TOOLS / DOMAIN INTELLIGENCE
Domain Intelligence Lookup
Research a domain before trusting a link. Check registration changes, public DNS, phishing intelligence, certificates, and past website observations without visiting the site itself.
PASSIVE LOOKUP
Assessment and next steps
Signals are investigative leads, not a safe/malicious verdict. New domains, changes, and new certificates can all be legitimate. A missing threat-feed match never proves a site is safe.
Registration (RDAP / modern WHOIS)
Current published registration details and registrar-reported events. Not a historical ownership database.
Current DNS
Public resolution of A, AAAA, MX and NS records. Use saved snapshots below to spot changes on return visits.
Open threat intelligence
Results from phishunt's public, CC0 phishing feed. This feed is not comprehensive, and even listed entries need analyst verification.
Domain history and change evidence
RDAP event dates, public certificate issuance, and historical urlscan observations. These are different kinds of evidence, not historical WHOIS records.
Saved DNS and registration snapshots
Saved in this browser only, starting with your first lookup here. No website account or remote historical storage.
Certificate transparency
Historical public website scans
Technical JSON response
Data sources: RDAP.org (registration routing), Cloudflare DNS-over-HTTPS, phishunt, crt.sh, and urlscan.io. Providers may rate-limit or omit records. This tool does not visit, crawl or execute content from the investigated domain.