bales.dk

DNS sikkerhedsrapport

18 bestået
8 advarsler
0 fejlet
B
82/100
Acceptabel konfiguration - nogle forbedringer anbefales.
Scannet 15. Aug 2026 kl. 17:37

Website preview

Domæneoplysninger

Alder

13 år, 2 måneder

Etableret

Udløber om

670 dage

30. Jun 2028

DNSSEC

Aktiv

Navneservere

2

servere

Oprettet 28. Jun 2013
Status Aktiv

Navneservere

colin.ns.cloudflare.com zariyah.ns.cloudflare.com

Domænestatus (EPP)

Active

Domæne metrics

PageRank

0

Ingen data

Archive.org

93

snapshots Se historik →

Metrics hentet for 2 uger siden

Sikkerhedsoversigt

HTTPS

SSL

HSTS

SPF

DMARC

DNSSEC

Sikkerhed

6 3

Ingen DKIM records fundet (testet almindelige selectors)

Medium

DMARC aggregate reporting (rua) er ikke konfigureret

Tilføj rua= for at modtage DMARC rapporter

Low

Ingen CAA records fundet

Tilføj CAA records for at kontrollere hvilke CAs der kan udstede certifikater

Low

Ingen security.txt fil (RFC 9116)

Overvej at tilføje /.well-known/security.txt med kontaktinfo til sikkerhedsrapportering

MTA-STS ikke konfigureret

MTA-STS sikrer krypteret email-transport. Relevant for NIS2 compliance.

SPF record fundet

v=spf1 mx -all

SPF bruger streng policy (-all)

DMARC record fundet

v=DMARC1;p=quarantine;sp=none;pct=50;adkim=r;aspf=r;

DMARC policy er sat til quarantine

DNSSEC er aktiveret

Zone transfer (AXFR) er korrekt blokeret

SSL / HTTPS

3 2

HTTP redirecter ikke til HTTPS

Konfigurer redirect fra HTTP til HTTPS

Medium

HSTS er ikke aktiveret

Aktiver HSTS for at forbedre sikkerheden

Medium

HTTPS er aktiveret

SSL-certifikat er gyldigt

SSL-certifikat er gyldigt i 73 dage

DNS Records

7

Kun én MX server - overvej backup MX for redundans

2 nameserver(s) fundet

Multiple nameservers for redundans

1 MX record(s) fundet

[ { "ttl": 300, "host": "www551.your-server.de", "priority": 10 } ]

Ingen wildcard DNS konfiguration

2 A record(s) fundet

[ { "ip": "188.114.97.3", "ttl": 297 }, { "ip": "188.114.96.3", "ttl": 297 } ]

IPv6 (AAAA) understøttet

[ { "ttl": 297, "ipv6": "2a06:98c1:3121::3" }, { "ttl": 297, "ipv6": "2a06:98c1:3120::3" } ]

SOA record fundet

{ "mname": "colin.ns.cloudflare.com", "retry": 2400, "rname": "dns.cloudflare.com", "expire": 604800, "serial": 2412117462, "refresh": 10000, "minimum_ttl": 1800 }

HTTP Headers

2 3

Strict-Transport-Security (HSTS) header mangler

Tilføj Strict-Transport-Security: max-age=31536000; includeSubDomains; preload

High

Content-Security-Policy header mangler

Medium

X-Content-Type-Options header mangler

Low

Permissions-Policy header mangler

X-Frame-Options: SAMEORIGIN

Referrer-Policy: same-origin

Rå data (JSON)

{
    "dns": {
        "a": [
            {
                "ip": "188.114.97.3",
                "ttl": 297
            },
            {
                "ip": "188.114.96.3",
                "ttl": 297
            }
        ],
        "mx": [
            {
                "ttl": 300,
                "host": "www551.your-server.de",
                "priority": 10
            }
        ],
        "ns": [
            {
                "ttl": 7199,
                "host": "zariyah.ns.cloudflare.com"
            },
            {
                "ttl": 7199,
                "host": "colin.ns.cloudflare.com"
            }
        ],
        "caa": [],
        "soa": [
            {
                "mname": "colin.ns.cloudflare.com",
                "retry": 2400,
                "rname": "dns.cloudflare.com",
                "expire": 604800,
                "serial": 2412117462,
                "refresh": 10000,
                "minimum_ttl": 1800
            }
        ],
        "txt": [
            {
                "ttl": null,
                "txt": "v=spf1 mx -all"
            }
        ],
        "aaaa": [
            {
                "ttl": 297,
                "ipv6": "2a06:98c1:3121::3"
            },
            {
                "ttl": 297,
                "ipv6": "2a06:98c1:3120::3"
            }
        ],
        "cname": []
    },
    "ssl": {
        "san": [
            "bales.dk",
            "*.bales.dk"
        ],
        "chain": [
            {
                "issuer": "WE1",
                "subject": "bales.dk",
                "valid_to": "2026-10-28T07:19:15+00:00"
            },
            {
                "issuer": "GTS Root R4",
                "subject": "WE1",
                "valid_to": "2029-02-20T14:00:00+00:00"
            },
            {
                "issuer": "GlobalSign Root CA",
                "subject": "GTS Root R4",
                "valid_to": "2028-01-28T00:00:42+00:00"
            }
        ],
        "issuer": {
            "country": "US",
            "common_name": "WE1",
            "organization": "Google Trust Services"
        },
        "subject": {
            "state": null,
            "country": null,
            "locality": null,
            "common_name": "bales.dk",
            "organization": null,
            "organizational_unit": null
        },
        "is_valid": true,
        "valid_to": "2026-10-28T07:19:15+00:00",
        "is_expired": false,
        "public_key": {
            "bits": 256,
            "type": "ECDSA"
        },
        "valid_from": "2026-07-30T06:20:57+00:00",
        "is_wildcard": true,
        "chain_length": 3,
        "serial_number": "D8FA51A9EDA531E8133997C32045F56D",
        "chain_complete": true,
        "days_remaining": 73,
        "is_self_signed": false,
        "negotiated_cipher": "TLS_AES_256_GCM_SHA384",
        "fingerprint_sha256": "27:D6:81:CA:0A:B6:D9:5F:A7:D6:47:13:DF:E0:9A:91:A2:4B:F1:5C:71:51:E5:30:BD:50:45:F2:80:23:52:80",
        "negotiated_protocol": "TLSv1.3",
        "signature_algorithm": "ecdsa-with-SHA256"
    },
    "tls": {
        "cipher": null,
        "version": null,
        "is_secure": false,
        "is_insecure": false,
        "is_outdated": false
    },
    "https": {
        "has_https": true,
        "hsts_enabled": false,
        "hsts_max_age": null,
        "hsts_preload": false,
        "redirects_to_https": false,
        "hsts_include_subdomains": false
    },
    "whois": {
        "dnssec": true,
        "domain": "bales.dk",
        "status": "registered",
        "registrar": null,
        "raw_status": [
            "Active"
        ],
        "expiry_date": "2028-06-30T00:00:00+02:00",
        "nameservers": [
            "colin.ns.cloudflare.com",
            "zariyah.ns.cloudflare.com"
        ],
        "created_date": "2013-06-28T00:00:00+02:00",
        "updated_date": null,
        "registrant_city": null,
        "registrant_name": null,
        "registrant_email": null,
        "registrant_address": null,
        "registrant_country": null,
        "registrant_postalcode": null
    },
    "metrics": {
        "pagerank": 0,
        "fetched_at": "2026-08-15T17:37:05+02:00",
        "wayback_snapshots": 93
    },
    "internal_checks": {
        "open_resolver": {
            "checked_at": "2026-08-15T17:37:01+02:00",
            "nameserver": "zariyah.ns.cloudflare.com",
            "is_open_resolver": false
        }
    }
}