api6-noneu.truecaller.com

DNS sikkerhedsrapport

7 bestået
8 advarsler
2 fejlet
F
59/100
Kritiske sikkerhedsproblemer fundet - handling påkrævet!
Scannet 14. May 2026 kl. 09:15

Website preview

Domæneoplysninger

Alder

17 år, 4 måneder

Etableret

Udløber om

3162 dage

26. Jan 2035

DNSSEC

Inaktiv

Navneservere

4

servere

Registrar Amazon Registrar, Inc.
Oprettet 26. Jan 2009
Sidst opdateret 14. May 2026
Status Aktiv

Navneservere

NS-CLOUD-C1.GOOGLEDOMAINS.COM NS-CLOUD-C2.GOOGLEDOMAINS.COM NS-CLOUD-C3.GOOGLEDOMAINS.COM NS-CLOUD-C4.GOOGLEDOMAINS.COM

Domænestatus (EPP)

client delete prohibited client transfer prohibited client update prohibited

Domæne metrics

PageRank

0

Ingen data

Archive.org

0

Ingen historik

Metrics hentet for 2 uger siden

Sikkerhedsoversigt

HTTPS

SSL

HSTS

SPF

DMARC

DNSSEC

Sikkerhed

3 2

Ingen SPF record fundet

Tilføj en SPF record for at forhindre email spoofing

High

Ingen DMARC record fundet

Tilføj en DMARC record for at beskytte mod email spoofing

High

Ingen DKIM records fundet (testet almindelige selectors)

Medium

DNSSEC er ikke aktiveret

Aktiver DNSSEC for at beskytte mod DNS spoofing

Medium

Ingen CAA records fundet

Tilføj CAA records for at kontrollere hvilke CAs der kan udstede certifikater

Low

Ingen security.txt fil (RFC 9116)

Overvej at tilføje /.well-known/security.txt med kontaktinfo til sikkerhedsrapportering

MTA-STS ikke konfigureret

MTA-STS sikrer krypteret email-transport. Relevant for NIS2 compliance.

SSL / HTTPS

3 2

HTTP redirecter ikke til HTTPS

Konfigurer redirect fra HTTP til HTTPS

Medium

HSTS er ikke aktiveret

Aktiver HSTS for at forbedre sikkerheden

Medium

HTTPS er aktiveret

SSL-certifikat er gyldigt

SSL-certifikat er gyldigt i 158 dage

DNS Records

3

Subdomain - NS records nedarves fra hoveddomain

Ingen MX records fundet (domænet modtager muligvis ikke email)

Ingen wildcard DNS konfiguration

1 A record(s) fundet

[ { "ip": "35.190.118.8", "ttl": 7197 } ]

IPv6 (AAAA) understøttet

[ { "ttl": 7197, "ipv6": "2600:1901::8956:0:0:0:0" } ]

HTTP Headers

1 3

Strict-Transport-Security (HSTS) header mangler

Tilføj Strict-Transport-Security: max-age=31536000; includeSubDomains; preload

High

X-Frame-Options header mangler

Tilføj X-Frame-Options: DENY

Medium

Content-Security-Policy header mangler

Medium

Referrer-Policy header mangler

Permissions-Policy header mangler

X-Content-Type-Options: nosniff

Rå data (JSON)

{
    "dns": {
        "a": [
            {
                "ip": "35.190.118.8",
                "ttl": 7197
            }
        ],
        "mx": [],
        "ns": [],
        "caa": [],
        "soa": [],
        "txt": [],
        "aaaa": [
            {
                "ttl": 7197,
                "ipv6": "2600:1901::8956:0:0:0:0"
            }
        ],
        "cname": []
    },
    "ssl": {
        "san": [
            "*.truecaller.com",
            "truecaller.com"
        ],
        "chain": [
            {
                "issuer": "RapidSSL TLS RSA CA G1",
                "subject": "*.truecaller.com",
                "valid_to": "2026-10-19T23:59:59+00:00"
            },
            {
                "issuer": "DigiCert Global Root G2",
                "subject": "RapidSSL TLS RSA CA G1",
                "valid_to": "2027-11-02T12:24:33+00:00"
            }
        ],
        "issuer": {
            "country": "US",
            "common_name": "RapidSSL TLS RSA CA G1",
            "organization": "DigiCert Inc"
        },
        "subject": {
            "state": null,
            "country": null,
            "locality": null,
            "common_name": "*.truecaller.com",
            "organization": null,
            "organizational_unit": null
        },
        "is_valid": true,
        "valid_to": "2026-10-19T23:59:59+00:00",
        "is_expired": false,
        "valid_from": "2025-09-18T00:00:00+00:00",
        "chain_length": 2,
        "serial_number": "0E99B30F278FDEB8C82627E579E19E0B",
        "days_remaining": 158,
        "is_self_signed": false,
        "signature_algorithm": "RSA-SHA256"
    },
    "tls": {
        "cipher": null,
        "version": null,
        "is_secure": false,
        "is_insecure": false,
        "is_outdated": false
    },
    "https": {
        "has_https": true,
        "hsts_enabled": false,
        "hsts_max_age": null,
        "hsts_preload": false,
        "redirects_to_https": false,
        "hsts_include_subdomains": false
    },
    "whois": {
        "dnssec": false,
        "domain": "TRUECALLER.COM",
        "status": "registered",
        "registrar": "Amazon Registrar, Inc.",
        "raw_status": [
            "client delete prohibited",
            "client transfer prohibited",
            "client update prohibited"
        ],
        "expiry_date": "2035-01-26T18:56:12+00:00",
        "nameservers": [
            "NS-CLOUD-C1.GOOGLEDOMAINS.COM",
            "NS-CLOUD-C2.GOOGLEDOMAINS.COM",
            "NS-CLOUD-C3.GOOGLEDOMAINS.COM",
            "NS-CLOUD-C4.GOOGLEDOMAINS.COM"
        ],
        "created_date": "2009-01-26T18:56:12+00:00",
        "updated_date": "2026-05-14T09:15:30+00:00"
    },
    "metrics": {
        "pagerank": 0,
        "fetched_at": "2026-05-14T11:16:31+02:00",
        "wayback_snapshots": null
    },
    "internal_checks": {
        "open_resolver": null
    }
}