Domain Health Check
Overall technical domain health — a transparent, weighted score covering registration, DNS, DNSSEC, nameservers, SSL, and email configuration together.
How this score works — in full
This is not a generic SEO or marketing score. It's a technical assessment built from nine weighted checks, each backed by a real lookup against domain registration data, DNS, SSL, and email configuration:
| Check | Weight | What it evaluates |
|---|---|---|
| Registration | 15 | Registration data was successfully retrieved. |
| Domain Expiry | 15 | More than 7 days remain before expiry. |
| DNS | 15 | The domain resolves to at least one DNS record. |
| DNSSEC | 10 | DNSSEC is enabled, per the registry's own declaration. |
| Nameservers | 10 | At least two nameservers are configured. |
| Website | 10 | The website responds with a healthy status code. |
| SSL | 15 | A trusted, correctly-matched, non-expired certificate is presented. |
| SPF | 5 | A single, valid SPF record exists. |
| DMARC | 5 | A DMARC record exists with no detected problems. |
What "Unknown" means — and why it isn't the same as failing
Some checks can't always be evaluated — a domain extension without RDAP support, for instance, means DNSSEC status can't be confirmed either way. When a check can't be evaluated, it's marked Unknown and removed entirely from the scoring math — both from what's "possible" and from what's "earned." A domain that's healthy on everything we could check still scores 100, even if one or two checks came back unknown. An unknown result is never silently treated as a failure.
Categories
- Excellent — 90 to 100
- Good — 75 to 89
- Needs Attention — 50 to 74
- Critical — 0 to 49
- Unknown — nothing could be evaluated at all
Related tools: