Domain Risk Check

What this tool is — and, importantly, what it is not

This tool never states or implies that a domain is malicious, compromised, or unsafe. It checks a fixed set of technical factors, each independently explained, and reports only what was specifically observed. A domain with several indicators may be completely legitimate — a newly launched business, a domain mid-migration, or a site using an unusual but valid configuration. A domain with zero indicators is not thereby certified safe. Use this as one input among many, not a verdict.

Factors checked

• Domain age — very recently registered domains are statistically over-represented in abuse data, though this says nothing about any specific domain.
• Expiry — an expired or soon-to-expire domain risks lapsing to an unrelated new owner.
• DNS — whether the domain resolves at all.
• DNSSEC — noted as a weak, low-confidence signal only; its absence is extremely common among legitimate domains.
• SSL — an invalid, expired, or mismatched certificate.
• Reputation data — presence on any of a small set of DNS-based block lists (see IP Blacklist Checker for the full list and its own caveats).
• Email configuration — missing SPF/DMARC, which makes it easier for someone else to send email that falsely appears to come from this domain — a risk to others being spoofed, not necessarily a fact about this domain's own intent.
• Website configuration — basic reachability.

Related tools: