Security Analysis
nic.buzz
D
90 / 225
4 critical3 high2 medium
Basic Security
10/40 (25%)DNSSEC Enabledhigh
DNSSEC protects against DNS spoofing and cache poisoning
→ Enable DNSSEC to protect against DNS spoofing and cache poisoning attacks. Contact your domain registrar to enable DNSSEC.
Multiple Nameservers
Multiple nameservers provide redundancy
Nameserver Diversitylow
Nameservers on different networks improve resilience
→ All nameservers appear to be from the same provider. Consider using nameservers from different providers for better resilience.
Record Security
0/55 (0%)CAA Recordshigh
CAA restricts which CAs can issue certificates
→ Add CAA records to specify which Certificate Authorities are allowed to issue certificates for your domain. Example: 0 issue "letsencrypt.org"
SPF Recordcritical
SPF prevents email spoofing
→ Add an SPF record to prevent email spoofing. Example: v=spf1 include:_spf.google.com -all
DMARC Recordcritical
DMARC protects against phishing
→ Add a DMARC record at _dmarc.yourdomain.com. Example: v=DMARC1; p=quarantine; rua=mailto:dmarc@example.com
DKIM Presencehigh
DKIM signs outgoing emails
→ DKIM could not be detected from standard TXT records. Ensure DKIM is configured with your email provider. Records are typically at selector._domainkey.yourdomain.com
Advanced Security
5/25 (20%)Mail Server Configurationmedium
Multiple MX records provide email redundancy
→ No MX records found. If you use email, configure MX records pointing to your mail server.
SOA Record Configurationlow
SOA record with reasonable TTL/refresh values
→ SOA TTL or refresh values may be suboptimal. Consider reviewing your zone configuration.
IPv6 Supportlow
AAAA records enable IPv6 connectivity
→ No IPv6 (AAAA) records found. Consider adding IPv6 support for future-proofing.
Domain Reputation
20/50 (40%)Typosquatting Check
Domain does not mimic protected brands
Domain Blacklist Statuscritical
Domain checked against spam and malware blacklists (Spamhaus DBL, SURBL, URIBL)
→ Domain is listed on 1 blacklist(s): Spamhaus DBL. Contact the blacklist operators to request removal.
IP Blacklist Statusmedium
Server IP addresses checked against spam and abuse blacklists (Spamhaus ZEN, SpamCop, Barracuda)
→ IP address(es) listed on blacklists: 198.71.233.199 (Spamhaus ZEN). This may indicate the IP was used for spam or is on a shared hosting platform.
Reputation Confidence Alertcritical
Aggregate confidence score from multiple blacklist sources
→ High confidence (64%) that this domain/IP may be associated with malicious activity. Review blacklist details and take action.
Threat Detection
55/55 (100%)DGA Detection
Domain Generation Algorithm detection
DNS Tunneling Detection
Detection of data exfiltration via DNS
Fast-Flux Detection
Detection of rapidly changing DNS infrastructure
Domain Age Check
Detection of newly registered domains