DNS Lookup & WHOIS Checker

A DNS lookup queries the domain name system for the records published under a name: A and AAAA records point to server IPs, MX records route email, TXT records carry SPF and verification strings, and NS records name the authoritative nameservers. This checker queries the common record types in one pass over DNS-over-HTTPS against a public recursive resolver, and a selector adds specialist types like DS, DNSKEY, SRV, TLSA, SVCB and HTTPS.

Both, and an honest tool says which. Cloudflare and Google are recursive resolvers: they answer from their cache when they have a fresh copy and only contact the authoritative nameservers when they do not. The TTL shown next to each record is the remaining cache lifetime at that resolver, not necessarily the TTL configured in the zone. To see exactly what is published, you would query the zone’s own authoritative nameservers, which browser-based tools cannot do directly.

The registration data behind a domain: the registrar it is registered through, the creation and expiration dates, EPP status codes such as clientTransferProhibited, the delegated nameservers and the DNSSEC delegation state. This tool fetches that data over RDAP, the structured successor to the old WHOIS text protocol, via the rdap.org redirector, which forwards the query to the registry responsible for the TLD.

It can compare what two public recursive resolvers (Cloudflare and Google) currently return, and you can supply the value you expect to see. That is useful evidence, but it is not a global propagation check: two resolvers agreeing does not prove every cache worldwide has your change, and two resolvers differing is often legitimate, caused by cache age, geo-dependent answers or load balancing. The Resolver comparison tab says exactly this, which is why it is not called a propagation checker.

clientTransferProhibited is a registrar lock: the domain cannot be transferred to another registrar until the lock is removed. It is a normal protection against domain hijacking, not a problem. Codes starting with server, like serverTransferProhibited, are set at the registry level and are stronger. Codes like pendingDelete or redemptionPeriod mean the domain expired and is on its way out.

No. The date in RDAP is when the current registration period ends. What happens next depends on the registrar: auto-renew settings, a working payment method and registry grace periods. This tool shows the absolute UTC date and the number of calendar days remaining, and deliberately never says "renews", because a lookup tool cannot know your renewal configuration. If the date is close, check auto-renew at your registrar today.

NXDOMAIN means the name does not exist in DNS at all. An empty NOERROR answer means the name exists but has no records of the type you asked for: a domain with A records but no AAAA returns NOERROR with zero answers for an AAAA query. This tool labels the response code on every section, because the two states have very different fixes: a missing name versus a missing record type.