Domain Management
DomainOps tracks all your domains in one place — WHOIS data, expiry dates, security posture, and health scores — so you never lose a domain to an unexpected expiry.
Adding domains
From the Domains page, click Add Domain. Enter the bare domain name (e.g. example.com — no protocol or trailing slash). You can optionally assign the domain to a portfolio at creation time or reassign it later.
Bulk import
To add many domains at once, go to Settings → Bulk Import. Paste or upload a list of domain names, one per line. DomainOps will import them all and begin WHOIS lookups in the background.
Domain verification
Verification proves you control a domain. It is required for Exposure Monitoring scans and is done via a DNS TXT record. From the domain's settings page, copy the verification token and create a DNS TXT record at:
Once the record propagates, click Verify to confirm ownership. The domain status will update to verified.
Health scores
Each domain receives a health score from 0–100 and a letter grade A through F. The score is computed from multiple signals: WHOIS data freshness, days until expiry, SSL certificate status, and the results of security checks. A score of 80–100 earns an A; below 20 is an F.
| Grade | Score range | Meaning |
|---|---|---|
| A | 80–100 | All checks pass, expiry is far off |
| B | 60–79 | Minor issues or expiry within 90 days |
| C | 40–59 | Some checks failing or expiry approaching |
| D | 20–39 | Multiple issues require attention |
| F | <20 | Critical issues — domain at risk |
Security checks
DomainOps checks the following DNS-based security records for each domain:
- SPFSender Policy Framework — prevents email spoofing by specifying authorised mail servers.
- DMARCDomain-based Message Authentication — policy for handling emails that fail SPF/DKIM.
- DKIMDomainKeys Identified Mail — cryptographic email signature to prevent tampering.
- CAACertification Authority Authorisation — restricts which CAs can issue SSL certificates for your domain.
- DNSSECDNS Security Extensions — cryptographically signs DNS records to prevent spoofing.
- Transfer lockRegistrar-level lock preventing unauthorised domain transfers.
WHOIS data
DomainOps regularly fetches WHOIS records and stores: registrar name, registration and expiry dates, name servers, and WHOIS status codes (e.g. clientTransferProhibited). Expiry dates drive renewal notifications.
See also: Domains API Reference