danshield.dk

DNS sikkerhedsrapport

15 bestået
10 advarsler
0 fejlet
C
76/100
Moderat konfiguration - flere forbedringer nødvendige.
Scannet 04. May 2026 kl. 19:22

Domæneoplysninger

Alder

2 måneder

Ny

Udløber om

297 dage

24. Mar 2027

DNSSEC

Inaktiv

Navneservere

2

servere

Registrar Realtime Register B.V.
Oprettet 25. Mar 2026
Status Aktiv

Registrant

Navn Philippe Helboe Trolle
Adresse Meløse
By 3320 Skævinge
Land DK

Navneservere

kay.ns.cloudflare.com neil.ns.cloudflare.com

Domænestatus (EPP)

Active

Domæne metrics

PageRank

0

Ingen data

Archive.org

0

Ingen historik

Metrics hentet for 3 uger siden

Sikkerhedsoversigt

HTTPS

SSL

HSTS

SPF

DMARC

DNSSEC

Sikkerhed

5 4

SPF bruger soft fail (~all) - overvej at bruge -all

Medium

Ingen DKIM records fundet (testet almindelige selectors)

Medium

DNSSEC er ikke aktiveret

Aktiver DNSSEC for at beskytte mod DNS spoofing

Medium

Ingen CAA records fundet

Tilføj CAA records for at kontrollere hvilke CAs der kan udstede certifikater

Low

Ingen security.txt fil (RFC 9116)

Overvej at tilføje /.well-known/security.txt med kontaktinfo til sikkerhedsrapportering

MTA-STS ikke konfigureret

MTA-STS sikrer krypteret email-transport. Relevant for NIS2 compliance.

SPF record fundet

v=spf1 a mx include:mx1.atlos.email ~all

DMARC record fundet

v=DMARC1; p=quarantine; rua=mailto:dmarc@danshield.dk; fo=1

DMARC policy er sat til quarantine

DMARC aggregate reporting er aktiveret

Zone transfer (AXFR) er korrekt blokeret

SSL / HTTPS

3 2

HTTP redirecter ikke til HTTPS

Konfigurer redirect fra HTTP til HTTPS

Medium

HSTS er ikke aktiveret

Aktiver HSTS for at forbedre sikkerheden

Medium

HTTPS er aktiveret

SSL-certifikat er gyldigt

SSL-certifikat er gyldigt i 50 dage

DNS Records

7

Kun én MX server - overvej backup MX for redundans

2 nameserver(s) fundet

Multiple nameservers for redundans

1 MX record(s) fundet

[ { "ttl": 3600, "host": "mx1.atlos.email", "priority": 10 } ]

Ingen wildcard DNS konfiguration

2 A record(s) fundet

[ { "ip": "104.21.88.73", "ttl": 298 }, { "ip": "172.67.174.6", "ttl": 298 } ]

IPv6 (AAAA) understøttet

[ { "ttl": 298, "ipv6": "2606:4700:3032::6815:5849" }, { "ttl": 298, "ipv6": "2606:4700:3035::ac43:ae06" } ]

SOA record fundet

{ "mname": "kay.ns.cloudflare.com", "retry": 2400, "rname": "dns.cloudflare.com", "expire": 604800, "serial": 2401419461, "refresh": 10000, "minimum_ttl": 1800 }

HTTP Headers

4

Strict-Transport-Security (HSTS) header mangler

Tilføj Strict-Transport-Security: max-age=31536000; includeSubDomains; preload

High

X-Frame-Options header mangler

Tilføj X-Frame-Options: DENY

Medium

Content-Security-Policy header mangler

Medium

X-Content-Type-Options header mangler

Low

Referrer-Policy header mangler

Permissions-Policy header mangler

Rå data (JSON)

