Paste any website link or domain below to check its age, registration dates, registrar, and risk signals — before you pay, log in, or share personal details.
About this checker
This checker reads the public registration record of a domain using RDAP — the Registration Data Access Protocol, the same system behind ICANN Lookup. Since January 2025, RDAP is the definitive source for generic domain registration data, replacing the old WHOIS (port 43) protocol. RDAP was developed by the Internet Engineering Task Force: it returns structured data, supports internationalized names, and lets registries show different levels of detail to different requesters. This tool only reads public data and stores nothing you enter.
How to use this checker
1. Paste any website link or domain into the search box and press Check.
2. Read the verdict first — HIGH RISK, CAUTION, or NO RED FLAGS — then open the DETAILS, RELATIONS, and HISTORY tabs for the evidence behind it.
3. For the final word, use the official-checker buttons (Google Safe Browsing, VirusTotal, ICANN Lookup) in the DETECTION tab.
What the verdict means
HIGH RISK means strong warning signals were found — treat the domain as untrusted until proven otherwise. CAUTION means some warning signals were found — verify independently before paying or logging in. NO RED FLAGS means no warning signals were found in this check — that is not a guarantee of safety. A clean result never proves a site is honest, and a flagged result never proves a crime.
Nonpublic registration data
Some registration details — such as the registrant’s name, email, and phone number — are often redacted for privacy under ICANN policy, and this tool can only show what is public. If you have a legitimate interest (for example law enforcement, intellectual-property, consumer-protection, or cybersecurity work), you can request access to nonpublic data through ICANN’s Registration Data Request Service (RDRS), which forwards your request to the domain’s registrar. Disclosure is not automatic — the registrar decides each request.
ICANN Registration Data Request Service (RDRS)
How This Domain Checker Works
Every website address sits on top of a public registration record. When someone registers a domain, the registrar stores the creation date, the expiry date and the registrar’s name in a global database called RDAP, the modern replacement for WHOIS. This checker reads that record for the domain you enter and weighs what it finds against the patterns that show up again and again in real scam reports.
It looks at four things:
- Domain age. Scam sites are usually registered days or weeks before the campaign that uses them, because they get reported and shut down fast. A domain created a week ago deserves far more suspicion than one that has existed for ten years.
- Registrar. Some registrars are household names with strict abuse desks. Others ask few questions. The registrar alone proves nothing, but it adds context.
- Expiry date. Legitimate businesses tend to register for several years. Throwaway domains are often bought for the shortest possible term.
- Lookalike signals. If a domain is a near-copy of a famous brand’s name, with a letter swapped, added or missing, that is one of the oldest phishing tricks there is.
How to Read Your Result
High risk means at least one strong warning sign fired, for example a very new domain or a lookalike brand name. Do not enter card details, passwords or personal information. Leave the site and reach the company through its official app or by typing the address you already know.
Caution means some signals are mixed. The domain might be young but registered with a mainstream registrar, or old but recently changed. Slow down, and verify the site through a second channel before you pay anything.
No red flags found means the registration record looks ordinary. That is a good sign, not a guarantee. A clean record never proves a site is honest, it only means this particular test found nothing wrong.
What a Domain Check Cannot Tell You
A domain check reads paperwork, not intentions. A brand-new domain can belong to a genuine small business that launched last week. An old domain can be sold, abandoned and picked up by criminals, or a legitimate site can be hacked and used to host a scam page. Treat the result as one strong clue in a bigger picture: check how the site asks you to pay, whether it pressures you to act fast, and whether its contact details lead anywhere real. The guides linked below walk through the rest of that picture.
Two Example Checks
Imagine a text message sends you to a delivery site registered nine days ago, with a name that is one letter away from a national carrier. The checker would flag the age and the lookalike spelling, and the verdict would be high risk. That combination is the classic smishing pattern.
Now imagine a small retailer whose domain was registered six years ago with a well-known registrar and renewed well into the future. The checker would report no red flags. You would still judge the shop by its prices, reviews and payment options, but its paperwork at least matches its story.
Frequently Asked Questions
Is this checker free?
Yes. It is free to use, and the domain you check is looked up in public registration data. We do not store the domains visitors enter.
Does a new domain always mean a scam?
No. New domains are a warning sign, not proof. Plenty of honest sites are new. Age matters most when it appears next to other pressure tactics, like a countdown timer or a demand to pay by gift card.
Can a scammer fake an old registration date?
The creation date in the RDAP record cannot be edited by the domain owner. What scammers can do is buy an already-old domain, which is why an old date should lower your suspicion, never remove it.
What should I do if a site I used comes back high risk?
Stop any payment that is still pending, contact your bank if you entered card details, change any password you reused on the site, and report the message or site. Our guide on what to do in the first 24 hours after a scam walks through each step in order.