dandomain.dk

DNS sikkerhedsrapport

23 bestået
3 advarsler
0 fejlet
A
94/100
Fremragende konfiguration med minimale forbedringer mulige.
Scannet 06. Aug 2026 kl. 12:38

Website preview

Domæneoplysninger

Alder

27 år, 4 måneder

Etableret

Udløber om

235 dage

31. Mar 2027

DNSSEC

Aktiv

Navneservere

2

servere

Registrar DANDOMAIN A/S
Oprettet 19. Mar 1999
Status Aktiv

Registrant

Navn DANDOMAIN A/S
Adresse Højvangen 4
By 8660 Skanderborg
Land DK
E-mail hostmaster@dandomain.dk

Navneservere

ns.dandomain.dk ns2.dandomain.dk

Domænestatus (EPP)

Active

Domæne metrics

PageRank

4.3

ud af 10

Archive.org

50,000+

snapshots Se historik →

Metrics hentet for 1 dag siden

Sikkerhedsoversigt

HTTPS

SSL

HSTS

SPF

DMARC

DNSSEC

Sikkerhed

7 3

SPF nærmer sig 10 DNS lookup grænsen (9/10)

Medium

DMARC policy er sat til none - overvej quarantine eller reject

Medium

Ingen CAA records fundet

Tilføj CAA records for at kontrollere hvilke CAs der kan udstede certifikater

Low

Ingen security.txt fil (RFC 9116)

Overvej at tilføje /.well-known/security.txt med kontaktinfo til sikkerhedsrapportering

MTA-STS ikke konfigureret

MTA-STS sikrer krypteret email-transport. Relevant for NIS2 compliance.

SPF record fundet

v=spf1 include:_netblocks.zitcom.dk include:_netblocks2.zitcom.dk include:spf.protection.outlook.com include:servers.mcsv.net include:_aspf.spf05.hubspotemail.net include:_spf.eu.mailgun.org include:spf.key-systems.net include:spf.adversus.io include:spf-eu.emailsignatures365.com ip4:94.143.8.0/24 ip4:212.123.41.224/28 -all

SPF bruger streng policy (-all)

DMARC record fundet

v=DMARC1; p=none; rua=mailto:dmarc@zitcom.dk,mailto:a8441153dffe465@rep.dmarcanalyzer.com,mailto:re+igz1kyoydt5@dmarc.postmarkapp.com,mailto:teamblue@rua.netcraft.com;ruf=mailto:dmarc.forensic@zitcom.dk,mailto:a8441153dffe465@for.dmarcanalyzer.com,mailto:teamblue@ruf.netcraft.com;fo=1;

DMARC aggregate reporting er aktiveret

DKIM record fundet

DNSSEC er aktiveret

Zone transfer (AXFR) er korrekt blokeret

SSL / HTTPS

5

HTTPS er aktiveret

HTTP redirecter til HTTPS

HSTS er aktiveret

SSL-certifikat er gyldigt

SSL-certifikat er gyldigt i 160 dage

DNS Records

6

Kun én MX server - overvej backup MX for redundans

Ingen IPv6 (AAAA) records

2 nameserver(s) fundet

Multiple nameservers for redundans

1 MX record(s) fundet

[ { "ttl": 3600, "host": "mx.spamfilter.io", "priority": 0 } ]

Ingen wildcard DNS konfiguration

1 A record(s) fundet

[ { "ip": "46.36.209.7", "ttl": 598 } ]

SOA record fundet

{ "mname": "ns.dandomain.dk", "retry": 3600, "rname": "hostmaster.dandomain.dk", "expire": 1209600, "serial": 2026080401, "refresh": 14400, "minimum_ttl": 300 }

HTTP Headers

5

Permissions-Policy header mangler

X-Frame-Options: SAMEORIGIN

Strict-Transport-Security: max-age=31,536,000

X-Content-Type-Options: nosniff

Content-Security-Policy er konfigureret

Referrer-Policy: origin-when-cross-origin

Rå data (JSON)

