Domain Security
DNSSEC, SSL/TLS, domain hijacking prevention, and abuse mitigation.
DNSSEC
Cryptographic extensions that authenticate DNS responses to prevent tampering.
SSL/TLS证书
Cryptographic certificate enabling encrypted HTTPS connections for a domain.
域名劫持
Unauthorized takeover of a domain through social engineering or security exploits.
域名安全
All measures protecting domain names from unauthorized access or modification.
HTTPS要求（HSTS）
TLD-level requirement for HTTPS, enforced via browser HSTS preload lists.
DNS欺骗（缓存投毒）
Attack that corrupts DNS cache data to redirect users to malicious sites.
错误拼写域名抢注（Typosquatting）
Registering misspelled variants of popular domains to capture mistyped traffic.
网络域名抢注（Cybersquatting）
Registering domains in bad faith that infringe on existing trademarks.
SPF记录
DNS TXT record specifying authorized email-sending servers for a domain.
DMARC
Email authentication protocol that uses SPF and DKIM to prevent email spoofing.
DKIM
Email authentication adding digital signatures verified via DNS public keys.
域名滥用
Malicious use of domains for phishing, malware, spam, or fraud.
域名遮蔽
Attack creating malicious subdomains under a legitimate domain after compromising its registrar account.
DNS 重绑定
Attack that tricks browsers into accessing internal network resources by rapidly changing a domain's DNS resolution.
证书透明度 (CT)
Open standard requiring all TLS certificates to be recorded in public, auditable logs for transparency and abuse detection.
HSTS 预加载
Submission of a domain to browser preload lists ensuring HTTPS-only access from the very first connection.
DANE（基于DNS的命名实体认证）
Protocol using DNSSEC-signed TLSA records to bind TLS certificates to domains, bypassing traditional CA trust.
RPZ（响应策略区）
DNS firewall mechanism allowing resolvers to block or redirect queries for domains on threat intelligence lists.
域名前置
Technique hiding traffic's true destination by using a trusted domain's CDN infrastructure to route encrypted requests.
BIMI（信息识别品牌标识）
Email standard enabling verified brand logos in inboxes, requiring DMARC enforcement and a Verified Mark Certificate.
MTA-STS（邮件传输代理严格传输安全）
Standard requiring mail servers to use valid TLS when delivering email to a domain, preventing TLS downgrade attacks.
域名信誉
Score assigned to a domain based on abuse history, email behavior, and content signals used by filters and security systems.