🗓 Updated 2026-09-05 · ⏱ 5 min read · ✍ Toolfyra Editorial · Reviewed for accuracy

The Complete WHOIS Lookup (RDAP) FAQ

Every common question about the whois lookup (rdap) — answered straight, no fluff, grouped by theme. These are the questions people actually ask on Google, Re

The Complete WHOIS Lookup (RDAP) FAQ
✅ Key Takeaways
  • Free forever: no sign-up, no watermarks — everything runs in your browser.
  • Is the whois lookup (rdap) really free — Yes — no sign-up, no limits, no watermarks. Toolfyra runs client-side, so there is no server cost to pass on t…
  • Does the whois lookup (rdap) work offline — After the first load, most browsers cache the page and it keeps working without a connection — results compute…
  • Which browsers are supported — All modern browsers: Chrome, Edge, Firefox, Safari (desktop and iOS/Android). The tool adapts to your screen a…

Quick answer: Every common question about the whois lookup (rdap) — answered straight, no fluff, grouped by theme. These are the questions people actually ask on Google, Reddit, Quora and support forums, including the ones other guides dodge.

The short version

The WHOIS Lookup (RDAP) is free, needs no account, processes everything in your browser, works on mobile, and keeps your data on your device. Below: the question bank — from basics to edge cases — each answered in plain language.

Deeper background on how this works

Base64 encodes binary into 64 safe ASCII characters (A–Z, a–z, 0–9, +, /) so binary data travels through text-only channels (JSON, XML, email, data URIs). It adds ~33% size and offers zero security — decoding is trivial. URL encoding (percent-encoding) does the same job for characters URLs can't carry raw (spaces→%20, & → %26).

Hashing is one-way: SHA-256 maps any input to a fixed 64-character fingerprint. Same input → same hash always; you cannot reverse it. Uses: password verification (store the hash, not the password), file integrity checks, deduplication. MD5 is broken for security purposes (collisions demonstrated since 2004) but survives as a checksum for accidental corruption.

The interview-question clarity: encoding = format conversion (reversible, no key), encryption = scrambling with a key (reversible with key), hashing = one-way fingerprint (irreversible). Conflating them is how systems get breached.

Can / is / does questions (4)

Is the whois lookup (rdap) really free?

Yes — no sign-up, no limits, no watermarks. Toolfyra runs client-side, so there is no server cost to pass on to you.

Does the whois lookup (rdap) work offline?

After the first load, most browsers cache the page and it keeps working without a connection — results compute on your device.

Is my data uploaded anywhere?

No. Processing happens locally in your browser via standard web APIs — nothing is transmitted to any server. Verify it in the Network tab if you like.

Is Base64 encoding secure?

No — it's encoding, not encryption. Anyone can decode it instantly; there's no key. Use it for transport formatting (binary-in-text), never for protecting secrets. Passwords 'hidden' in Base64 are plaintext with extra steps — a real, recurring security mistake.

What, which & when questions (4)

Which browsers are supported?

All modern browsers: Chrome, Edge, Firefox, Safari (desktop and iOS/Android). The tool adapts to your screen and language automatically.

What is a JWT and how do I read one?

A JWT is three Base64URL sections: header, payload (claims like user ID and expiry), signature. Paste it into a decoder to read the payload — it's signed, not encrypted, so anything in it is readable by anyone holding it. Never put secrets in JWT payloads.

What does HTTP status 403 mean vs 401?

401 = not authenticated (no/bad credentials — log in); 403 = authenticated but not allowed (don't have permission). Debugging: 401 fix your token; 403 fix your roles/permissions. Confusing them sends you fixing the wrong layer.

What is my IP address?

A 'what is my IP' page shows the public IP your traffic appears from — your ISP-assigned address (or your VPN/proxy exit if you use one). This is the IP websites see. The difference between public IP and your device's 192.168.x.x local address confuses everyone once — local addresses don't route on the internet.

How-to questions (12)

How do I build UTM tracking links?

A UTM builder assembles campaign URLs: utm_source (where), utm_medium (type), utm_campaign (name), plus optional term/content. Consistent lowercase naming is the discipline that keeps analytics readable — 'Newsletter' and 'newsletter' become two rows in reports otherwise.

How do I encode HTML entities?

Paste into an HTML encoder: < becomes <, & becomes &, quotes become entities. Needed when displaying code/text on web pages (otherwise browsers parse it as HTML) and preventing XSS when rendering user input. The escape-then-render order is the security order.

How do I decode Base64 online?

Paste the string into a decoder — output appears instantly, with UTF-8 text displayed and binary offered as download. Handles both standard and URL-safe variants. For images in data URIs, the decoder shows a preview. Nothing leaves your browser in client-side tools.

How do I generate a SHA-256 hash?

Paste text or a file into a hash generator and the fingerprint appears — same input always produces the same hash. Use SHA-256 or SHA-3 for anything security-related; MD5 is broken for security (collision attacks proven) though it survives as a corruption checksum.

How do I format/validate JSON?

Paste JSON into a formatter: it pretty-prints with indentation and pinpoints the exact line of any syntax error. The classic errors: single quotes, trailing commas, smart quotes from Word docs, unescaped newlines. Fix at the marked line, re-paste, done.

How do I convert CSV to JSON?

Drop the CSV into a converter — first row becomes keys, each row becomes an object, and type handling (numbers as numbers vs strings) is a selectable option. Large files work in-browser. Watch delimiter issues: semicolon-separated CSVs (common in European exports) need the right delimiter setting.

How do I convert JSON to CSV/Excel?

Feed JSON (array of objects) to a converter — it flattens nesting and emits rows you can open in Excel. Deeply nested JSON needs flattening decisions; array-of-objects converts cleanly. This is the standard bridge from API responses to spreadsheets.

How do I test regex expressions?

Paste pattern + test string into a regex tester: matches highlight live, capture groups display, and you can iterate in seconds instead of re-running code. The tester is also the best way to learn regex — edit one token and watch what changes.

How do I decode URL-encoded text?

Paste into a URL decoder — %20 becomes space, %26 becomes &, etc. The reverse (encoding) escapes special characters for safe transport in query strings. The classic bug: double-encoding (%2520 = an encoded %20), usually from encoding twice in a framework that auto-encodes.

How do I generate a UUID?

Click generate: a v4 UUID (128-bit random) appears — collision probability is effectively zero for practical purposes. Use for database keys, request IDs and distributed systems. UUID v4 is the default choice; v7 adds time-ordering for database index performance.

How do I test REST APIs without Postman?

Browser-based API testers send GET/POST/PUT/DELETE with custom headers and bodies, showing status, headers and response — no install, no account. Great for quick endpoint checks on locked-down machines. For automated collections and environments, Postman/Insomnia still win.

How do I write a cron expression for every day at 9 AM?

'0 9 * * *' — minute 0, hour 9, all days. Weekdays only: '0 9 * * 1-5'. Every 15 minutes: '*/15 * * * *'. Use a generator/tester to verify — it shows the next run times, catching the timezone and field-order mistakes that make jobs fire at 2 AM.

{ } Try it now — free, no sign-up, nothing uploaded:
WHOIS Lookup (RDAP) →

The complete WHOIS Lookup (RDAP) guide set

📝
Toolfyra Editorial — tools writer & researcher. This guide is reviewed against live search data and community reports and updated regularly.