Security Analysis
informationisbeautiful.net
C
146 / 225
2 critical3 high
Basic Security
10/40 (25%)DNSSEC Enabledhigh
DNSSEC protects against DNS spoofing and cache poisoning
→ Enable DNSSEC to protect against DNS spoofing and cache poisoning attacks. Contact your domain registrar to enable DNSSEC.
Multiple Nameservers
Multiple nameservers provide redundancy
Nameserver Diversitylow
Nameservers on different networks improve resilience
→ Both nameservers are run by one operator (mediatemple.net). If it has an outage, the domain stops resolving; a second DNS provider protects against that.
Record Security
26/55 (47%)CAA Recordshigh
CAA restricts which CAs can issue certificates
→ Add CAA records to specify which Certificate Authorities are allowed to issue certificates for your domain. Example: 0 issue "letsencrypt.org"
SPF Recordcritical
SPF prevents email spoofing
→ There are 2 SPF records; receivers treat that as an error (RFC 7208 §4.5) and the SPF check fails for every message. Merge them into one record.
DMARC Recordcritical
DMARC protects against phishing
→ Your DMARC policy is set to 'none'. Consider upgrading to 'quarantine' or 'reject' for better protection.
DKIM Presence
DKIM key published at k1._domainkey, mailjet._domainkey
Advanced Security
20/25 (80%)Mail Server Configuration
Multiple MX records provide email redundancy
SOA Record Configuration
SOA timers that do not delay new names or expire secondaries (refresh 8h, retry 2h, expire 7d, SOA minimum 10m)
IPv6 Supportlow
AAAA records enable IPv6 connectivity
→ No IPv6 (AAAA) records found. Consider adding IPv6 support for future-proofing.
Domain Reputation
50/50 (100%)Typosquatting Check
Domain does not mimic protected brands
Domain Blacklist Status
Domain checked against spam and malware blacklists (Spamhaus DBL, SURBL, URIBL)
IP Blacklist Status
Server IP addresses checked against spam and abuse blacklists (Spamhaus ZEN, SpamCop, Barracuda)
Threat Detection
40/55 (73%)DGA Detection
Domain Generation Algorithm detection
DNS Tunneling Detectionhigh
Detection of data exfiltration via DNS
→ Potential DNS tunneling activity detected. Investigate for data exfiltration.
Fast-Flux Detection
Detection of rapidly changing DNS infrastructure
Domain Age Check
Registered 17 years ago, not a newly registered domain