koege.dk

DNS sikkerhedsrapport

25 bestået
2 advarsler
0 fejlet
A+
97/100
Fremragende! Din konfiguration er optimal.
Scannet 23. Jan 2026 kl. 14:02

Website preview

Domæneoplysninger

Alder

29 år

Etableret

Udløber om

32 dage

31. Mar 2026

DNSSEC

Aktiv

Navneservere

2

servere

Oprettet 31. Jan 1997
Status Aktiv

Registrant

Navn Køge Kommune
Adresse Torvet 1
By 4600 Køge
Land DK
E-mail itdrift@koege.dk

Navneservere

ns.dandomain.dk ns2.dandomain.dk

Domænestatus (EPP)

Active

Domæne metrics

PageRank

3.8

ud af 10

Archive.org

0

Ingen historik

Metrics hentet for 1 måned siden

Sikkerhedsoversigt

HTTPS

SSL

HSTS

SPF

DMARC

DNSSEC

Sikkerhed

8 1

Ingen CAA records fundet

Tilføj CAA records for at kontrollere hvilke CAs der kan udstede certifikater

Low

Ingen security.txt fil (RFC 9116)

Overvej at tilføje /.well-known/security.txt med kontaktinfo til sikkerhedsrapportering

MTA-STS ikke konfigureret

MTA-STS sikrer krypteret email-transport. Relevant for NIS2 compliance.

SPF record fundet

v=spf1 a mx include:_s00307480.autospf.email include:o._spf.hostedsepo.dk include:mailmailmail.net -all

SPF bruger streng policy (-all)

DMARC record fundet

v=DMARC1; p=reject; rua=mailto:1wno5umo@ag.eu.dmarcian.com,mailto:DMARC-AG-KOEGE-DK@KOEGE.DK; ruf=mailto:1wno5umo@fr.eu.dmarcian.com,mailto:DMARC-FS-KOEGE-DK@KOEGE.DK; fo=1

DMARC policy er sat til reject (streng)

DMARC aggregate reporting er aktiveret

DKIM record fundet

DNSSEC er aktiveret

Zone transfer (AXFR) er korrekt blokeret

SSL / HTTPS

5

HTTPS er aktiveret

HTTP redirecter til HTTPS

HSTS er aktiveret

SSL-certifikat er gyldigt

SSL-certifikat er gyldigt i 55 dage

DNS Records

7

Kun én MX server - overvej backup MX for redundans

2 nameserver(s) fundet

Multiple nameservers for redundans

1 MX record(s) fundet

[ { "ttl": 3600, "host": "frontmta.hostedsepo.dk", "priority": 10 } ]

Ingen wildcard DNS konfiguration

1 A record(s) fundet

[ { "ip": "20.50.64.21", "ttl": 1528 } ]

IPv6 (AAAA) understøttet

[ { "ttl": 3599, "ipv6": "2603:1020:5:6::3b" } ]

SOA record fundet

{ "mname": "ns.dandomain.dk", "retry": 3600, "rname": "hostmaster.dandomain.dk", "expire": 1209600, "serial": 2026011301, "refresh": 14400, "minimum_ttl": 300 }

HTTP Headers

5 1

X-Frame-Options header mangler

Tilføj X-Frame-Options: DENY

Medium

Strict-Transport-Security: preload, includeSubDomains, max-age=31,536,000

X-Content-Type-Options: nosniff

Content-Security-Policy er konfigureret

Referrer-Policy: strict-origin-when-cross-origin

Permissions-Policy er konfigureret

Rå data (JSON)

