# RDAP

RDAP (Registration Data Access Protocol) is the JSON successor of WHOIS that returns a domain's registrar, dates, status and abuse contact.

## How it works

Each registry and registrar runs an RDAP server; bootstrap files tell clients which server is authoritative for a TLD. Responses are structured, so tools can read registrar IDs and abuse e-mail addresses reliably.

For phishing response, RDAP gives the registration date (new domains are riskier) and where to send the abuse report.

## Example from the PhishDestroy database

- [genesis-variational.com](https://phishdestroy.io/domain/genesis-variational.com/): Domain report with RDAP registration evidence, first detected 2026-10-21.
- [exodusprotect.com](https://phishdestroy.io/domain/exodusprotect.com/): Domain report with RDAP registration evidence, first detected 2026-10-21.
- [reward-kinetiqfnd.xyz](https://phishdestroy.io/domain/reward-kinetiqfnd.xyz/): Domain report with RDAP registration evidence, first detected 2026-10-21.

## How to protect yourself

- Look up the registrar's abuse contact through RDAP before reporting a domain.
- Treat domains registered in the last few days as higher risk.

## Related tools

- [Abuse Contact Lookup](https://phishdestroy.io/developer-tools/abuse-contact-lookup)
- [WHOIS Fields Guide](https://phishdestroy.io/developer-tools/whois-fields-guide)

## Related terms

- [EPP status codes](https://phishdestroy.io/glossary/epp-status/)
- [Bulletproof hosting](https://phishdestroy.io/glossary/bulletproof-hosting/)

## Further reading

- [Phishing Takedowns: Detect, Verify, Report](https://phishdestroy.io/takedown-anatomy)
- [Registrar Scoreboard: Abuse Response Times](https://phishdestroy.io/registrar-accountability/)

## Glossary

- [All terms](https://phishdestroy.io/glossary/)

Canonical: https://phishdestroy.io/glossary/rdap/