# Domain Report: Registration, DNS, Web, Hosting and Email

A one-call overview of a domain that runs LookupOwl's own tools and scores what they find: registration (registrar, age, expiry, holds), DNS (nameservers, addresses, mail records, DNSSEC), web (TLS certificate and a security-headers grade), hosting (host or CDN, DNS and email provider, whether the origin is hidden) and email (SPF, DMARC, DKIM discovery and a blocklist check of the mail servers). Returns an overall score, one score and headline per area, the findings, the key facts and, for every part, whether it worked and the path of the full tool. A part that fails is marked and the rest still arrive. Costs more than a single lookup; pick sections to cut it.

**Not for:** IP addresses (use ip_location), a deep look at one area (use the tool for it: whois_lookup, dns_lookup, ssl_check, security_headers, website_hosting, spf_check, dmarc_check, dkim_check, blacklist_check) or monitoring over time.

- Tool id: `domain-report`
- Category: domain
- Execution: fanout
- MCP tool `domain_report` at https://lookupowl.com/mcp
- REST `GET https://lookupowl.com/api/v1/tools/domain-report` (or POST a JSON body)
- OpenAPI: https://lookupowl.com/api/openapi.json

## Input

| Field | Type | Required | Default | Description |
|---|---|---|---|---|
| `domain` | string | yes |  | Domain to report on, e.g. example.com. A URL or e-mail address is reduced to its host; Unicode names are converted to Punycode. IP addresses are not accepted (use ip_location). max length 253 |
| `sections` | "registration" \| "dns" \| "web" \| "hosting" \| "email"[] | no | `["registration","dns","web","hosting","email"]` | Which sections to run: registration, dns, web (certificate and security headers), hosting and email (SPF, DMARC, DKIM, blocklists). Default all. Fewer sections cost less. max 5 items |

## Output

Results are wrapped in an envelope: `tool`, `version`, `requestId`, `data`, `summary`, `meta` (cache status, timing), `permalink`. `data` has these fields:

| Field | Type | Description |
|---|---|---|
| `domain` | string | The name the DNS, web and hosting sections ran on. |
| `registrable` | string | The registrable domain the registration and email sections ran on. |
| `score` | integer | Weighted score of the scored areas (registration 20, DNS 20, web 30, email 30, re-weighted over the areas that answered). Null when none did. |
| `rating` | "excellent" \| "good" \| "attention" \| "poor" \| "unknown" |  |
| `summary` | string |  |
| `areas` | object[] |  |
| `notes` | string[] |  |
| `incomplete` | boolean | A section did not finish in time; it is marked in its area. |

## Examples

### example.com, every section

```json
{"domain":"example.com","sections":["registration","dns","web","hosting","email"]}
```

```bash
curl 'https://lookupowl.com/api/v1/tools/domain-report?domain=example.com&sections=registration&sections=dns&sections=web&sections=hosting&sections=email'
```

Web page: https://lookupowl.com/domain-report?q=example.com

### github.com, every section

```json
{"domain":"github.com","sections":["registration","dns","web","hosting","email"]}
```

```bash
curl 'https://lookupowl.com/api/v1/tools/domain-report?domain=github.com&sections=registration&sections=dns&sections=web&sections=hosting&sections=email'
```

Web page: https://lookupowl.com/domain-report?q=github.com

### wikipedia.org, registration and DNS only (cheap)

```json
{"domain":"wikipedia.org","sections":["registration","dns"]}
```

```bash
curl 'https://lookupowl.com/api/v1/tools/domain-report?domain=wikipedia.org&sections=registration&sections=dns'
```

Web page: https://lookupowl.com/domain-report?q=wikipedia.org&sections=registration&sections=dns

## Web pages

- https://lookupowl.com/domain-report

## Limits and caching

- Cost: from 1 unit up, depending on the input (a registry lookup counts every upstream request); 1 unit for a cached result. Budgets are per network and published in the `RateLimit` response headers.
- Cache: the lifetime follows the data (for DNS, the record TTL, within a few minutes).
- Timeout: 40 s.

## Related tools

- [WHOIS Lookup](https://lookupowl.com/tools/whois-lookup.md): Registrar, creation and expiry dates, status codes, nameservers and DNSSEC for any domain, from RDAP with WHOIS fallback.
- [DNS Lookup](https://lookupowl.com/tools/dns-lookup.md): Look up A, AAAA, MX, NS, TXT, CNAME, SOA, CAA, DS and DNSKEY records from a public resolver or the authoritative nameserver.
- [SSL Certificate Checker](https://lookupowl.com/tools/ssl-checker.md): Check a site's SSL/TLS certificate: days until it expires, whether it is trusted, matches the host and has a complete chain.
- [Security Headers Checker](https://lookupowl.com/tools/security-headers.md): Grade a site's HTTP security headers from A+ to F, with what each one does and the exact header to add.
- [Who Hosts This Website](https://lookupowl.com/tools/website-hosting.md): Find the web host or CDN, DNS provider and email provider behind a domain, with the evidence, and whether the origin is hidden.
- [SPF Record Checker](https://lookupowl.com/tools/spf-checker.md): Check a domain's SPF record, count its DNS lookups against the limit of 10 and find errors.
- [DMARC Record Checker](https://lookupowl.com/tools/dmarc-checker.md): Look up and validate a domain's DMARC policy, report addresses and alignment settings.
- [DKIM Record Checker](https://lookupowl.com/tools/dkim-checker.md): Find and check a domain's DKIM public keys, even when you do not know the selector.
- [IP and Domain Blacklist Checker](https://lookupowl.com/tools/blacklist-checker.md): Check an IP address, a mail server or a domain against live spam blocklists, with how to get delisted.

