Check a domain

Look up age, DNS, TLS, reputation lists and a few homepage clues. This is a risk screen, not a verdict.

Checked domain

nytimes.com

95%

Saved result

Share this result

Recent page capture of nytimes.com
Recent capture from urlscan.io — may lag behind the live site.

Risk

3/100

Higher means more caution. Combines domain age, HTTPS, warning lists and hidden ownership — not a fraud verdict.

0 is quiet, 100 is many caution signals

Trust signals

95/100

Higher means a longer public trail and fewer hard warnings. Skipped feeds do not add points. Not a guarantee of safety.

0 is thin public footprint, 100 is more of the usual signs

Phishing clues

0/100

Looks for lookalike names, urgent copy and password or card fields. A low score does not prove the page is genuine.

0 is few of those clues, 100 is many

Ordinary-site clues

46/100

Contacts, legal pages, HTTPS and mail records — the boring pages a real firm often has. Easy to fake, so this is not proof of honesty.

0 is sparse, 100 is more of those pages and records

Summary

No strong automated warnings

This pass did not find major red flags. Automated checks miss a lot. A quiet report is not a guarantee that the site is safe or legitimate.

  • No strong automated warnings The scan did not raise a major alert. That is not the same as proving the site is safe.

What to do: Still confirm the company name, contacts and payment method as you would with any site you have not used before.

See the full technical details

What to watch

No automated warnings on this pass. That is not a clean bill of health.

Warning lists

Public feeds only. A miss does not mean the site is safe. A hit is a reason to stop and check, not a court finding.

  • google safe browsing not listed
  • urlhaus not listed
  • threatfox not listed
  • spamhaus not listed
  • urlscan not listed · 1025 scans, none malicious

Before you trust this site

  • Check that the company and the domain match, and look for independent reviews before you pay.
  • If money already moved, use Get help. Ignore anyone who cold-contacts you offering recovery for a fee.
Technical details

Registration

Public WHOIS/RDAP only. Privacy rules often hide the person behind the domain.

Registered
1994-01-18T05:00:00Z
Expires
2027-01-19T05:00:00Z
Updated
2024-12-18T11:11:19Z
Registrar
MarkMonitor Inc. · IANA 292
Registrar URL
http://www.markmonitor.com
Registrant
Unknown
Organisation
Unknown
Email
[email protected]
Country
Unknown
Abuse email
[email protected]
Privacy
No / not indicated
Source
rdap+whois

DNS and mail

NS
dns4.p06.nsone.net, ns-635.awsdns-15.net, ns-1652.awsdns-14.co.uk, dns3.p06.nsone.net, ns-244.awsdns-30.com, dns1.p06.nsone.net, dns2.p06.nsone.net, ns-1328.awsdns-38.org
MX
alt2.aspmx.l.google.com, alt1.aspmx.l.google.com, aspmx.l.google.com, alt3.aspmx.l.google.com, alt4.aspmx.l.google.com
SPF
v=spf1 include:nytimes.com._nspf.vali.email include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email include:_spf.e.sparkpost.com include:amazonses.com ~all
DMARC
v=DMARC1; p=reject; rua=mailto:[email protected],mailto:[email protected]

TLS and hosting

HTTPS
Yes
Issuer
DigiCert Inc
IP
151.101.193.164, 151.101.65.164, 151.101.1.164, 151.101.129.164
ASN
AS54113 Fastly, Inc.

Reputation feeds

  • google safe browsing not listed
  • urlhaus not listed
  • threatfox not listed
  • spamhaus not listed
  • urlscan not listed · 1025 scans, none malicious
Provider log
  • rdap — ok
  • whois — ok (whois.verisign-grs.com)
  • dns — ok
  • ip-api — ok
  • tls — ok
  • google safe browsing — ok
  • urlhaus — ok
  • threatfox — ok
  • phishing army — skipped (Blocklist unavailable)
  • spamhaus — ok
  • urlscan — ok
  • fca warnings — skipped (Warning list unavailable)
  • http fetch — ok
  • robots sitemap — ok
  • search index — skipped (No Search API key)
  • crt sh — ok
  • passive dns — skipped (No passive DNS key)
  • wayback — ok (20 captures)
  • typosquat — ok
  • screenshot — ok (urlscan)

Check a website for scam and fraud signals

Use this free domain check before you send money, open a wallet, or type a password. Paste a website address to screen age, DNS and mail records, HTTPS/TLS, public reputation lists, and common phishing or fake-site clues. It is a risk screen — not a court finding and not a guarantee that a page is safe.

People look here to check a domain, check a website for scam, run a quick fraud check, or ask whether a site looks like phishing. The report pulls what is public: registration dates, certificate presence, warning-list hits where feeds respond, and homepage patterns that often show up on misleading offers.

What this check covers

  • Domain age and registration trail (WHOIS/RDAP where available)
  • DNS, mail (MX/SPF/DMARC) and HTTPS certificate signals
  • Public malware and phishing reputation feeds (skipped providers are labelled)
  • Homepage cues: forms, urgent copy, lookalike names
  • A plain-English summary with trust and risk scores — not a “safe” badge

If the saved result is older than 14 days, refresh it. If money already moved, use Get help and treat cold “recovery” offers with care via Fake recovery.