Full website check online
One button instead of three: we test the SSL certificate, availability and speed of your website together and show an overall health score with a list of found problems.
What the full website check covers
The full check runs nine tests on one address in a single pass: the SSL certificate, availability, server speed, security headers, the server IP in spam blacklists, the domain's registration expiry, mixed content, robots.txt and Open Graph tags. It takes up to a minute, because every test talks to the live site from our server, the same way a visitor's browser or a search bot would.
The result is a health score out of 10. Every site starts at 10 and loses points only for problems that matter to visitors or to Google: a certificate that is expired or not trusted, a site that is down or answering with errors, an IP on a spam blacklist, a robots.txt that blocks the whole site. Open Graph is shown for information and never changes the score.
How the score is calculated
- SSL: minus 4 if there is no working certificate or it has expired, minus 3 if it is issued for a different name, minus 3 if browsers do not trust it, minus 1 if it expires within 14 days.
- Availability: minus 5 if the site does not answer at all, minus 4 for a 5xx error, minus 2 for a 4xx error, minus 1 for more than one redirect before the page.
- Speed: minus 1 for each speed tip, up to 3 in total (slow server response, no compression, no caching headers, an old HTTP version and so on).
- Security headers: minus 1 for grade B or C, minus 2 for D, E or F.
- Blacklists minus 3, domain expiring within 30 days minus 1, mixed content on an HTTPS page minus 2, robots.txt blocking the whole site minus 4.
- A score of 8 or more earns the Verified by SpoofLens badge, which you can place on your site.
Related errors and guides
- How to check if a website is down
- NET::ERR_CERT_DATE_INVALID: expired certificate
- How to add security headers in .htaccess
- How to reduce TTFB on shared hosting
- Mixed content: the padlock is broken
Frequently asked questions
- Why did my score change between two checks?
- Each run is a live test. A server response that crossed the 800 ms line, a certificate that was renewed, or a header that a CDN added or dropped changes the result. Run it again after every fix: the latest full check is what the badge and the public report use.
- Is this the same as PageSpeed or a security audit?
- No. It checks what can be measured from outside in under a minute: configuration, availability and the server's response. It does not render the page in a browser, measure Core Web Vitals or look for vulnerabilities in your code.
- Is the result public?
- The result is saved as a snapshot on a report page, spooflens.com/report/your-domain, so you can share it. Report pages are kept out of search engines, and you can ask us to delete one through the contact page.