Security Analysis
bancoestado.cl
B
165 / 200
1 high
Basic Security
10/40 (25%)DNSSEC Enabledhigh
DNSSEC protects against DNS spoofing and cache poisoning
→ Enable DNSSEC to protect against DNS spoofing and cache poisoning attacks. Contact your domain registrar to enable DNSSEC.
Multiple Nameservers
Multiple nameservers provide redundancy
Nameserver Diversitylow
Nameservers on different networks improve resilience
→ All 6 nameservers are run by one operator (akam.net). If it has an outage, the domain stops resolving; a second DNS provider protects against that.
Record Security
55/55 (100%)CAA Records
CAA restricts which CAs can issue certificates
SPF Record
SPF prevents email spoofing
DMARC Record
DMARC protects against phishing
DKIM Presence
DKIM key published at selector1._domainkey, dkim._domainkey
Advanced Security
20/25 (80%)Mail Server Configuration
Multiple MX records provide email redundancy
SOA Record Configuration
SOA timers that do not delay new names or expire secondaries (refresh 5m, retry 10m, expire 7d, SOA minimum 5m)
IPv6 Supportlow
AAAA records enable IPv6 connectivity
→ No IPv6 (AAAA) records found. Consider adding IPv6 support for future-proofing.
Domain Reputation
35/35 (100%)Typosquatting Check
Domain does not mimic protected brands
Domain Blacklist Status
Domain checked against spam and malware blacklists (Spamhaus DBL, SURBL, URIBL)
Threat Detection
45/45 (100%)DGA Detection
Domain Generation Algorithm detection
DNS Tunneling Detection
Detection of data exfiltration via DNS
Fast-Flux Detection
Detection of rapidly changing DNS infrastructure
Domain Age Checknot checked
Registration date not available from the registry, so domain age could not be checked