{
    "dns": {
        "a": [
            {
                "ip": "20.50.64.21",
                "ttl": 1528
            }
        ],
        "mx": [
            {
                "ttl": 3600,
                "host": "frontmta.hostedsepo.dk",
                "priority": 10
            }
        ],
        "ns": [
            {
                "ttl": 3599,
                "host": "ns2.dandomain.dk"
            },
            {
                "ttl": 3599,
                "host": "ns.dandomain.dk"
            }
        ],
        "caa": [],
        "soa": [
            {
                "mname": "ns.dandomain.dk",
                "retry": 3600,
                "rname": "hostmaster.dandomain.dk",
                "expire": 1209600,
                "serial": 2026011301,
                "refresh": 14400,
                "minimum_ttl": 300
            }
        ],
        "txt": [
            {
                "ttl": null,
                "txt": "l7in3g1bmiu2vb6ruuemg3v2j0"
            },
            {
                "ttl": null,
                "txt": "v=spf1 a mx include:_s00307480.autospf.email include:o._spf.hostedsepo.dk include:mailmailmail.net -all"
            },
            {
                "ttl": null,
                "txt": "MS=ms43638860"
            },
            {
                "ttl": null,
                "txt": "HMqhygGN33RFGx0PA9ZlF0a05imOMOJ2WRwZqIsDS+FWL1T7Hs9mLPzK\/WHMy++trD4ybT5fwgTFn89Bu9gaeQ=="
            },
            {
                "ttl": null,
                "txt": "apple-domain-verification=ZFxwdoljDfunf9Fk"
            },
            {
                "ttl": null,
                "txt": "so1a149htjburn7f0d5l6e3a"
            }
        ],
        "aaaa": [
            {
                "ttl": 3599,
                "ipv6": "2603:1020:5:6::3b"
            }
        ],
        "cname": []
    },
    "ssl": {
        "san": [
            "*.koege.dk",
            "koege.dk"
        ],
        "chain": [
            {
                "issuer": "Go Daddy Secure Certificate Authority - G2",
                "subject": "*.koege.dk",
                "valid_to": "2026-03-20T08:55:15+00:00"
            },
            {
                "issuer": "Go Daddy Root Certificate Authority - G2",
                "subject": "Go Daddy Secure Certificate Authority - G2",
                "valid_to": "2031-05-03T07:00:00+00:00"
            },
            {
                "issuer": "The Go Daddy Group, Inc.",
                "subject": "Go Daddy Root Certificate Authority - G2",
                "valid_to": "2031-05-30T07:00:00+00:00"
            }
        ],
        "issuer": {
            "country": "US",
            "common_name": "Go Daddy Secure Certificate Authority - G2",
            "organization": "GoDaddy.com, Inc."
        },
        "subject": {
            "state": null,
            "country": null,
            "locality": null,
            "common_name": "*.koege.dk",
            "organization": null,
            "organizational_unit": null
        },
        "is_valid": true,
        "valid_to": "2026-03-20T08:55:15+00:00",
        "is_expired": false,
        "valid_from": "2025-03-20T08:55:15+00:00",
        "chain_length": 3,
        "serial_number": "0AF289D3ADD4C554",
        "days_remaining": 55,
        "is_self_signed": false,
        "signature_algorithm": "RSA-SHA256"
    },
    "tls": {
        "cipher": null,
        "version": null,
        "is_secure": false,
        "is_insecure": false,
        "is_outdated": false
    },
    "https": {
        "has_https": true,
        "hsts_enabled": true,
        "hsts_max_age": 31536000,
        "hsts_preload": false,
        "redirects_to_https": true,
        "hsts_include_subdomains": false
    },
    "whois": {
        "dnssec": true,
        "domain": "koege.dk",
        "status": "registered",
        "registrar": null,
        "raw_status": [
            "Active"
        ],
        "expiry_date": "2026-03-31T00:00:00+02:00",
        "nameservers": [
            "ns.dandomain.dk",
            "ns2.dandomain.dk"
        ],
        "created_date": "1997-01-31T00:00:00+01:00",
        "updated_date": null,
        "registrant_city": "Køge",
        "registrant_name": "Køge Kommune",
        "registrant_email": "itdrift@koege.dk",
        "registrant_address": "Torvet 1",
        "registrant_country": "DK",
        "registrant_postalcode": "4600"
    },
    "metrics": {
        "pagerank": 3.76,
        "fetched_at": "2026-01-23T14:03:14+01:00",
        "wayback_snapshots": null
    },
    "internal_checks": {
        "open_resolver": {
            "checked_at": "2026-01-23T14:02:09+01:00",
            "nameserver": "ns2.dandomain.dk",
            "is_open_resolver": true
        }
    }
}