Domain reputation

Domain reputation is an estimate, made by a particular service, of how a domain has been used and how risky that use may be. Email providers, security tools, and blocklist operators can build separate reputations from different signals. There is no single global reputation score shared by the internet.

What can affect a domain's reputation?

A service may consider observed spam, phishing, malware, websites taken over by attackers, abuse reports, or patterns in email and web traffic. The signals and their weight differ by provider and dataset, and many operators do not publish their complete criteria. A domain can have a good standing with one service and a poor or unknown standing with another.

For example, a legitimate business website may be taken over by an attacker and used to host a harmful link. A security list may then flag the domain or a host name under it. That report describes what the particular service observed; it does not prove the business deliberately sent the harmful content. Removing the attacker's access and harmful changes may improve reputation over time, but removal or recovery is controlled by each service.

Is reputation the same as domain registration status?

No. Registration status describes the domain's state in a registry or registrar system. Reputation describes how another service assesses activity associated with the domain. A registered, functioning domain can have poor reputation, and an inactive domain may have no meaningful reputation data.

Related terms

• Blocklist — one possible use of reputation data
• False positive — a mistaken or misleading assessment
• Phishing — activity that can harm reputation
• Domain registration status — a separate registry concept