Security Analysis
masonerthoria.shop
F
65 / 215
4 critical4 high3 medium
Basic Security
0/40 (0%)DNSSEC Enabledhigh
DNSSEC protects against DNS spoofing and cache poisoning
→ Enable DNSSEC to protect against DNS spoofing and cache poisoning attacks. Contact your domain registrar to enable DNSSEC.
Multiple Nameserversmedium
Multiple nameservers provide redundancy
→ Only 0 nameserver(s) found. Configure at least 2 nameservers for redundancy and fault tolerance.
Nameserver Diversitylow
Nameservers on different networks improve resilience
→ No nameservers found. Configure nameservers for your domain.
Record Security
0/45 (0%)CAA Recordshigh
CAA restricts which CAs can issue certificates
→ Add CAA records to specify which Certificate Authorities are allowed to issue certificates for your domain. Example: 0 issue "letsencrypt.org"
SPF Recordcritical
SPF prevents email spoofing
→ Add an SPF record to prevent email spoofing. Example: v=spf1 include:_spf.google.com -all
DMARC Recordcritical
DMARC protects against phishing
→ Add a DMARC record at _dmarc.yourdomain.com. Example: v=DMARC1; p=quarantine; rua=mailto:dmarc@example.com
DKIM Presencelow
DKIM can't be verified from public DNS without knowing your provider's selector (records live at selector._domainkey.yourdomain.com)
→ We couldn't verify DKIM from public DNS — this is normal even when DKIM is working. Confirm it's enabled with your email provider.
Advanced Security
10/25 (40%)Mail Server Configurationmedium
Multiple MX records provide email redundancy
→ No MX records found. If you use email, configure MX records pointing to your mail server.
SOA Record Configuration
SOA record with reasonable TTL/refresh values
IPv6 Supportlow
AAAA records enable IPv6 connectivity
→ No IPv6 (AAAA) records found. Consider adding IPv6 support for future-proofing.
Domain Reputation
15/50 (30%)Typosquatting Check
Domain does not mimic protected brands
Domain Blacklist Statuscritical
Domain checked against spam and malware blacklists (Spamhaus DBL, SURBL, URIBL)
→ Domain is listed on 1 blacklist(s): Spamhaus DBL. Contact the blacklist operators to request removal.
IP Blacklist Statushigh
Server IP addresses checked against spam and abuse blacklists (Spamhaus ZEN, SpamCop, Barracuda)
→ IP address(es) listed on blacklists: 23.109.135.102 (Spamhaus ZEN); 23.109.135.252 (Spamhaus ZEN); 69.41.166.22 (Spamhaus ZEN); 23.109.135.38 (Spamhaus ZEN); 172.241.7.182 (Spamhaus ZEN). This may indicate the IP was used for spam or is on a shared hosting platform.
Reputation Confidence Alertcritical
Aggregate confidence score from multiple blacklist sources
→ High confidence (57%) that this domain/IP may be associated with malicious activity. Review blacklist details and take action.
Threat Detection
40/55 (73%)DGA Detection
Domain Generation Algorithm detection
DNS Tunneling Detection
Detection of data exfiltration via DNS
Fast-Flux Detectionhigh
Detection of rapidly changing DNS infrastructure
→ Fast-flux DNS behavior detected, common in botnet infrastructure.
Domain Age Checkmedium
Detection of newly registered domains
→ Domain appears to be newly registered. Exercise caution with new domains.