hjemit.dk

DNS sikkerhedsrapport

19 bestået
6 advarsler
0 fejlet
B+
88/100
God konfiguration med få mangler.
Scannet 29. Aug 2026 kl. 11:37

Website preview

Domæneoplysninger

Alder

6 år, 2 måneder

Moden

Udløber om

304 dage

30. Jun 2027

DNSSEC

Aktiv

Navneservere

2

servere

Registrar ONE.COM A/S
Oprettet 26. Jun 2020
Status Aktiv

Registrant

Navn Hjemit.dk
Adresse Teglholmsgade 20, 5. tv.
By 2450 København SV
Land DK

Navneservere

ns01.one.com ns02.one.com

Domænestatus (EPP)

Active

Domæne metrics

PageRank

0

Ingen data

Archive.org

51

snapshots Se historik →

Metrics hentet for 9 timer siden

Sikkerhedsoversigt

HTTPS

SSL

HSTS

SPF

DMARC

DNSSEC

Sikkerhed

6 3

SPF bruger soft fail (~all) - overvej at bruge -all

Medium

Ingen DKIM records fundet (testet almindelige selectors)

Medium

Ingen CAA records fundet

Tilføj CAA records for at kontrollere hvilke CAs der kan udstede certifikater

Low

Ingen security.txt fil (RFC 9116)

Overvej at tilføje /.well-known/security.txt med kontaktinfo til sikkerhedsrapportering

MTA-STS ikke konfigureret

MTA-STS sikrer krypteret email-transport. Relevant for NIS2 compliance.

SPF record fundet

v=spf1 include:_custspf.one.com ~all

DMARC record fundet

v=DMARC1; p=quarantine; pct=100; rua=mailto:re+q70ylp9qsmb@dmarc.postmarkapp.com; ruf=mailto:re+q70ylp9qsmb@dmarc.postmarkapp.com; aspf=s; adkim=s; sp=quarantine;

DMARC policy er sat til quarantine

DMARC aggregate reporting er aktiveret

DNSSEC er aktiveret

Zone transfer (AXFR) er korrekt blokeret

SSL / HTTPS

5

HTTPS er aktiveret

HTTP redirecter til HTTPS

HSTS er aktiveret

SSL-certifikat er gyldigt

SSL-certifikat er gyldigt i 88 dage

DNS Records

7

2 nameserver(s) fundet

Multiple nameservers for redundans

4 MX record(s) fundet

[ { "ttl": 10800, "host": "mx4.pub.mailpod9-cph3.one.com", "priority": 10 }, { "ttl": 10800, "host": "mx2.pub.mailpod9-cph3.one.com", "priority": 10 }, { "ttl": 10800, "host": "mx3.pub.mailpod9-cph3.one.com", "priority": 10 }, { "ttl": 10800, "host": "mx1.pub.mailpod9-cph3.one.com", "priority": 10 } ]

Ingen wildcard DNS konfiguration

1 A record(s) fundet

[ { "ip": "77.111.240.129", "ttl": 3597 } ]

IPv6 (AAAA) understøttet

[ { "ttl": 3597, "ipv6": "2a02:2350:5:102:9:bb91:fa7d:a6aa" } ]

SOA record fundet

{ "mname": "ns01.one.com", "retry": 3600, "rname": "hostmaster.one.com", "expire": 1209600, "serial": 2026082804, "refresh": 14400, "minimum_ttl": 600 }

HTTP Headers

1 3

X-Frame-Options header mangler

Tilføj X-Frame-Options: DENY

Medium

Content-Security-Policy header mangler

Medium

X-Content-Type-Options header mangler

Low

Referrer-Policy header mangler

Permissions-Policy header mangler

Strict-Transport-Security: preload, includeSubDomains, max-age=31,536,000

Rå data (JSON)

