Security Analysis
ghasedak24.com
C
155 / 225
1 critical3 high1 medium
Basic Security
20/40 (50%)DNSSEC Enabledhigh
DNSSEC protects against DNS spoofing and cache poisoning
→ Enable DNSSEC to protect against DNS spoofing and cache poisoning attacks. Contact your domain registrar to enable DNSSEC.
Multiple Nameservers
Multiple nameservers provide redundancy
Nameserver Diversity
Nameservers on different networks improve resilience
Record Security
15/55 (27%)CAA Recordshigh
CAA restricts which CAs can issue certificates
→ Add CAA records to specify which Certificate Authorities are allowed to issue certificates for your domain. Example: 0 issue "letsencrypt.org"
SPF Record
SPF prevents email spoofing
DMARC Recordcritical
DMARC protects against phishing
→ Add a DMARC record at _dmarc.yourdomain.com. Example: v=DMARC1; p=quarantine; rua=mailto:dmarc@example.com
DKIM Presencehigh
default._domainkey: DKIM public key (p=) is not valid base64
→ The DKIM record at default._domainkey has no usable public key (DKIM public key (p=) is not valid base64). Mail signed with this selector will fail DKIM. Publish the key your email provider gives you, or remove the selector.
Advanced Security
15/25 (60%)Mail Server Configurationmedium
Multiple MX records provide email redundancy
→ Consider adding a backup MX record for email redundancy.
SOA Record Configuration
SOA timers that do not delay new names or expire secondaries (refresh 1h 30m, retry 1h, expire 14d, SOA minimum 5m)
IPv6 Supportlow
AAAA records enable IPv6 connectivity
→ No IPv6 (AAAA) records found. Consider adding IPv6 support for future-proofing.
Domain Reputation
50/50 (100%)Typosquatting Check
Domain does not mimic protected brands
Domain Blacklist Status
Domain checked against spam and malware blacklists (Spamhaus DBL, SURBL, URIBL)
IP Blacklist Status
Server IP addresses checked against spam and abuse blacklists (Spamhaus ZEN, SpamCop, Barracuda)
Threat Detection
55/55 (100%)DGA Detection
Domain Generation Algorithm detection
DNS Tunneling Detection
Detection of data exfiltration via DNS
Fast-Flux Detection
Detection of rapidly changing DNS infrastructure
Domain Age Check
Registered 11 years ago, not a newly registered domain