How old is this website?

Purpose

Find out when the domain of a website or a link was registered, when it expires, who its registrar is and whether it appears in scam text campaigns. An online shop created a few days ago is a red flag.

Requirements

Anyone can read these guides, no account needed. Some tools require Pro, as indicated in each guide.

Many scam websites are only days or weeks old: they’re set up for one campaign and then disappear. Paste the link of an online shop or of a message you received and we’ll tell you when its domain was registered, according to that domain’s official registry. We never open the website.

How to use it

1. 1

   Paste the website’s link, type its name (for example, example.com) or paste an email address: we only use the domain.

2. 2

   Press “Check its age”. We ask the domain’s official registry when it was registered and check whether it appears in scam text campaigns.

3. 3

   Read the result: the registration date, how long ago that was, when it expires and what each signal means.

Synthetic example

https://www.example.com/login

Interpret the result

It appears in scam text campaigns: Scam texts sent to many people lead to this domain. If it’s a shop or a website you don’t know, don’t buy anything or enter your details. If it’s a well-known platform (a link shortener, a website builder), it means scammers use it: be wary of that particular link.

The domain is suspended: Its registry or registrar has blocked it, so it doesn’t work on the internet. That usually follows a fraud or abuse report. Don’t trust messages that lead to this website.

This registry doesn’t publish registration dates: The registry of this kind of domain (for example, the one for .es, .de or .it) doesn’t make these details public, so we can’t tell how old it is. That isn’t a bad sign: it applies to every website that ends the same way. Use “Is this website legit?” to see the other signals.

The registry has no record of this domain: The official registry has no details for this domain: it may not be registered, it may be misspelt, or the registry may not publish it. Check that you typed it correctly.

Registered less than a month ago: Most scam websites are days or weeks old. A website this new can be genuine (a shop that has just opened), but don’t pay or enter your details until you’ve checked who is behind it.

Registered less than six months ago: It’s a fairly recent website. That doesn’t make it a scam, but look for other people’s reviews and the company’s details (name, address and phone number) before you buy.

The domain is being deleted: The registry has marked it for deletion, usually because it wasn’t renewed. A shop that keeps selling on a domain like this is a red flag.

The registry doesn’t say when it was created: The registry has this domain, but it doesn’t publish its registration date, so we can’t tell how old it is.

Registered more than six months ago: It isn’t a brand-new website, which is what most scams use. That’s a good sign, not a guarantee: an older website can change hands or be hacked, so stay wary if you’re asked for payments or details in an unusual way.

Registered less than 30 days ago. Most scam websites are days or weeks old.

Registered 30 to 179 days ago.

The registration expires within 30 days, or has already expired. It’s for information only: many websites renew at the last moment.

The registry or the registrar has suspended the domain (client hold or server hold): it doesn’t work on the internet, which often follows an abuse report.

The domain is being deleted (pending delete or redemption period).

The registry has no details for this domain or the domain it belongs to: it isn’t registered, or the registry doesn’t publish it.

The registry of this extension doesn’t publish its data over RDAP, the public domain lookup service, so we don’t know how old it is. It isn’t a red flag.

Public scam text campaigns link to this domain or to the domain it belongs to.

Limitations

Only the domain leaves your browser, never the rest of the link. NoCall asks the domain’s official registry about that name and never opens the website. We don’t store the domain: we only note that a check was made and the type of result.

Troubleshooting

That doesn’t look like a public website. Try something like example.com, or paste the whole link.

The domain’s registry didn’t answer in time. Try again in a few minutes.

You’ve run a lot of checks in a short time. Wait a while and try again.

Use with the API

When the domain of a link, host or email address was registered, last changed and expires, its registrar and status, from the registry’s RDAP service, with the public SMS scam campaigns that link to it. Only the domain is sent, and only to the registry; the link is never opened. A registry without RDAP (.es, .de, .it…) is a normal result with rdapAvailable false.

Send the JSON body to the tool's own route, or to POST /v2/tools with the tool field added. Both routes return the same result.

POST https://api.nocall.io/v2/website-age
POST https://api.nocall.io/v2/tools  {"tool":"website-age","url":"https://www.example.com/login","country":"ES"}

REQUEST_ID="$(uuidgen)" && [ -n "$REQUEST_ID" ] &&
curl --request POST 'https://api.nocall.io/v2/website-age' \
  --header "Authorization: Bearer $NOCALL_API_KEY" \
  --header 'Content-Type: application/json' \
  --header "Idempotency-Key: $REQUEST_ID" \
  --data '{"url":"https://www.example.com/login","country":"ES"}'

import json
import os
import urllib.request
import uuid

api_key = os.environ.get('NOCALL_API_KEY')
if not api_key:
    raise SystemExit('Set NOCALL_API_KEY')

request = urllib.request.Request(
    'https://api.nocall.io/v2/website-age',
    method='POST',
    data=json.dumps({'url': 'https://www.example.com/login', 'country': 'ES'}).encode(),
    headers={
        'Authorization': 'Bearer ' + api_key,
        'Content-Type': 'application/json',
        'Idempotency-Key': str(uuid.uuid4()),
    },
)
with urllib.request.urlopen(request, timeout=30) as response:
    result = json.load(response)
print(result['data']['result'], result['meta']['unitsCharged'])

import { randomUUID } from 'node:crypto';

const requestId = randomUUID();
const apiKey = process.env.NOCALL_API_KEY;
if (!apiKey) throw new Error('Set NOCALL_API_KEY');

const response = await fetch('https://api.nocall.io/v2/website-age', {
  method: 'POST',
  headers: {
    Authorization: 'Bearer ' + apiKey,
    'Content-Type': 'application/json',
    'Idempotency-Key': requestId,
  },
  body: JSON.stringify({ url: 'https://www.example.com/login', country: 'ES' }),
});
const result = await response.json();
if (!response.ok) throw new Error(result.error?.code ?? 'request_failed');
console.log(result.data.result, result.meta.unitsCharged);

{
  "data": {
    "tool": "website-age",
    "result": {
      "domain": "example.com",
      "domainAscii": "example.com",
      "rdapAvailable": true,
      "found": true,
      "registeredDomain": "example.com",
      "registered": "1995-08-14",
      "updated": "2026-08-14",
      "expires": "2027-08-13",
      "ageDays": 11398,
      "registrar": "RESERVED-Internet Assigned Numbers Authority",
      "status": [
        "client delete prohibited",
        "client transfer prohibited",
        "client update prohibited"
      ],
      "campaigns": {
        "count": 0,
        "lastSeen": null
      },
      "signals": [],
      "attention": false
    }
  },
  "meta": {
    "requestId": "req_example",
    "unitsCharged": 1,
    "usage": {
      "periodStart": "2026-10-01",
      "unitLimit": 20,
      "unitsUsed": 3,
      "unitsRemaining": 17
    }
  }
}

• API reference ↗

Frequently asked questions

Related guides

• Is this website legit?
• Domain popularity check
• Check a link