{
    "dns": {
        "a": [
            {
                "ip": "46.36.209.7",
                "ttl": 598
            }
        ],
        "mx": [
            {
                "ttl": 3600,
                "host": "mx.spamfilter.io",
                "priority": 0
            }
        ],
        "ns": [
            {
                "ttl": 2269,
                "host": "ns2.dandomain.dk"
            },
            {
                "ttl": 2269,
                "host": "ns.dandomain.dk"
            }
        ],
        "caa": [],
        "soa": [
            {
                "mname": "ns.dandomain.dk",
                "retry": 3600,
                "rname": "hostmaster.dandomain.dk",
                "expire": 1209600,
                "serial": 2026080401,
                "refresh": 14400,
                "minimum_ttl": 300
            }
        ],
        "txt": [
            {
                "ttl": null,
                "txt": "v=spf1 include:_netblocks.zitcom.dk include:_netblocks2.zitcom.dk include:spf.protection.outlook.com include:servers.mcsv.net include:_aspf.spf05.hubspotemail.net include:_spf.eu.mailgun.org include:spf.key-systems.net include:spf.adversus.io include:spf-eu.emailsignatures365.com ip4:94.143.8.0\/24 ip4:212.123.41.224\/28 -all"
            },
            {
                "ttl": null,
                "txt": "1password-site-verification=DP7R3JCD6BFXBJ367C2Z56DDKI"
            },
            {
                "ttl": null,
                "txt": "MS=ms30698321"
            },
            {
                "ttl": null,
                "txt": "spycloud-domain-verification=2e989864-0efd-41cf-953d-a443a6cc1528"
            },
            {
                "ttl": null,
                "txt": "pinterest-site-verification=1d5eb51fc758b93a8381679b0a99457a"
            },
            {
                "ttl": null,
                "txt": "google-site-verification=WzotPVkzogOMolvuQk4igTERg9q5Tw55jHz9whG_FWQ"
            },
            {
                "ttl": null,
                "txt": "facebook-domain-verification=c7rmudsiusmjnlh7lx4c1nuawdhnxu"
            }
        ],
        "aaaa": [],
        "cname": []
    },
    "ssl": {
        "san": [
            "*.dandomain.dk",
            "dandomain.dk"
        ],
        "chain": [
            {
                "issuer": "Sectigo Public Server Authentication CA DV R36",
                "subject": "*.dandomain.dk",
                "valid_to": "2027-01-13T23:59:59+00:00"
            },
            {
                "issuer": "Sectigo Public Server Authentication Root R46",
                "subject": "Sectigo Public Server Authentication CA DV R36",
                "valid_to": "2036-03-21T23:59:59+00:00"
            },
            {
                "issuer": "USERTrust RSA Certification Authority",
                "subject": "Sectigo Public Server Authentication Root R46",
                "valid_to": "2038-01-18T23:59:59+00:00"
            },
            {
                "issuer": "USERTrust RSA Certification Authority",
                "subject": "USERTrust RSA Certification Authority",
                "valid_to": "2038-01-18T23:59:59+00:00"
            }
        ],
        "issuer": {
            "country": "GB",
            "common_name": "Sectigo Public Server Authentication CA DV R36",
            "organization": "Sectigo Limited"
        },
        "subject": {
            "state": null,
            "country": null,
            "locality": null,
            "common_name": "*.dandomain.dk",
            "organization": null,
            "organizational_unit": null
        },
        "is_valid": true,
        "valid_to": "2027-01-13T23:59:59+00:00",
        "is_expired": false,
        "public_key": {
            "bits": 2048,
            "type": "RSA"
        },
        "valid_from": "2026-01-06T00:00:00+00:00",
        "is_wildcard": true,
        "chain_length": 4,
        "serial_number": "0E60615A5BE20F80F8DC141F9CE55066",
        "chain_complete": true,
        "days_remaining": 160,
        "is_self_signed": false,
        "negotiated_cipher": "TLS_AES_256_GCM_SHA384",
        "fingerprint_sha256": "62:04:AD:9A:72:10:1D:8E:5A:96:28:BF:12:C5:A7:36:BD:A3:C1:EF:C0:8D:F8:E6:D3:EF:A3:BD:AC:EB:93:71",
        "negotiated_protocol": "TLSv1.3",
        "signature_algorithm": "RSA-SHA256"
    },
    "tls": {
        "cipher": null,
        "version": null,
        "is_secure": false,
        "is_insecure": false,
        "is_outdated": false
    },
    "https": {
        "has_https": true,
        "hsts_enabled": true,
        "hsts_max_age": 31536000,
        "hsts_preload": false,
        "redirects_to_https": true,
        "hsts_include_subdomains": false
    },
    "whois": {
        "dnssec": true,
        "domain": "dandomain.dk",
        "status": "registered",
        "registrar": "DANDOMAIN A\/S",
        "raw_status": [
            "Active"
        ],
        "expiry_date": "2027-03-31T00:00:00+02:00",
        "nameservers": [
            "ns.dandomain.dk",
            "ns2.dandomain.dk"
        ],
        "created_date": "1999-03-19T00:00:00+01:00",
        "updated_date": null,
        "registrant_city": "Skanderborg",
        "registrant_name": "DANDOMAIN A\/S",
        "registrant_email": "hostmaster@dandomain.dk",
        "registrant_address": "Højvangen 4",
        "registrant_country": "DK",
        "registrant_postalcode": "8660"
    },
    "metrics": {
        "pagerank": 4.33,
        "fetched_at": "2026-08-06T12:38:40+02:00",
        "wayback_snapshots": 50000
    },
    "internal_checks": {
        "open_resolver": {
            "checked_at": "2026-08-06T12:38:31+02:00",
            "nameserver": "ns2.dandomain.dk",
            "is_open_resolver": true
        }
    }
}