Skip to content
Back to resources

Documentation

Reference material for how the Health Check score is calculated, what each tool actually checks, and the ground rules every tool on Frabs runs under.

Health Check scoring

Every Health Check produces a score out of 100, split across six weighted categories. Each category is made up of individually scored checks, shown in the full report so a low score is always traceable back to a specific reason rather than a single opaque number.

Availability

25 points
  • Host resolves successfully5 pts
  • Connects successfully5 pts
  • Returns an expected HTTP response7 pts
  • No excessive redirects3 pts
  • Acceptable response time5 pts

SSL

20 points
  • HTTPS is available5 pts
  • Certificate is valid5 pts
  • Certificate is not close to expiry3 pts
  • Uses a modern TLS version3 pts
  • HTTP redirects to HTTPS2 pts
  • Certificate hostname matches2 pts

Security headers

15 points
  • Weighted across HSTS, CSP, X-Frame-Options and other response headers15 pts

DNS

15 points
  • Valid DNS setup5 pts
  • Healthy nameservers3 pts
  • No obvious DNS configuration errors3 pts
  • Domain not close to expiry2 pts
  • IPv4 or IPv6 resolved properly2 pts

Performance

15 points
  • Response time6 pts
  • Compression enabled3 pts
  • HTTP/2 or HTTP/3 in use3 pts
  • Cache headers present2 pts
  • CDN detected1 pts

Network

10 points
  • Reverse DNS configured2 pts
  • IPv6 available3 pts
  • Modern HTTP protocol support3 pts
  • CDN or edge caching in front of origin2 pts

Overall rating

  • Excellent90–100
  • Healthy75–89
  • Fair50–74
  • Poor0–49

What each tool checks

Every tool below reuses the same underlying checks that power the Health Check, run individually rather than bundled into one report.

Website Tools

Website Speed Test

Website Speed Test makes a single request to a page and breaks the response down into DNS lookup time, connection time, TLS negotiation time and time to first byte, plus the total time and size of the response.

Redirect Checker

Redirect Checker follows every hop in a redirect chain from a starting URL through to wherever it actually ends up, showing the status code and address at each step along the way.

Meta Tag Checker

Meta Tag Checker fetches a page and reads its title tag, meta description, canonical link, robots meta tag, and how many Open Graph and Twitter card tags are present, flagging when the title or description run noticeably short or long for how search engines typically display them.

Open Graph Preview

Open Graph Preview reads a page's og: and twitter: meta tags and renders an approximation of the card that appears when the link is shared, falling back to the page's regular title and description if no social tags are set at all.

Robots.txt Tester

Robots.txt Tester fetches a site's robots.txt and parses it into its user-agent groups, showing exactly which Allow and Disallow rules apply to each crawler along with any sitemap URLs it references.

Sitemap Checker

Sitemap Checker fetches a domain's sitemap.xml (or a direct sitemap URL you provide), confirms it is valid XML with a real <urlset> or <sitemapindex> root, counts the URLs listed, and spot-checks a handful of them for a real response.

Domain & DNS Tools

DNS Lookup

DNS Lookup queries a domain's live records directly, the same way any resolver on the internet would, and shows you the answer without relying on a cached result from your own browser. It checks A, AAAA, CNAME, MX, TXT and NS records in one pass, along with how long the lookup took and whether DNSSEC appears to be in place.

DNS Propagation

DNS Propagation queries a domain's A record against several major public resolvers at once, Cloudflare, Google, Quad9 and OpenDNS among them, and shows whether they already agree or are still holding different cached answers.

Reverse DNS

Reverse DNS takes an IP address and looks up the PTR record pointing back to a hostname, the opposite direction to a normal DNS lookup. Give it a domain instead of an IP and it resolves the domain first, then reverses whichever address comes back.

WHOIS Lookup

WHOIS Lookup queries a domain's registration data through RDAP, the modern structured replacement for the original WHOIS protocol, and returns the registrar, registration and expiry dates, current nameservers and status codes in one place.

MX Lookup

MX Lookup finds the mail servers configured to receive email for a domain, listed in the priority order a sending server would actually try them in.

Blacklist Checker

Blacklist Checker queries an IP address against several major public email blacklists (DNSBLs) at once, the same lookup mail servers themselves perform before deciding whether to accept a message, and reports which ones currently list it.

Server Tools

Port Checker

Port Checker attempts a connection to about twenty well known ports on a host at once, covering common services like SSH, HTTP, HTTPS, SMTP, MySQL and RDP, and reports each one as open, closed or filtered.