## Guide: Domain report

Enter a domain and get one scored report that brings together its registration, DNS, web security, hosting and email setup, with a link to the full tool behind every part.

### What the domain report does

Most questions about a domain start the same way. Who owns it, is it set up properly, and is anything about to break? Answering them usually means opening five or six tools in a row. The domain report runs those checks together and puts the results on one page, so you can see in a minute where a domain is solid and where it needs work.

It does not do any new kind of lookup. Behind each section sits one of the tools on this site: the [WHOIS lookup](https://lookupowl.com/whois), the [DNS lookup](https://lookupowl.com/dns-lookup), the [SSL checker](https://lookupowl.com/ssl-checker), the [security headers checker](https://lookupowl.com/security-headers), the [hosting finder](https://lookupowl.com/who-hosts-this-website) and the checkers for [SPF](https://lookupowl.com/spf-record-checker), [DMARC](https://lookupowl.com/dmarc-checker), [DKIM](https://lookupowl.com/dkim-checker) and [blocklists](https://lookupowl.com/blacklist-checker). The report asks each one, reads the answer and turns it into a score and a plain sentence.

Because every part is the real tool, nothing is hidden. Each section links to the full result for the same domain, so you can open the details behind any score and check our working.

### How to use it

1. **Enter a domain**: Type `example.com`, or paste a web address or an email address and we will reduce it to the domain. IP addresses are not accepted here, because a domain report is about a name. For an address, try the [IP lookup](https://lookupowl.com/ip-lookup).
2. **Read the summary first**: The top of the report shows an overall score and one tile for each area, each with its own score and a one-line verdict. Anything below 65 is worth a look.
3. **Open the area that needs work**: The tabs below list the findings, the key facts and which parts ran. Follow the link in a tab to the full tool for that part, with the domain already filled in.

Under More options you can switch sections off. Email is the largest part by far, because it runs four checkers and asks several blocklists about the mail servers. If you only care about registration and DNS, leave the others out and the report is quicker and costs less of your allowance.

```bash
# The same report as JSON
curl "https://lookupowl.com/api/v1/tools/domain-report?domain=example.com"
```

> **In Claude, ChatGPT or Cursor** With the LookupOwl MCP server connected, ask "Give me a health report on example.com." The assistant calls `domain_report` and answers from the scored result, with a path to the full tool for anything it flags.

### How the scores work

Each scored area starts at 100 and loses points for specific, named problems. The overall score is a weighted average of the areas that could be read. Hosting is shown for information and is not scored, because there is no wrong host.

| Area | Weight | What lowers the score |
|---|---|---|
| Registration | 20 | A hold on the domain, a grace period, redemption or pending delete, expiry within 90 days, a very new registration |
| DNS | 20 | No or only one nameserver, a missing SOA, no address, a resolver error, DNSSEC not validating, a name that does not exist |
| Web security | 30 | An expired, untrusted or mismatched certificate; the security headers score from the headers checker. The two are averaged |
| Email | 30 | SPF (25), DMARC (35), DKIM (15) and blocklists (25), counted among the parts that answered |
| Hosting | not scored | Nothing. It names the host or CDN, the DNS provider and the email provider |

A part that fails, for example a mail server that does not answer in time, is marked as failed and left out of the average. It is never counted as zero, and the summary says which part is missing. The overall score reads as excellent from 85, good from 70, in need of attention from 50 and poor below that.

### What it does not do

- It does not find hidden servers. When a CDN answers for a site, the report says the origin is hidden and stops there.
- It does not scan ports, crawl the site or test for vulnerabilities. It reads public records and makes one connection to the site for the certificate and one request for the headers.
- It is a snapshot, not monitoring. Run it again after you change something, or after the cache lifetime of the individual checks has passed.
- It cannot see private settings, such as how a mail provider filters inbound mail. The email score is about what the domain publishes.

DKIM is the one email check that can miss something. Selectors cannot be listed, so the report tries the common ones. Finding none is shown as "not proof", and it counts for less than a record that is clearly missing.

### Frequently asked questions

**How long does a domain report take?**

Usually 5 to 15 seconds, because the sections run at the same time and the slowest one sets the pace. Mail server blocklists are normally the slowest. If a section is not finished after about 24 seconds, the report shows what it has and marks that section.

**Why does a report cost more than one lookup?**

It runs up to nine checks in one go, so it uses more of your free allowance than a single tool. A full report counts for about 60 units, which is the most any one request can use. Choosing fewer sections lowers the price, and registration and DNS alone are cheap.

**What if one section fails?**

The rest of the report still arrives. The failed section says what went wrong, usually a timeout or a server that did not answer, and it is left out of the score instead of counting as zero. Run the report again in a minute and it often fills in.

**Can I run it on a subdomain?**

Yes. DNS, the certificate, the security headers and hosting are read for the subdomain you enter. Registration and email belong to the main domain, so those are read for it, and the report tells you so.

**Is a high score a guarantee that a domain is safe?**

No. The score tells you how well the domain is set up on the points we can check from outside. A phishing domain can have a valid certificate, strong headers and a perfect mail setup. Treat the registration age and the findings as clues, not a verdict on the owner.

**Do you store the domains I check?**

Results are kept for a short time so repeat requests are quick. Our [privacy page](https://lookupowl.com/privacy) says exactly what is stored and what is sent to our analytics service.

**Can an AI assistant run this report?**

Yes. The same report is the `domain_report` tool on the LookupOwl MCP server at https://lookupowl.com/mcp. It returns the scores, findings and links as structured data, which suits an assistant that has to explain a domain in a sentence or two.