Support Library
WHOIS vs RDAP
whois example.com ; curl https://rdap.org/domain/example.com
Command Syntax
whois example.com ; curl https://rdap.org/domain/example.com
What It Does
Retrieves registration ownership and status metadata for domains.
When to Use It
Use WHOIS for legacy compatibility and RDAP for structured automation-friendly output.
Example Output
WHOIS returns text blobs while RDAP returns JSON entities, events, and statuses.
How to Interpret Results
Focus on registrar, expiration, status locks, and contacts relevant to recon workflows.
How DNS Panopticon Detects This
- Relevant checks: Delegation integrity, resolver consistency, DNSSEC health, and suspicious record-pattern checks.
- Severity mapping: Informational, medium/high, or critical based on exploitability and user impact.
- Score impact: Reliability and security scoring dimensions are reduced according to blast radius.
- Related findings users will see: NS drift, validation failure, orphaned CNAMEs, wildcard exposure, and policy misconfiguration alerts.
Operator Checklist
- Verify behavior from at least two public resolvers and one resolver inside your own network before making changes.
- Make one change at a time, capture before/after query output, and wait for TTL windows to clear so you can confirm impact.
- Document the root cause and the final fix in your runbook to shorten future incidents.