karstoft.dk

DNS sikkerhedsrapport

11 bestået
8 advarsler
2 fejlet
D
61/100
Svag konfiguration - væsentlige problemer fundet.
Scannet 16. Jan 2026 kl. 12:30

Website preview

Domæneoplysninger

Alder

21 år, 4 måneder

Etableret

Udløber om

246 dage

31. Oct 2026

DNSSEC

Aktiv

Navneservere

2

servere

Oprettet 05. Oct 2004
Status Aktiv

Registrant

Navn Sandagergård
Adresse Eltang
By 6000 Kolding
Land DK

Navneservere

ns01.one.com ns02.one.com

Domænestatus (EPP)

Active

Domæne metrics

PageRank

0

Ingen data

Archive.org

136

snapshots Se historik →

Metrics hentet for 1 måned siden

Sikkerhedsoversigt

HTTPS

SSL

HSTS

SPF

DMARC

DNSSEC

Sikkerhed

2 2 2

Ingen SPF record fundet

Tilføj en SPF record for at forhindre email spoofing

High

Ingen DMARC record fundet

Tilføj en DMARC record for at beskytte mod email spoofing

High

Ingen DKIM records fundet (testet almindelige selectors)

Medium

Ingen CAA records fundet

Tilføj CAA records for at kontrollere hvilke CAs der kan udstede certifikater

Low

Ingen security.txt fil (RFC 9116)

Overvej at tilføje /.well-known/security.txt med kontaktinfo til sikkerhedsrapportering

MTA-STS ikke konfigureret

MTA-STS sikrer krypteret email-transport. Relevant for NIS2 compliance.

DNSSEC er aktiveret

Zone transfer (AXFR) er korrekt blokeret

SSL / HTTPS

3 2

HTTP redirecter ikke til HTTPS

Konfigurer redirect fra HTTP til HTTPS

Medium

HSTS er ikke aktiveret

Aktiver HSTS for at forbedre sikkerheden

Medium

HTTPS er aktiveret

SSL-certifikat er gyldigt

SSL-certifikat er gyldigt i 75 dage

DNS Records

6

Ingen IPv6 (AAAA) records

2 nameserver(s) fundet

Multiple nameservers for redundans

4 MX record(s) fundet

[ { "ttl": 10800, "host": "mx3.pub.mailpod12-cph3.one.com", "priority": 10 }, { "ttl": 10800, "host": "mx2.pub.mailpod12-cph3.one.com", "priority": 10 }, { "ttl": 10800, "host": "mx1.pub.mailpod12-cph3.one.com", "priority": 10 }, { "ttl": 10800, "host": "mx4.pub.mailpod12-cph3.one.com", "priority": 10 } ]

Ingen wildcard DNS konfiguration

1 A record(s) fundet

[ { "ip": "46.30.211.38", "ttl": 3597 } ]

SOA record fundet

{ "mname": "ns01.one.com", "retry": 3600, "rname": "hostmaster.one.com", "expire": 1209600, "serial": 2026011606, "refresh": 14400, "minimum_ttl": 600 }

HTTP Headers

4

Strict-Transport-Security (HSTS) header mangler

Tilføj Strict-Transport-Security: max-age=31536000; includeSubDomains; preload

High

X-Frame-Options header mangler

Tilføj X-Frame-Options: DENY

Medium

Content-Security-Policy header mangler

Medium

X-Content-Type-Options header mangler

Low

Referrer-Policy header mangler

Permissions-Policy header mangler

Rå data (JSON)

{
    "dns": {
        "a": [
            {
                "ip": "46.30.211.38",
                "ttl": 3597
            }
        ],
        "mx": [
            {
                "ttl": 10800,
                "host": "mx3.pub.mailpod12-cph3.one.com",
                "priority": 10
            },
            {
                "ttl": 10800,
                "host": "mx2.pub.mailpod12-cph3.one.com",
                "priority": 10
            },
            {
                "ttl": 10800,
                "host": "mx1.pub.mailpod12-cph3.one.com",
                "priority": 10
            },
            {
                "ttl": 10800,
                "host": "mx4.pub.mailpod12-cph3.one.com",
                "priority": 10
            }
        ],
        "ns": [
            {
                "ttl": 7199,
                "host": "ns02.one.com"
            },
            {
                "ttl": 7199,
                "host": "ns01.one.com"
            }
        ],
        "caa": [],
        "soa": [
            {
                "mname": "ns01.one.com",
                "retry": 3600,
                "rname": "hostmaster.one.com",
                "expire": 1209600,
                "serial": 2026011606,
                "refresh": 14400,
                "minimum_ttl": 600
            }
        ],
        "txt": [],
        "aaaa": [],
        "cname": []
    },
    "ssl": {
        "san": [
            "*.one.com",
            "one.com"
        ],
        "chain": [
            {
                "issuer": "R12",
                "subject": "*.one.com",
                "valid_to": "2026-04-02T10:41:52+00:00"
            },
            {
                "issuer": "ISRG Root X1",
                "subject": "R12",
                "valid_to": "2027-03-12T23:59:59+00:00"
            }
        ],
        "issuer": {
            "country": "US",
            "common_name": "R12",
            "organization": "Let's Encrypt"
        },
        "subject": {
            "state": null,
            "country": null,
            "locality": null,
            "common_name": "*.one.com",
            "organization": null,
            "organizational_unit": null
        },
        "is_valid": true,
        "valid_to": "2026-04-02T10:41:52+00:00",
        "is_expired": false,
        "valid_from": "2026-01-02T10:41:53+00:00",
        "chain_length": 2,
        "serial_number": "05F74405D852CE1F681977CD20BD46368F3E",
        "days_remaining": 75,
        "is_self_signed": false,
        "signature_algorithm": "RSA-SHA256"
    },
    "tls": {
        "cipher": null,
        "version": null,
        "is_secure": false,
        "is_insecure": false,
        "is_outdated": false
    },
    "https": {
        "has_https": true,
        "hsts_enabled": false,
        "hsts_max_age": null,
        "hsts_preload": false,
        "redirects_to_https": false,
        "hsts_include_subdomains": false
    },
    "whois": {
        "dnssec": true,
        "domain": "karstoft.dk",
        "status": "registered",
        "registrar": null,
        "raw_status": [
            "Active"
        ],
        "expiry_date": "2026-10-31T00:00:00+01:00",
        "nameservers": [
            "ns01.one.com",
            "ns02.one.com"
        ],
        "created_date": "2004-10-05T00:00:00+02:00",
        "updated_date": null,
        "registrant_city": "Kolding",
        "registrant_name": "Sandagergård",
        "registrant_email": null,
        "registrant_address": "Eltang",
        "registrant_country": "DK",
        "registrant_postalcode": "6000"
    },
    "metrics": {
        "pagerank": 0,
        "fetched_at": "2026-01-16T12:30:35+01:00",
        "wayback_snapshots": 136
    },
    "internal_checks": {
        "open_resolver": {
            "checked_at": "2026-01-16T12:30:22+01:00",
            "nameserver": "ns02.one.com",
            "is_open_resolver": false
        }
    }
}