Security Analysis
dler.com
B
168 / 205
1 critical1 high
Basic Security
10/40 (25%)DNSSEC Enabledhigh
DNSSEC protects against DNS spoofing and cache poisoning
→ Enable DNSSEC to protect against DNS spoofing and cache poisoning attacks. Contact your domain registrar to enable DNSSEC.
Multiple Nameservers
Multiple nameservers provide redundancy
Nameserver Diversitylow
Nameservers on different networks improve resilience
→ Both nameservers are run by one operator (cloudflare.com). If it has an outage, the domain stops resolving; a second DNS provider protects against that.
Record Security
48/55 (87%)CAA Records
CAA restricts which CAs can issue certificates
SPF Record
SPF prevents email spoofing
DMARC Recordcritical
DMARC protects against phishing
→ There are 2 DMARC records at _dmarc; receivers ignore all of them when more than one exists (RFC 7489). Keep exactly one.
DKIM Presence
DKIM key published at google._domainkey
Advanced Security
25/25 (100%)Mail Server Configuration
Multiple MX records provide email redundancy
SOA Record Configuration
SOA timers that do not delay new names or expire secondaries (refresh 2h 46m, retry 40m, expire 7d, SOA minimum 30m)
IPv6 Support
AAAA records enable IPv6 connectivity
Domain Reputation
30/30 (100%)Typosquatting Check
Domain does not mimic protected brands
Domain Blacklist Statusnot checked
Domain blacklists (Spamhaus DBL, SURBL, URIBL) could not be checked — every query timed out or errored
→ Blacklist status is unknown, not clean. Re-run the report to check.
IP Blacklist Status
Server IP addresses checked against spam and abuse blacklists (Spamhaus ZEN, SpamCop, Barracuda)
Threat Detection
55/55 (100%)DGA Detection
Domain Generation Algorithm detection
DNS Tunneling Detection
Detection of data exfiltration via DNS
Fast-Flux Detection
Detection of rapidly changing DNS infrastructure
Domain Age Check
Registered 27 years ago, not a newly registered domain