google.com

DNS sikkerhedsrapport

19 bestået
8 advarsler
0 fejlet
C
79/100
Moderat konfiguration - flere forbedringer nødvendige.
Scannet 05. Jan 2026 kl. 01:45

Website preview

Domæneoplysninger

Alder

28 år, 5 måneder

Etableret

Udløber om

930 dage

14. Sep 2028

DNSSEC

Inaktiv

Navneservere

4

servere

Registrar MarkMonitor Inc.
Oprettet 15. Sep 1997
Sidst opdateret 05. Jan 2026
Status Aktiv

Navneservere

NS1.GOOGLE.COM NS2.GOOGLE.COM NS3.GOOGLE.COM NS4.GOOGLE.COM

Domænestatus (EPP)

client delete prohibited client transfer prohibited client update prohibited server delete prohibited server transfer prohibited server update prohibited

Domæne metrics

PageRank

10.0

ud af 10

Archive.org

50,000+

snapshots Se historik →

Metrics hentet for 1 måned siden

Sikkerhedsoversigt

HTTPS

SSL

HSTS

SPF

DMARC

DNSSEC

Sikkerhed

8 3

SPF bruger soft fail (~all) - overvej at bruge -all

Medium

Ingen DKIM records fundet (testet almindelige selectors)

Medium

DNSSEC er ikke aktiveret

Aktiver DNSSEC for at beskytte mod DNS spoofing

Medium

CAA iodef (reporting) er ikke konfigureret

SPF record fundet

v=spf1 include:_spf.google.com ~all

DMARC record fundet

v=DMARC1; p=reject; rua=mailto:mailauth-reports@google.com

DMARC policy er sat til reject (streng)

DMARC aggregate reporting er aktiveret

CAA records fundet

[ { "tag": "issue", "ttl": 86400, "flags": 0, "value": "pki.goog" } ]

Zone transfer (AXFR) er korrekt blokeret

Security.txt fil fundet (RFC 9116)

Contact: https://g.co/vulnz Contact: mailto:security@google.com Expires: 2030-04-01T00:00:00z Policy: https://g.co/vrp

MTA-STS er aktiveret og håndhævet

mode: enforce max_age: 86400 (1 dage) mx: smtp.google.com mx: aspmx.l.google.com mx: *.aspmx.l.google.com

SSL / HTTPS

3 2

HTTP redirecter ikke til HTTPS

Konfigurer redirect fra HTTP til HTTPS

Medium

HSTS er ikke aktiveret

Aktiver HSTS for at forbedre sikkerheden

Medium

HTTPS er aktiveret

SSL-certifikat er gyldigt

SSL-certifikat er gyldigt i 51 dage

DNS Records

7

Kun én MX server - overvej backup MX for redundans

4 nameserver(s) fundet

Multiple nameservers for redundans

1 MX record(s) fundet

[ { "ttl": 278, "host": "smtp.google.com", "priority": 10 } ]

Ingen wildcard DNS konfiguration

1 A record(s) fundet

[ { "ip": "172.217.23.110", "ttl": 84 } ]

IPv6 (AAAA) understøttet

[ { "ttl": 64, "ipv6": "2a00:1450:4001:82b::200e" } ]

SOA record fundet

{ "mname": "ns1.google.com", "retry": 900, "rname": "dns-admin.google.com", "expire": 1800, "serial": 847693555, "refresh": 900, "minimum_ttl": 60 }

HTTP Headers

1 3

Strict-Transport-Security (HSTS) header mangler

Tilføj Strict-Transport-Security: max-age=31536000; includeSubDomains; preload

High

Content-Security-Policy header mangler

Medium

X-Content-Type-Options header mangler

Low

Referrer-Policy header mangler

Permissions-Policy header mangler

X-Frame-Options: SAMEORIGIN

Rå data (JSON)

