.

It's the registration timeline: the left end is the date the domain was registered, the right end is its expiry date, and the dot marks today, with the time left above it.

"Expires soon" means less than 30 days are left before the expiry date. "Expired" means the date has passed; the owner can usually still renew or restore it for a while before it's released.

If the registry has no record of the domain, Domainat shows it as available. Register it with any accredited registrar before someone else does — Domainat doesn't sell domains.

Some registries are occasionally slow, down, or limit how often they can be queried. Wait a minute and press Try again. If the extension publishes no data at all, Domainat says so and links to the registry instead.

The original record exactly as the registry and registrar returned it (RDAP JSON or WHOIS text), for when you need every detail or want to copy it.

A and AAAA (addresses), MX (mail servers), NS (name servers), SOA (zone settings) and TXT records, fetched live over DNS-over-HTTPS, with each record's TTL.

Use the DNS lookup tool. It supports 16 record types — including CAA, SRV, DS, DNSKEY, HTTPS, TLSA and PTR — through Cloudflare or Google, and accepts names like _dmarc.example.com. Enter an IP address with PTR to get its reverse DNS name.

It asks 10 public DNS resolvers (Google, Cloudflare, Quad9 and others) and compares their answers with the domain's own name servers, so you can see whether a recent DNS change has spread. A ≈ mark means a different address in the same network — normal for load-balanced and CDN sites.

DNSSEC signs DNS records so resolvers can verify they weren't forged. Domainat shows whether a domain is signed and validated, unsigned, or broken (signed but failing validation).

Whether browsers trust the site's HTTPS certificate, the names it covers, who issued it, how many days are left before it expires, the TLS version in use and the full chain of trust. It flags expired, expiring, untrusted and mismatched certificates.

It follows every redirect from http:// to the final page with the time each step takes, then grades six security headers from A+ to F: HSTS, Content Security Policy, clickjacking protection, MIME sniffing protection, Referrer-Policy and Permissions-Policy.

MX records (where mail is delivered), SPF (which servers may send mail for the domain), DMARC (what receivers should do with spoofed mail), DNSSEC, MTA-STS (encrypted delivery) and TLS reporting — each with a pass, warning or fail and an explanation.

Add a TXT record at _dmarc.yourdomain with a policy, starting with p=none and an rua= address to receive reports. Once your legitimate mail passes SPF/DKIM, move to p=quarantine and then p=reject so spoofed mail is blocked.

Whether an IPv4 address — or a domain's website and mail server addresses — appears on 16 public spam blocklists (DNSBLs) such as SpamCop, Barracuda and UCEPROTECT. If a mail server is listed, its email may be rejected; each listing links to that list's removal page.

From Domainat's server, not from your device. Results show the path and latency between our server and the target, which is useful for checking whether a host is reachable from the internet.

Choose 4 to 50 packets and press Run ping. Each reply appears as it arrives, like in a terminal, with live statistics and a latency bar per reply. Stop ends it immediately.

Many routers are configured not to answer traceroute probes. A few silent hops are normal as long as later hops respond. You can also set the maximum number of hops (15, 30 or 64).

Who owns the IP address, its network range, its autonomous system (ASN) and name, the country, the regional registry and its reverse DNS name.

No. For security, Domainat never connects to private, loopback or reserved addresses (like 192.168.x.x or 127.0.0.1), including domains that point to them.

Open the Availability tool. It checks the name in 18 popular extensions at once — including .com, .net, .org, .co, .io, .ai and .biz — and fills in each result as soon as the registry answers.

It loads the home page once and matches its response headers, cookies, generator tag and HTML against known fingerprints for CDNs, web servers, CMSs (WordPress, Shopify, Salla, Zid…), frameworks, analytics and libraries. The hosting provider comes from the site's IP address and its ASN.

It shows the card people will see when the page is shared, and checks the title and description lengths, the main heading, canonical link, page language, noindex, Open Graph and Twitter tags, robots.txt and the sitemap.

It searches public Certificate Transparency logs, where every publicly trusted SSL certificate is recorded, and lists the subdomains those certificates covered. Subdomains that never had a certificate won't appear.

An internationalized domain name (IDN) uses non-Latin characters, such as موقع.مصر. DNS stores it in an ASCII form starting with "xn--" (punycode). The IDN converter turns one into the other instantly, label by label.

It works out the price to ask when selling a domain so you receive the amount you want after marketplace fees, fixed fees (like bank transfers) and VAT — added on top or included. Results update as you type and can be exported as CSV or printed.

Your recent searches are saved only in your own browser so you can repeat them quickly; you can clear them under the search box. Lookup results are cached briefly on Domainat's servers so repeat lookups are fast.

You reached the per-minute search limit. A countdown shows when you can search again — usually within a minute.

Yes. Every result and tool has its own link (for example domainat.com/whois/google.com or a tool link with ?tool=ssl). Use the Share button or copy the address bar.