Skip to content

Age & Lifecycle

Registration age, lifecycle phase, recent transfers or renewals. Each fires with named evidence and a 3-question analyst Q&A trail.

About

What Age & Lifecycle captures

Registration age, lifecycle phase, recent transfers or renewals. Tier-1 SOC analysts use them to cut triage time on suspicious whois behavior; CTI teams pivot from them to the broader campaign graph.

Browse

3 signals in Age & Lifecycle

Each row opens a leaf page with the signal's direction, named evidence, and 3-question Q&A trail. Use them as audit anchors when a verdict surfaces this subgroup.

Verdict scenarios

How Age & Lifecycle shapes the call

Three real-world situations where Age & Lifecycle evidence dominates the decision. Verdict and explanation are how VerdictIQ would frame the outcome to an analyst, not raw signal slugs.

High riskVERDICT · BLOCK
The situation

A domain registered less than a week ago with privacy-protected registrant data.

VerdictIQ explains

Decline. Fresh registration with opaque ownership is the standard launch profile for short-lived attack infrastructure. Hold until at least 30 days of clean history accumulate.

Medium riskVERDICT · REVIEW
The situation

A domain registered within the last 90 days, with a renewal pattern that doesn't yet show stability.

VerdictIQ explains

Send to analyst review. Young assets carry elevated baseline risk; verify intent before granting full trust.

Low riskVERDICT · ALLOW
The situation

A domain registered over five years ago with consistent renewal cadence and stable ownership.

VerdictIQ explains

Allow. The registration profile is mature and uninterrupted. No age-side reason to delay.

Sibling subgroups

Other subgroups in WHOIS

2 more subgroups in this group, each bundling signals that share a different mechanism. Tap one to inspect its signal names.

See subgroup detail
See subgroup detail

See Age & Lifecycle signals fire on your data

Free tier: 100 IOCs/day, LLM layer included.