{
    "dns": {
        "a": [
            {
                "ip": "104.21.88.73",
                "ttl": 298
            },
            {
                "ip": "172.67.174.6",
                "ttl": 298
            }
        ],
        "mx": [
            {
                "ttl": 3600,
                "host": "mx1.atlos.email",
                "priority": 10
            }
        ],
        "ns": [
            {
                "ttl": 7199,
                "host": "kay.ns.cloudflare.com"
            },
            {
                "ttl": 7199,
                "host": "neil.ns.cloudflare.com"
            }
        ],
        "caa": [],
        "soa": [
            {
                "mname": "kay.ns.cloudflare.com",
                "retry": 2400,
                "rname": "dns.cloudflare.com",
                "expire": 604800,
                "serial": 2401419461,
                "refresh": 10000,
                "minimum_ttl": 1800
            }
        ],
        "txt": [
            {
                "ttl": null,
                "txt": "google-site-verification=IfR2CcW3mIAFz7aN8kidF8YfeOusyy186J03upHhiuQ"
            },
            {
                "ttl": null,
                "txt": "v=spf1 a mx include:mx1.atlos.email ~all"
            }
        ],
        "aaaa": [
            {
                "ttl": 298,
                "ipv6": "2606:4700:3032::6815:5849"
            },
            {
                "ttl": 298,
                "ipv6": "2606:4700:3035::ac43:ae06"
            }
        ],
        "cname": []
    },
    "ssl": {
        "san": [
            "*.danshield.dk",
            "danshield.dk"
        ],
        "chain": [
            {
                "issuer": "E7",
                "subject": "danshield.dk",
                "valid_to": "2026-06-24T06:04:29+00:00"
            },
            {
                "issuer": "ISRG Root X1",
                "subject": "E7",
                "valid_to": "2027-03-12T23:59:59+00:00"
            }
        ],
        "issuer": {
            "country": "US",
            "common_name": "E7",
            "organization": "Let's Encrypt"
        },
        "subject": {
            "state": null,
            "country": null,
            "locality": null,
            "common_name": "danshield.dk",
            "organization": null,
            "organizational_unit": null
        },
        "is_valid": true,
        "valid_to": "2026-06-24T06:04:29+00:00",
        "is_expired": false,
        "valid_from": "2026-03-26T06:04:30+00:00",
        "chain_length": 2,
        "serial_number": "0597F2CCED356FBE28AC14B0ABB472340847",
        "days_remaining": 50,
        "is_self_signed": false,
        "signature_algorithm": "ecdsa-with-SHA384"
    },
    "tls": {
        "cipher": null,
        "version": null,
        "is_secure": false,
        "is_insecure": false,
        "is_outdated": false
    },
    "https": {
        "has_https": true,
        "hsts_enabled": false,
        "hsts_max_age": null,
        "hsts_preload": false,
        "redirects_to_https": false,
        "hsts_include_subdomains": false
    },
    "whois": {
        "dnssec": false,
        "domain": "danshield.dk",
        "status": "registered",
        "registrar": "Realtime Register B.V.",
        "raw_status": [
            "Active"
        ],
        "expiry_date": "2027-03-24T00:00:00+01:00",
        "nameservers": [
            "kay.ns.cloudflare.com",
            "neil.ns.cloudflare.com"
        ],
        "created_date": "2026-03-25T00:00:00+01:00",
        "updated_date": null,
        "registrant_city": "Skævinge",
        "registrant_name": "Philippe Helboe Trolle",
        "registrant_email": null,
        "registrant_address": "Meløse",
        "registrant_country": "DK",
        "registrant_postalcode": "3320"
    },
    "metrics": {
        "pagerank": 0,
        "fetched_at": "2026-05-04T21:23:32+02:00",
        "wayback_snapshots": null
    },
    "internal_checks": {
        "open_resolver": {
            "checked_at": "2026-05-04T21:22:11+02:00",
            "nameserver": "kay.ns.cloudflare.com",
            "is_open_resolver": false
        }
    }
}