Got an email from a domain you do not recognise, or about to deal with a site you have never heard of? Enter the domain, a URL or the full email address and see what the public records say.
What the check looks at
- Domain age – the registration date from the public RDAP record. Very new domains are common in bulk outreach.
- Registrar and expiry – who the domain is registered through and when it runs out.
- Mail servers (MX) – whether the domain can receive a reply at all.
- SPF and DMARC – whether the owner has told other mail servers which senders are genuine.
How to read the result
Each line is a signal, not a verdict. A young domain with no SPF record is worth a second look; an old domain with enforced DMARC has at least been set up with care. Neither one tells you whether the person behind it is honest.
Questions
Where does the data come from?
Registration details come from the registry’s public RDAP service and the rest from live DNS lookups. Nothing is guessed.
Why is the registration date missing?
Some country-code registries do not publish RDAP data. The DNS part of the check still runs.
Do you store what I check?
Results are cached for 12 hours so repeat checks are fast. No account or email is needed.