WHOIS monitoring
Watch the recordthat controls the domain.
Registrar transfers, status-code changes, nameserver moves, expiry-date updates — Domain Lab monitors WHOIS and RDAP data for every domain you track and alerts you when the registration itself changes.
The registration layer is where domains are won and lost
Websites break at the DNS layer, but domains are lost at the registration layer: an unauthorized transfer, a registrar-lock removed, an expiry date that didn't move after a renewal you thought went through. WHOIS and its structured successor RDAP are the public record of that layer — and changes there deserve immediate attention.
Domain Lab reads that record on every scan and turns changes into alerts with full before/after history.
What WHOIS monitoring catches
Registrar transfers
If the sponsoring registrar of a domain changes — planned or not — that's an event with an alert. Unauthorized transfers are far easier to reverse when caught early.
EPP status codes
clientTransferProhibited disappearing, redemptionPeriod appearing — status codes are the registry's own signals about a domain's safety and lifecycle, and Domain Lab tracks every transition.
Nameserver changes
Nameserver changes at the registry level redirect everything. Domain Lab alerts on them and cross-references with DNS record monitoring so you see the full picture.
AI interpretation
WHOIS output is cryptic by design. Domain Lab's AI turns "status: redemptionPeriod" into "this domain expired and is in its recovery window — here's what that costs and how long you have."
Built on RDAP, with WHOIS fallback
Domain Lab queries modern RDAP endpoints where registries provide them and falls back to classic WHOIS where they don't — normalized per TLD, so a .com behaves the same as a .io in your dashboard. It pairs with expiration monitoring and SSL monitoring for complete coverage.
Frequently asked questions
What is WHOIS monitoring?
WHOIS monitoring watches the public registration record of a domain — registrar, status codes, nameservers, and key dates — and alerts you when any of it changes. Domain Lab checks via modern RDAP where available, with classic WHOIS as fallback.
How is this different from DNS monitoring?
DNS monitoring watches the records your nameservers serve (A, MX, TXT and so on). WHOIS monitoring watches the registration itself — who sponsors the domain, its lock status, and its lifecycle stage. Domain Lab does both and correlates them in one event feed.
Can WHOIS monitoring detect domain theft?
Early signs of theft usually appear in the registration record: transfer locks removed, a registrar change, or nameservers replaced at the registry. Domain Lab alerts on each of these the next time the domain is scanned.
Does it work for privacy-protected domains?
Yes. Registrant contact details may be redacted for privacy, but the operationally important fields — registrar, status codes, nameservers, and dates — remain public, and those are what Domain Lab monitors for changes.
How often is WHOIS data checked?
Daily on every plan — more frequent than domain tools that check registration data only weekly.
Put the registration record under watch
Free plan, no credit card. Works with any registrar.
Get started free