Every domain has registration data, queryable through the modern RDAP protocol (the structured successor to WHOIS). It is public by design and useful for both security and due diligence.
What it shows
- Registrar & status โ who manages the domain and whether locks like
clientTransferProhibitedare set. - Creation & expiry dates โ a domain registered days ago deserves more caution than one a decade old.
- Nameservers โ which DNS provider is authoritative.
Why domain age matters
Phishing and scam domains are typically very young and short-lived. A recent creation date combined with other red flags is a strong warning sign. Look up any domain registration with the web scan (WHOIS check) or assess a suspicious link with the URL checker.