Buying online, opening a link or checking an invoice? Look at the domain’s age, address and public records before you take the next step.
Enter the domain or website URL you want to check.
Jump straight to the results. Explore dates, warnings and the returned public records.
Verify the seller independently. Save an optional report if you need a record of the check.
Review domain age, registration, DNS and email evidence in one check.
Start a free checkSpot spelling differences and compare registration dates and infrastructure side by side.
Compare domainsRead published SPF and DMARC policies. A genuine mailbox can still be compromised.
Check email recordsGet a PDF and JSON record with source timestamps and an evidence digest. €5 or US$5 per report.
Report optionsURL Forensics brings public domain evidence together. Use it to investigate warning signs, with the source and observation time visible.
Check for freeA registration within 30 days is highlighted in red; 31–90 days in amber. Domain age is not the website launch date or proof of trust.
Compare with an independently verified official domain to spot extra letters, changed endings and lookalike characters.
Review registry and registrar RDAP, DNS, email policies, IP networks and available certificate records. Missing sources are shown explicitly.
Interpret email authentication policy without confusing a DNS record with proof of message authenticity.
Understand registration events, redacted identity information and the limits of public domain records.
A, AAAA, MX, TXT, CNAME, NS and SOA records, with their forensic significance and limitations.
Examine typosquatting, brand impersonation and newly registered domains without jumping to conclusions.
Yes. All returned investigation data is free to view without an account. An optional downloadable PDF and JSON report costs €5 or US$5 per domain report. There is no subscription.
No. A new domain or a similar name is a reason to review the evidence, not proof of fraud. Older domains and genuine business email accounts can also be compromised. Verify the seller and payment beneficiary independently.
Public RDAP may include registrant or privacy-service contacts. Redacted details remain withheld. A registrant, shared IP address or nameserver does not by itself identify the person operating a website.
This check queries public evidence providers. It does not visit the target website, scan it for malware or test whether a purchase will be fulfilled. Public-source requests disclose the checked domain to those providers.
