WhoisXML API launched the TLD RDAP Monitor, a dashboard that scans 1,440+ TLDs every 48 hours to report RDAP and WHOIS protocol support, server health, stealth RDAP discovery, and protocol distribution. The public tool and API deliver downloadable JSON/CSV data to help cybersecurity teams, developers, and brand protection professionals adapt to RDAP adoption differences. #RDAP #WHOIS
Keypoints
- The TLD RDAP Monitor continuously scans 1,440+ TLDs every 48 hours using an IANA TLD list to categorize protocol support.
- The tool identifies TLDs with working RDAP servers, TLDs using only WHOIS, TLDs supporting both, stealth RDAP servers, and TLDs with neither protocol.
- The dashboard provides an RDAP overview, service status, an interactive TLD health map, protocol distribution statistics, and a search function for individual TLDs.
- Current measured service status: 100% WHOIS server availability, 84.5% RDAP server availability, and overall service reliability at 78%.
- Stealth RDAP detection finds RDAP servers not listed in IANA’s bootstrap registry, revealing otherwise hidden protocol support.
- Users can access the monitor publicly at https://rdap.wxapros.com/ and download data in JSON or CSV formats or query it via RESTful API endpoints.
- The monitor helps prevent data retrieval errors and application failures by clarifying correct query protocols per TLD amid WHOIS port 43 deprecation.
MITRE Techniques
- [T1046 ] Network Service Discovery – The monitor scans TLD RDAP and WHOIS endpoints every 48 hours to determine service availability and categorize TLDs (“the TLD RDAP Monitor is powered by an advanced scanning operation that runs every 48 hours”).
- [T1112 ] Modify Registry – The tool detects “stealth RDAP” servers that are operational but not listed in IANA’s bootstrap registry, indicating discovery of registry state discrepancies (“Stealth RDAP servers: Our monitor can detect TLDs that have RDAP servers but haven’t yet added them to IANA’s bootstrap registry”).
Indicators of Compromise
- [Domain ] Monitor access and data endpoints – rdap.wxapros.com (public dashboard and data source).
- [File Formats ] Data export types – JSON, CSV (used for downloading TLD RDAP deployment data).
Read more: https://circleid.com/posts/whoisxml-apis-tld-rdap-monitor-tracks-rdap-deployment-across-1400-tlds