{
    "dns": {
        "a": [
            {
                "ip": "172.217.23.110",
                "ttl": 84
            }
        ],
        "mx": [
            {
                "ttl": 278,
                "host": "smtp.google.com",
                "priority": 10
            }
        ],
        "ns": [
            {
                "ttl": 7199,
                "host": "ns1.google.com"
            },
            {
                "ttl": 7199,
                "host": "ns4.google.com"
            },
            {
                "ttl": 7199,
                "host": "ns2.google.com"
            },
            {
                "ttl": 7199,
                "host": "ns3.google.com"
            }
        ],
        "caa": [
            {
                "tag": "issue",
                "ttl": 86400,
                "flags": 0,
                "value": "pki.goog"
            }
        ],
        "soa": [
            {
                "mname": "ns1.google.com",
                "retry": 900,
                "rname": "dns-admin.google.com",
                "expire": 1800,
                "serial": 847693555,
                "refresh": 900,
                "minimum_ttl": 60
            }
        ],
        "txt": [
            {
                "ttl": null,
                "txt": "apple-domain-verification=30afIBcvSuDV2PLX"
            },
            {
                "ttl": null,
                "txt": "onetrust-domain-verification=de01ed21f2fa4d8781cbc3ffb89cf4ef"
            },
            {
                "ttl": null,
                "txt": "v=spf1 include:_spf.google.com ~all"
            },
            {
                "ttl": null,
                "txt": "MS=E4A68B9AB2BB9670BCE15412F62916164C0B20BB"
            },
            {
                "ttl": null,
                "txt": "facebook-domain-verification=22rm551cu4k0ab0bxsw536tlds4h95"
            },
            {
                "ttl": null,
                "txt": "globalsign-smime-dv=CDYX+XFHUw2wml6\/Gb8+59BsH31KzUr6c1l2BPvqKX8="
            },
            {
                "ttl": null,
                "txt": "google-site-verification=4ibFUgB-wXLQ_S7vsXVomSTVamuOXBiVAzpR5IZ87D0"
            },
            {
                "ttl": null,
                "txt": "google-site-verification=TV9-DBe4R80X4v0M4U_bd_J9cpOJM0nikft0jAgjmsQ"
            },
            {
                "ttl": null,
                "txt": "docusign=1b0a6754-49b1-4db5-8540-d2c12664b289"
            },
            {
                "ttl": null,
                "txt": "docusign=05958488-4752-4ef2-95eb-aa7ba8a3bd0e"
            },
            {
                "ttl": null,
                "txt": "cisco-ci-domain-verification=47c38bc8c4b74b7233e9053220c1bbe76bcc1cd33c7acf7acd36cd6a5332004b"
            },
            {
                "ttl": null,
                "txt": "google-site-verification=wD8N7i1JTNTkezJ49swvWW48f8_9xveREV4oB-0Hf5o"
            }
        ],
        "aaaa": [
            {
                "ttl": 64,
                "ipv6": "2a00:1450:4001:82b::200e"
            }
        ],
        "cname": []
    },
    "ssl": {
        "san": [
            "*.google.com",
            "*.appengine.google.com",
            "*.bdn.dev",
            "*.origin-test.bdn.dev",
            "*.cloud.google.com",
            "*.crowdsource.google.com",
            "*.datacompute.google.com",
            "*.google.ca",
            "*.google.cl",
            "*.google.co.in",
            "*.google.co.jp",
            "*.google.co.uk",
            "*.google.com.ar",
            "*.google.com.au",
            "*.google.com.br",
            "*.google.com.co",
            "*.google.com.mx",
            "*.google.com.tr",
            "*.google.com.vn",
            "*.google.de",
            "*.google.es",
            "*.google.fr",
            "*.google.hu",
            "*.google.it",
            "*.google.nl",
            "*.google.pl",
            "*.google.pt",
            "*.googleapis.cn",
            "*.googlevideo.com",
            "*.gstatic.cn",
            "*.gstatic-cn.com",
            "googlecnapps.cn",
            "*.googlecnapps.cn",
            "googleapps-cn.com",
            "*.googleapps-cn.com",
            "gkecnapps.cn",
            "*.gkecnapps.cn",
            "googledownloads.cn",
            "*.googledownloads.cn",
            "recaptcha.net.cn",
            "*.recaptcha.net.cn",
            "recaptcha-cn.net",
            "*.recaptcha-cn.net",
            "widevine.cn",
            "*.widevine.cn",
            "ampproject.org.cn",
            "*.ampproject.org.cn",
            "ampproject.net.cn",
            "*.ampproject.net.cn",
            "google-analytics-cn.com",
            "*.google-analytics-cn.com",
            "googleadservices-cn.com",
            "*.googleadservices-cn.com",
            "googlevads-cn.com",
            "*.googlevads-cn.com",
            "googleapis-cn.com",
            "*.googleapis-cn.com",
            "googleoptimize-cn.com",
            "*.googleoptimize-cn.com",
            "doubleclick-cn.net",
            "*.doubleclick-cn.net",
            "*.fls.doubleclick-cn.net",
            "*.g.doubleclick-cn.net",
