Domain age check

Check how new a sender’s domain is

Scam domains are often only days old. When a lookup would help, Fromensics asks first and sends only the domain name, never the email.

What you’ll see

Check first

Check before you reply.

Jordan says they’re from Brightline Media but writes from brightline-media.example, which doesn’t match that name. We haven’t checked how new that domain is.

Check onceAlways check

We’ll look up when it was registered and how its mail is set up. Only the domain name is sent, never the email.

When you see it: something needs a second look, like a company name that doesn’t match the address, a very new domain, or a link that goes somewhere other than it says.

After Check once

What we looked up

Age
Registered 9 days agoFrom the domain registry
Mail
Mail servers and DMARC recordFrom public DNS

We sent brightline-media.example and nothing else.

Checked on this device · 1 domain looked up

When you see it: you chose Check once or Always check. The report footer counts every domain that was looked up.

Check once, or always

Check once looks up this email’s domain, once. Always check turns on Check online automatically in Settings, so future checks look up the domain without asking. You can turn it off there.

Until a lookup runs, the domain’s age is shown as not checked. Fromensics never guesses it.

What is sent

LookupWhat’s sentWhere it goes
When the domain was registeredThe domain nameA public domain registry service
How its mail is set upThe domain nameA public DNS resolver
With Fromensics ProThe domain nameThe Fromensics privacy proxy, so your IP address isn’t part of the lookup

The subject, body, recipients and links never leave your browser. See Free and Pro for what Pro adds.

Questions

Is a new domain always a scam?

No. New businesses have new domains. A new domain is a reason to check with the sender on a number you already have, especially when it asks for money.

Does the lookup include anything from the email?

No. Only the domain name is sent, and the report lists every domain it sent.

Is this email a scam?One click for one answer, with every reason listed.SPF, DKIM and DMARCRead an email’s authentication results from its headers.Free and ProWhat’s free, what Pro adds, and your settings.