About this tool
A domain created days before a fraudulent invoice or phishing campaign is a stronger lead than one registered years earlier, though age alone never proves intent. The lookup accepts a domain or URL and reduces a URL to its registrable domain.
Example inputs: example.comnewly-launched-startup.iodigitpol.com
What the result shows
- Registration event date
- The date the registry recorded as the start of the current registration, taken from the RDAP events array.
- Last changed date
- The most recent update recorded by the registry, which can reflect routine changes, not just re-registration.
- Expiration date
- When the current registration period is due to lapse unless renewed.
- Status codes
- Flags such as pendingDelete or redemptionPeriod that can indicate a domain was recently dropped and re-registered.
Investigation use cases
- Flagging a brand-lookalike domain registered shortly before it was used in a phishing email
- Supporting invoice fraud investigations by timing domain creation against the fraudulent request
- Screening a new supplier or vendor domain during onboarding checks
- Grouping multiple suspected scam domains registered on the same date
Limitations
Some registries reset the recorded date when a domain is deleted and re-registered, personal WHOIS history is not retained, and a new domain is not automatically evidence of fraud since legitimate businesses register new domains constantly.
Frequently asked questions
Does this show the original creation date even if the domain changed owners?
It shows the registry's current registration event date, which some registries reset after deletion and re-registration, so it may not reflect the domain's full history.
Is a recently registered domain always suspicious?
No, many legitimate new businesses and campaigns register new domains; treat a recent date as one contextual signal, not a verdict.
Can I check historical WHOIS snapshots?
No, this tool only reflects the current registry record, it does not query archived or historical WHOIS data.
Is a full sealed report available?
The age check itself is free within daily limits; a sealed, shareable report is a paid or account feature.
Need evidence you can keep?
Every lookup produces a full public-source report sealed with a SHA-256 digest. Accounts keep a saved history and can download the DIGITPOL PDF report.