Fundamentals

Why the age of a domain tells you more than the design of a site

Fraud is a young business. Here is what the registration date actually proves, and the ways it can mislead you.

If you could ask a website only one question before trusting it with money, the best question is not what it sells or how it looks. It is: how long has this address existed?

What the registration date actually proves

A domain registered eight years ago and renewed every year since has done something a new one cannot fake: it has persisted. Persistence is expensive for a fraudster and free for a real business, which is exactly what makes it informative.

Fraud runs on a clock. A scam shop needs to be live long enough to take orders and gone before the disputes arrive — typically weeks. Domains are cheap enough to treat as disposable, so they are treated as disposable. In this corpus the age of the bottom band is strikingly compressed toward the recent end, while the top band spreads across a decade.

The three things age is standing in for

  • Sunk cost. Years of renewals are money spent on something that only pays off if you intend to still be there.
  • Exposure to complaint. An address public for years has been available to be reported for years. Surviving that is evidence.
  • Reversibility of the bet. Fraud wants disposable infrastructure. Longevity is the opposite of disposable.

Where it misleads

Age is the strongest single signal available, and it is wrong in two directions.

Honest new businesses are punished. Every real shop was three weeks old once. A low score driven mainly by youth is a statement about a population, not about that business — which is why the findings are shown rather than only the number.

Old domains can be bought. There is a market in aged domains precisely because age is trusted. A determined fraudster buys one with ten years of history and starts clean. That is why age is one of six criteria rather than the whole score: an aged domain with a redacted owner, no organisation and fresh hosting is a different proposition from an aged domain with a decade of consistent registration behind it.

How to read it on a report

Every report shows the age in words, the registration date, and how far ahead the domain is paid for. That last one is quietly useful: renewing for five years costs real money and buys nothing unless you plan to be around. A domain renewed to the minimum, month by month, is telling you something about its owner's horizon.

Read those together with whether the owner is disclosed. Old, paid far ahead and identifiable is a strong combination. New, minimum renewal and anonymous is the profile that dominates the bottom of this corpus — and it costs nothing to check before you pay.

Keep reading

Other guides

Check a domain while it is fresh in your mind

Everything described here is what the scanner looks at. Point it at something and see the reasoning for yourself.

Analyse a domain