            "doubleclick.cn",
            "*.doubleclick.cn",
            "*.fls.doubleclick.cn",
            "*.g.doubleclick.cn",
            "dartsearch-cn.net",
            "*.dartsearch-cn.net",
            "googletraveladservices-cn.com",
            "*.googletraveladservices-cn.com",
            "googletagservices-cn.com",
            "*.googletagservices-cn.com",
            "googletagmanager-cn.com",
            "*.googletagmanager-cn.com",
            "googlesyndication-cn.com",
            "*.googlesyndication-cn.com",
            "*.safeframe.googlesyndication-cn.com",
            "app-measurement-cn.com",
            "*.app-measurement-cn.com",
            "gvt1-cn.com",
            "*.gvt1-cn.com",
            "gvt2-cn.com",
            "*.gvt2-cn.com",
            "2mdn-cn.net",
            "*.2mdn-cn.net",
            "googleflights-cn.net",
            "*.googleflights-cn.net",
            "admob-cn.com",
            "*.admob-cn.com",
            "*.gemini.cloud.google.com",
            "googlesandbox-cn.com",
            "*.googlesandbox-cn.com",
            "*.safenup.googlesandbox-cn.com",
            "*.gstatic.com",
            "*.metric.gstatic.com",
            "*.gvt1.com",
            "*.gcpcdn.gvt1.com",
            "*.gvt2.com",
            "*.gcp.gvt2.com",
            "*.url.google.com",
            "*.youtube-nocookie.com",
            "*.ytimg.com",
            "ai.android",
            "android.com",
            "*.android.com",
            "*.flash.android.com",
            "g.cn",
            "*.g.cn",
            "g.co",
            "*.g.co",
            "goo.gl",
            "www.goo.gl",
            "google-analytics.com",
            "*.google-analytics.com",
            "google.com",
            "googlecommerce.com",
            "*.googlecommerce.com",
            "ggpht.cn",
            "*.ggpht.cn",
            "urchin.com",
            "*.urchin.com",
            "youtu.be",
            "youtube.com",
            "*.youtube.com",
            "music.youtube.com",
            "*.music.youtube.com",
            "youtubeeducation.com",
            "*.youtubeeducation.com",
            "youtubekids.com",
            "*.youtubekids.com",
            "yt.be",
            "*.yt.be",
            "android.clients.google.com",
            "*.android.google.cn",
            "*.chrome.google.cn",
            "*.developers.google.cn",
            "*.aistudio.google.com"
        ],
        "chain": [
            {
                "issuer": "WE2",
                "subject": "*.google.com",
                "valid_to": "2026-02-25T15:50:08+00:00"
            },
            {
                "issuer": "GTS Root R4",
                "subject": "WE2",
                "valid_to": "2029-02-20T14:00:00+00:00"
            },
            {
                "issuer": "GlobalSign Root CA",
                "subject": "GTS Root R4",
                "valid_to": "2028-01-28T00:00:42+00:00"
            }
        ],
        "issuer": {
            "country": "US",
            "common_name": "WE2",
            "organization": "Google Trust Services"
        },
        "subject": {
            "state": null,
            "country": null,
            "locality": null,
            "common_name": "*.google.com",
            "organization": null,
            "organizational_unit": null
        },
        "is_valid": true,
        "valid_to": "2026-02-25T15:50:08+00:00",
        "is_expired": false,
        "valid_from": "2025-12-03T15:50:09+00:00",
        "chain_length": 3,
        "serial_number": "B369230E77AC3BDD0AE77B6F4785EEFB",
        "days_remaining": 51,
        "is_self_signed": false,
        "signature_algorithm": "ecdsa-with-SHA256"
    },
    "tls": {
        "cipher": null,
        "version": null,
        "is_secure": false,
        "is_insecure": false,
        "is_outdated": false
    },
    "https": {
        "has_https": true,
        "hsts_enabled": false,
        "hsts_max_age": null,
        "hsts_preload": false,
        "redirects_to_https": false,
        "hsts_include_subdomains": false
    },
    "whois": {
        "dnssec": false,
        "domain": "GOOGLE.COM",
        "status": "registered",
        "registrar": "MarkMonitor Inc.",
        "raw_status": [
            "client delete prohibited",
            "client transfer prohibited",
            "client update prohibited",
            "server delete prohibited",
            "server transfer prohibited",
            "server update prohibited"
        ],
        "expiry_date": "2028-09-14T04:00:00+00:00",
        "nameservers": [
            "NS1.GOOGLE.COM",
            "NS2.GOOGLE.COM",
            "NS3.GOOGLE.COM",
            "NS4.GOOGLE.COM"
        ],
        "created_date": "1997-09-15T04:00:00+00:00",
        "updated_date": "2026-01-05T00:45:15+00:00"
    },
    "metrics": {
        "pagerank": 10,
        "fetched_at": "2026-01-05T01:45:56+01:00",
        "wayback_snapshots": 50000
    },
    "internal_checks": {
        "open_resolver": {
            "checked_at": "2026-01-05T01:45:35+01:00",
            "nameserver": "ns1.google.com",
            "is_open_resolver": true
        }
    }
}