{
    "dns": {
        "a": [
            {
                "ip": "77.111.240.129",
                "ttl": 3597
            }
        ],
        "mx": [
            {
                "ttl": 10800,
                "host": "mx4.pub.mailpod9-cph3.one.com",
                "priority": 10
            },
            {
                "ttl": 10800,
                "host": "mx2.pub.mailpod9-cph3.one.com",
                "priority": 10
            },
            {
                "ttl": 10800,
                "host": "mx3.pub.mailpod9-cph3.one.com",
                "priority": 10
            },
            {
                "ttl": 10800,
                "host": "mx1.pub.mailpod9-cph3.one.com",
                "priority": 10
            }
        ],
        "ns": [
            {
                "ttl": 7199,
                "host": "ns02.one.com"
            },
            {
                "ttl": 7199,
                "host": "ns01.one.com"
            }
        ],
        "caa": [],
        "soa": [
            {
                "mname": "ns01.one.com",
                "retry": 3600,
                "rname": "hostmaster.one.com",
                "expire": 1209600,
                "serial": 2026082804,
                "refresh": 14400,
                "minimum_ttl": 600
            }
        ],
        "txt": [
            {
                "ttl": null,
                "txt": "google-site-verification=ouVRLv0k14fz7IcBuXDix2BUzW-sYgdwRkSn3ZjN7iw"
            },
            {
                "ttl": null,
                "txt": "v=spf1 include:_custspf.one.com ~all"
            }
        ],
        "aaaa": [
            {
                "ttl": 3597,
                "ipv6": "2a02:2350:5:102:9:bb91:fa7d:a6aa"
            }
        ],
        "cname": []
    },
    "ssl": {
        "san": [
            "*.hjemit.dk",
            "hjemit.dk"
        ],
        "chain": [
            {
                "issuer": "YE1",
                "subject": "*.hjemit.dk",
                "valid_to": "2026-11-26T08:14:36+00:00"
            },
            {
                "issuer": "Root YE",
                "subject": "YE1",
                "valid_to": "2028-09-02T23:59:59+00:00"
            },
            {
                "issuer": "ISRG Root X2",
                "subject": "Root YE",
                "valid_to": "2032-09-02T23:59:59+00:00"
            },
            {
                "issuer": "ISRG Root X1",
                "subject": "ISRG Root X2",
                "valid_to": "2032-09-02T23:59:59+00:00"
            },
            {
                "issuer": "ISRG Root X1",
                "subject": "ISRG Root X1",
                "valid_to": "2035-06-04T11:04:38+00:00"
            }
        ],
        "issuer": {
            "country": "US",
            "common_name": "YE1",
            "organization": "Let's Encrypt"
        },
        "subject": {
            "state": null,
            "country": null,
            "locality": null,
            "common_name": "*.hjemit.dk",
            "organization": null,
            "organizational_unit": null
        },
        "is_valid": true,
        "valid_to": "2026-11-26T08:14:36+00:00",
        "is_expired": false,
        "public_key": {
            "bits": 256,
            "type": "ECDSA"
        },
        "valid_from": "2026-08-28T08:14:37+00:00",
        "is_wildcard": true,
        "chain_length": 5,
        "serial_number": "05BF66824B2CBBF2515658F91A0D7D40E881",
        "chain_complete": true,
        "days_remaining": 88,
        "is_self_signed": false,
        "negotiated_cipher": "TLS_AES_256_GCM_SHA384",
        "fingerprint_sha256": "88:96:BC:2C:72:21:49:0E:9C:09:CC:ED:8B:1D:88:D2:E5:F3:53:B2:E7:80:D0:A1:AD:AF:46:4F:D4:C0:45:27",
        "negotiated_protocol": "TLSv1.3",
        "signature_algorithm": "ecdsa-with-SHA384"
    },
    "tls": {
        "cipher": null,
        "version": null,
        "is_secure": false,
        "is_insecure": false,
        "is_outdated": false
    },
    "https": {
        "has_https": true,
        "hsts_enabled": true,
        "hsts_max_age": 31536000,
        "hsts_preload": true,
        "redirects_to_https": true,
        "hsts_include_subdomains": true
    },
    "whois": {
        "dnssec": true,
        "domain": "hjemit.dk",
        "status": "registered",
        "registrar": "ONE.COM A\/S",
        "raw_status": [
            "Active"
        ],
        "expiry_date": "2027-06-30T00:00:00+02:00",
        "nameservers": [
            "ns01.one.com",
            "ns02.one.com"
        ],
        "created_date": "2020-06-26T00:00:00+02:00",
        "updated_date": null,
        "registrant_city": "København SV",
        "registrant_name": "Hjemit.dk",
        "registrant_email": null,
        "registrant_address": "Teglholmsgade 20, 5. tv.",
        "registrant_country": "DK",
        "registrant_postalcode": "2450"
    },
    "metrics": {
        "pagerank": 0,
        "fetched_at": "2026-08-29T11:37:47+02:00",
        "wayback_snapshots": 51
    },
    "internal_checks": {
        "open_resolver": {
            "checked_at": "2026-08-29T11:37:42+02:00",
            "nameserver": "ns02.one.com",
            "is_open_resolver": false
        }
    }
}