WHOIS / RDAP · Registration clues
Registration data can be inaccurate, outdated or withheld through privacy/proxy services. Registrants are responsible for accurate information. Contact verification is not organization identity verification.
In the age of AI-enabled scams, encryption is only part of the picture. Know who you are dealing with.
Enter a domain to examine connection and identity evidence
The domain is sent to the GDMME probe and Cloudflare DNS resolver. RDAP queries send the domain to the applicable official registration service. Both successful results are cached for up to 5 minutes. Rate-limit records use an IP hash. Notes and contact details are only sent when you submit an enquiry.
Registration data can be inaccurate, outdated or withheld through privacy/proxy services. Registrants are responsible for accurate information. Contact verification is not organization identity verification.
The CA checks organization identity under applicable requirements, providing information for cross-checking. The party dealing with you still needs confirmation.
Check company records, contracts, authority and the payee account. The registrant, hosting provider, certificate organization and actual operator may differ.
Privacy protection, missing names and a newly registered domain do not alone prove fraud. This tool does not bypass privacy redaction.
Entering a domain queries the certificate and an applicable official RDAP source. The results are displayed separately. ·Open official ICANN Lookup ↗
Adds organization identity checks to domain validation, giving customers and procurement teams business information to cross-check.
Uses more extensive rules for legal, physical and operational existence and application authorization, for businesses with corresponding identity-review needs.
Domain inventories, expiry alerts, automated renewal and deployment verification help reduce expiry-related interruption.
The value is identity checking and management. OV/EV does not guarantee freedom from fraud, stronger encryption or better SEO/GEO rankings.
Watch for misspellings, lookalike characters and misleading subdomains. Internationalized domains are displayed in ASCII/Punycode.
Distinguish the issuer from the certificate subject organization. Logos, seals, green ticks and AI content are not identity evidence.
Compare company names, contracting parties and authority. Resolve inconsistencies before providing sensitive information.
Independently confirm unexpected payee or payment-instruction changes through a previously known contact channel before paying.
Official requirements and guidance. These organizations have not endorsed or rated this tool.