RDAP is the official successor to WHOIS. Since GDPR, most registrars redact the registrant name, email, and address by default, and many domains use a privacy or proxy service, so personal ownership is often hidden. Company-owned, government, and many country-code domains still publish the organization. For current or historical owner data on redacted domains, connect a paid provider (see the Nwaj WHOIS Worker).

Checks run through public DNS, so some lists (notably Spamhaus) may not answer browser queries and can show as not listed even when they restrict access. Treat clean results as a guide, and confirm sensitive cases with a dedicated reputation service.

DKIM is detected by testing common selectors, so a custom selector may not be found here. Blocklist checks run over public DNS and can be incomplete.

Data comes from public Certificate Transparency logs, which list issued certificates and their validity. This reflects the most recent valid certificate, not necessarily the exact one served right now.