Uptime Checker

Uptime Checker makes a single request to a website right now and reports whether it is online, the HTTP status code it returned and how long the response took.

HTTP Status Code Checker

HTTP Status Code Checker requests a URL and reports the status code it returns along with a plain description of what that specific code means, following any redirects and showing each hop's own code along the way.

Network Tools

Ping Test

Ping Test sends four connection probes to a host and times how long each one takes to get a response, reporting the minimum, average and maximum round trip time along with any packet loss.

Traceroute

Traceroute sends a small run of probes with a rising limit on how many network hops they are allowed to travel, so each router along the path replies once before the probe reaches the next one. The result is the sequence of routers between our server and the destination, with the response time at each step.

IP Lookup

IP Lookup resolves a domain or IP address and reports the reverse DNS hostname, the autonomous system and network operator behind it, the hosting provider, and an approximate location, all in one place.

ASN Lookup

ASN Lookup identifies the autonomous system, essentially the network block, an IP address belongs to, along with the organization that operates it. Every reachable address on the internet belongs to exactly one autonomous system, and that system's owner is usually the entity actually responsible for the traffic.

IPv6 Test

IPv6 Test checks whether a domain publishes a public AAAA record, the DNS record type that makes a site reachable over IPv6 rather than only the older IPv4.

Subnet Calculator

Subnet Calculator takes a CIDR block like 192.168.1.0/24 and works out the network address, broadcast address, subnet mask, wildcard mask, the first and last usable host addresses, and the total number of usable hosts.

Security Tools

SSL Checker

SSL Checker connects to a domain over HTTPS and reads its certificate directly, the same way a browser does before deciding whether to show a visitor a padlock or a warning. It reports the common name and alternative names, the issuer, how many days remain before expiry, whether the chain of trust is intact, and whether the certificate actually covers the hostname you asked about.

Security Headers

Security Headers checks a website's response for the specific headers browsers rely on to enforce protections like forced HTTPS, restricted script sources and clickjacking prevention, reporting which are present and which are missing.

SPF Checker

SPF Checker looks up a domain's SPF record and shows exactly which mail servers it authorizes to send on its behalf, along with the raw record so you can read the includes and the final policy yourself.

DMARC Checker

DMARC Checker looks up a domain's DMARC policy and reports whether one is present, what enforcement level it is set to, and the raw record itself.

Email Validator

Email Validator checks that an address is correctly formatted, then looks up its domain's MX records to confirm that domain is actually configured to receive mail at all.

Developer Tools

HTTP Headers

HTTP Headers shows every header a server actually sent back for a given request, along with the status code, HTTP version and any redirects followed along the way.

Website Technology Checker

Website Technology Checker inspects a page's response headers and HTML for known signatures and reports the web server, CDN, CMS, framework, analytics tool and reverse proxy it can identify.

JSON Formatter

JSON Formatter validates, formats and minifies JSON entirely in your browser, with nothing you paste ever sent anywhere.

Base64 Encoder

Base64 Encoder encodes and decodes text using Base64, entirely in your browser, with nothing you enter sent anywhere.

Hash Generator

Hash Generator produces MD5, SHA-1 and SHA-256 hashes for any text you type, calculated entirely in your own browser so nothing you enter is sent anywhere or stored. All three are generated at once, so there is no need to know in advance which algorithm a task calls for.

Timestamp Converter

Timestamp Converter converts between Unix timestamps and human readable dates in both directions, showing local time, UTC and ISO 8601 format side by side for the same moment.

QR Code Generator

QR Code Generator turns any URL or block of text into a scannable QR code, generated entirely in your browser and available to download as a PNG.

URL Encoder/Decoder

URL Encoder/Decoder converts text to and from percent-encoding, the escaping scheme URLs use to represent spaces, special characters and non-ASCII text safely inside a web address.

How Frabs runs

  • No accounts on the website. Every tool on frabs.net works without signing up, and always will. The API described on the API page is a separate, paid product for programmatic use, not a requirement for using the site.
  • Rate limits. Website tools are limited to 10 requests per 10 minutes per visitor, to keep the service usable for everyone on a free, no-account tool.
  • Only public targets. Every tool that connects out to a target refuses private, internal and non-routable addresses. This protects Frabs’ own infrastructure and stops it being used to reach internal services that shouldn’t be exposed.
  • Fixed, not open-ended, network probing. Tools like Port Checker and Ping Test probe a fixed list of common ports rather than an arbitrary range, and results aren’t stored against an account, so Frabs can’t be turned into a general-purpose scanning proxy against someone else’s server.