Security Analysis
vegamovies.nf
D
90 / 200
2 critical2 high2 medium
Basic Security
0/40 (0%)DNSSEC Enabledhigh
DNSSEC protects against DNS spoofing and cache poisoning
→ Enable DNSSEC to protect against DNS spoofing and cache poisoning attacks. Contact your domain registrar to enable DNSSEC.
Multiple Nameserversmedium
Multiple nameservers provide redundancy
→ Only 0 nameserver(s) found. Configure at least 2 nameservers for redundancy and fault tolerance.
Nameserver Diversitylow
Nameservers on different networks improve resilience
→ No nameservers found. Configure nameservers for your domain.
Record Security
0/45 (0%)CAA Recordshigh
CAA restricts which CAs can issue certificates
→ Add CAA records to specify which Certificate Authorities are allowed to issue certificates for your domain. Example: 0 issue "letsencrypt.org"
SPF Recordcritical
SPF prevents email spoofing
→ Add an SPF record to prevent email spoofing. Example: v=spf1 include:_spf.google.com -all
DMARC Recordcritical
DMARC protects against phishing
→ Add a DMARC record at _dmarc.yourdomain.com. Example: v=DMARC1; p=quarantine; rua=mailto:dmarc@example.com
DKIM Presencelow
DKIM can't be verified from public DNS without knowing your provider's selector (records live at selector._domainkey.yourdomain.com)
→ We couldn't verify DKIM from public DNS — this is normal even when DKIM is working. Confirm it's enabled with your email provider.
Advanced Security
0/25 (0%)Mail Server Configurationmedium
Multiple MX records provide email redundancy
→ No MX records found. If you use email, configure MX records pointing to your mail server.
SOA Record Configurationlow
SOA record with reasonable TTL/refresh values
→ No SOA record found. This is unusual and may indicate DNS misconfiguration.
IPv6 Supportlow
AAAA records enable IPv6 connectivity
→ No IPv6 (AAAA) records found. Consider adding IPv6 support for future-proofing.
Domain Reputation
35/35 (100%)Typosquatting Check
Domain does not mimic protected brands
Domain Blacklist Status
Domain checked against spam and malware blacklists (Spamhaus DBL, SURBL, URIBL)
Threat Detection
55/55 (100%)DGA Detection
Domain Generation Algorithm detection
DNS Tunneling Detection
Detection of data exfiltration via DNS
Fast-Flux Detection
Detection of rapidly changing DNS infrastructure
Domain Age Check
Detection of newly registered domains