Security Analysis
google.tn
B
170 / 215
1 critical1 high
Basic Security
10/40 (25%)DNSSEC Enabledhigh
DNSSEC protects against DNS spoofing and cache poisoning
→ Enable DNSSEC to protect against DNS spoofing and cache poisoning attacks. Contact your domain registrar to enable DNSSEC.
Multiple Nameservers
Multiple nameservers provide redundancy
Nameserver Diversitylow
Nameservers on different networks improve resilience
→ All 4 nameservers are run by one operator (google.com). If it has an outage, the domain stops resolving; a second DNS provider protects against that.
Record Security
45/45 (100%)CAA Records
CAA restricts which CAs can issue certificates
SPF Record
SPF prevents email spoofing
DMARC Record
DMARC protects against phishing
DKIM Presencenot checked
No DKIM key at the common selectors we try (default, google, selector1, selector2, k1, s1 and others). Many senders use their own selector names, so DKIM may still be set up. Not scored.
→ If this domain sends mail, look up the selector your email provider gave you with the DKIM checker (/dkim-checker).
Advanced Security
25/25 (100%)Mail Server Configuration
One MX host (smtp.google.com), Google Workspace's documented setup: that name answers from 9 addresses
SOA Record Configuration
SOA timers that do not delay new names or expire secondaries (refresh 15m, retry 15m, expire 30m, SOA minimum 1m)
IPv6 Support
AAAA records enable IPv6 connectivity
Domain Reputation
35/50 (70%)Typosquatting Checkcritical
Domain does not mimic protected brands
→ This domain appears to be a potential typosquatting attempt targeting google.com. Exercise extreme caution.
Domain Blacklist Status
Domain checked against spam and malware blacklists (Spamhaus DBL, SURBL, URIBL)
IP Blacklist Status
Server IP addresses checked against spam and abuse blacklists (Spamhaus ZEN, SpamCop, Barracuda)
Threat Detection
55/55 (100%)DGA Detection
Domain Generation Algorithm detection
DNS Tunneling Detection
Detection of data exfiltration via DNS
Fast-Flux Detection
Detection of rapidly changing DNS infrastructure
Domain Age Check
Registered 8 years ago, not a newly registered domain