Deliverability
Domain Intel
Builds a quick trust picture of a domain: registration and age, DNS, HTTPS and certificate, web archive history and a heuristic grade.
- Runs on our server
- 3 units per run
- You enter
- A domain name.
- You get
- A score from 0 to 100 with a grade A to F, plus registration, DNS, HTTPS and history details.
- A good result
- Grade A or B: an older domain with mail records, working HTTPS and archive history.
On this page
#What it is for
Use it when you need context about a domain you do not know: a new sender during onboarding, a suspicious link, or a domain that suddenly appears in reports. It gathers in one run what would otherwise take five sites.
#What you enter
A domain such as example.com. Protocol, path and query are removed; international names are converted automatically. IP addresses, ports and email addresses are refused.
#How it works
It runs these lookups, the slow ones in parallel:
- Registration (RDAP): registrar, registration, expiry and last change dates.
- DNS: A, AAAA, NS, MX, CAA, TXT, SPF and DMARC.
- HTTPS: opens the site (following up to 5 redirects), notes the status, final address, response time, server and HSTS.
- Certificate: subject, issuer, validity and the names it covers.
- Web archive: first and last saved snapshot in the Wayback Machine.
#Reading the results
The score starts at 50 and moves with each signal, then is kept between 0 and 100:
| Signal | Points |
|---|---|
| Domain older than 5 years / 1 year | +15 / +10 |
| Domain younger than 30 days | -15 |
| Certificate found / not found | +10 / -10 |
| SPF, DMARC present | +5 each |
| HTTPS answers 2xx / 4xx or 5xx / fails | +5 / -5 / -10 |
| History in the web archive | +5 |
| MX present, HSTS sent | +3 each |
| No public IP address | -10 |
Punycode name, risky ending (.zip, .top, .xyz...) | -5 each |
Grades: A from 85, B from 70, C from 55, D from 40, F below. A and B read as healthy, C as having issues, D and F as significant issues.
#Example
ecomail.czAn established domain like this one scores high: years of registration, mail records, a valid certificate and a long archive history.
#Limits and gotchas
- The grade is a heuristic, not a verdict. A brand new legitimate shop scores low; an old domain can still be compromised.
- Owner details are usually redacted by the registry, so "redacted" is normal.
- If the domain points at a private or reserved address, the HTTPS and certificate checks are skipped for safety and the score drops.
- For blocklists use the Blacklist Checker; this tool does not query them.