Domain Reputation Checker Calculator

Calculator inputs

Enter domain observations from passive DNS tools, mail checks, threat feeds, or internal investigations.

Domain or asset label

Use a domain under review or a case label.

Blacklist detections

Count unique blacklist hits across trusted sources.

Domain age in days

Older domains usually score as more established.

HTTPS and TLS score

Use a 0 to 100 rating from your scanner.

WHOIS transparency score

Higher values mean clearer ownership and registration data.

Observed uptime percent

Reliable infrastructure supports better trust decisions.

Malware reports

Count validated malware incidents linked to the domain.

Phishing reports

Include confirmed abuse reports or takedown notices.

Redirect hops

Complex redirect chains often increase investigation risk.

Typosquat risk score

Higher values mean greater similarity to known brands.

DMARC policy

Stricter policy improves mail authentication confidence.

Security control toggles

DNSSEC enabled

SPF record enabled

DKIM signing enabled

Formula used

This calculator applies a weighted scoring model that combines positive trust evidence and negative risk evidence into one normalized reputation score.

Positive Index = (Age × 0.16) + (HTTPS × 0.12) + (Authentication × 0.18) + (DNSSEC × 0.08) + (Uptime × 0.10) + (WHOIS × 0.06)

Risk Index = (Blacklist Penalty × 0.14) + (Malware Penalty × 0.12) + (Phishing Penalty × 0.10) + (Redirect Penalty × 0.06) + (Typosquat Risk × 0.08)

Final Score = Clamp[55 + Positive Index − Risk Index, 0, 100]

Authentication score averages SPF, DKIM, and DMARC strength.
Blacklist, malware, phishing, and redirect values are converted into penalties.
Clamp means the final score cannot fall below 0 or exceed 100.

How to use this calculator

Enter the domain or case label you want to evaluate.
Collect inputs from your security tools, DNS reviews, and threat intelligence sources.
Set values for age, HTTPS quality, abuse history, and typosquatting exposure.
Mark DNSSEC, SPF, DKIM, and the current DMARC policy state.
Submit the form to generate the score above the calculator.
Review strong and weak signals, then export the report as CSV or PDF.

Example data table

Domain	Age Days	Blacklist Hits	HTTPS Score	Mail Auth	Malware Reports	Phishing Reports	Result Score	Risk Level
finance-portal.example	1820	0	95	SPF, DKIM, Reject	0	0	94.60	Low Risk
vendor-mail.example	620	1	82	SPF, DKIM, Quarantine	0	2	69.10	Moderate Risk
promo-alerts.example	55	4	40	None	2	5	18.85	High Risk

Frequently asked questions

1. What does this calculator measure?

It estimates domain reputation from trust indicators and abuse signals. The output helps analysts compare domains consistently during triage, onboarding, or continuous monitoring.

2. Is this a live reputation lookup?

No. It is a manual scoring calculator. You enter observations gathered from scanners, DNS tools, threat feeds, mail checks, or internal investigations.

3. Why does domain age matter?

Newly registered domains often deserve more scrutiny because attackers frequently rotate fresh assets. Age alone never proves safety, but it meaningfully affects baseline trust.

4. How do SPF, DKIM, and DMARC influence the score?

They raise mail authentication confidence. Stronger policies reduce spoofing risk and usually improve trust for email-heavy workflows, supplier onboarding, and phishing investigations.

5. Why are blacklist hits weighted heavily?

Verified blacklist detections often reflect prior abuse or active issues. Multiple hits across reliable sources usually increase urgency and lower the final reputation score quickly.

6. What is typosquat risk?

It estimates how closely a domain resembles a trusted brand or known asset. High similarity can indicate impersonation, phishing, affiliate abuse, or user-confusion risk.

7. When should I export CSV or PDF?

Use CSV for spreadsheets, case logs, and bulk comparison. Use PDF for stakeholder summaries, incident documentation, and review packets shared during investigations.

8. Can I customize the scoring model?

Yes. Adjust the weights, thresholds, and penalty scaling inside the script to match internal policy, sector risk, or the reliability of your telemetry sources.