How DomainScores scans: passive, non-intrusive checks of public DNS, email, and TLS records only. No exploitation, no intrusion — our policy in plain English.