ksd.dk

DNS sikkerhedsrapport

14 bestået
10 advarsler
0 fejlet
C
77/100
Moderat konfiguration - flere forbedringer nødvendige.
Scannet 25. May 2026 kl. 08:03

Website preview

Domæneoplysninger

Alder

2 år, 2 måneder

Ung

Udløber om

284 dage

11. Mar 2027

DNSSEC

Inaktiv

Navneservere

3

servere

Oprettet 12. Mar 2024
Status Aktiv

Registrant

Navn Krystian Stafa
Adresse Rakszawa 749a
By 37-111 rakszawa
Land PL

Navneservere

ns1.hostido.net.pl ns2.hostido.net.pl ns3.hostido.net.pl

Domænestatus (EPP)

Active

Domæne metrics

PageRank

1.0

ud af 10

Archive.org

539

snapshots Se historik →

Metrics hentet for 5 dage siden

Sikkerhedsoversigt

HTTPS

SSL

HSTS

SPF

DMARC

DNSSEC

Sikkerhed

5 4

Ingen DKIM records fundet (testet almindelige selectors)

Medium

DNSSEC er ikke aktiveret

Aktiver DNSSEC for at beskytte mod DNS spoofing

Medium

DMARC aggregate reporting (rua) er ikke konfigureret

Tilføj rua= for at modtage DMARC rapporter

Low

Ingen CAA records fundet

Tilføj CAA records for at kontrollere hvilke CAs der kan udstede certifikater

Low

Ingen security.txt fil (RFC 9116)

Overvej at tilføje /.well-known/security.txt med kontaktinfo til sikkerhedsrapportering

MTA-STS ikke konfigureret

MTA-STS sikrer krypteret email-transport. Relevant for NIS2 compliance.

SPF record fundet

v=spf1 a mx include:spf.hostido.pl -all

SPF bruger streng policy (-all)

DMARC record fundet

v=DMARC1; p=quarantine; adkim=s; aspf=s;

DMARC policy er sat til quarantine

Zone transfer (AXFR) er korrekt blokeret

SSL / HTTPS

3 2

HTTP redirecter ikke til HTTPS

Konfigurer redirect fra HTTP til HTTPS

Medium

HSTS er ikke aktiveret

Aktiver HSTS for at forbedre sikkerheden

Medium

HTTPS er aktiveret

SSL-certifikat er gyldigt

SSL-certifikat er gyldigt i 48 dage

DNS Records

6

Kun én MX server - overvej backup MX for redundans

Ingen IPv6 (AAAA) records

3 nameserver(s) fundet

Multiple nameservers for redundans

1 MX record(s) fundet

[ { "ttl": 3600, "host": "mail.ksd.dk", "priority": 10 } ]

Ingen wildcard DNS konfiguration

1 A record(s) fundet

[ { "ip": "185.110.51.179", "ttl": 3598 } ]

SOA record fundet

{ "mname": "ns1.hostido.net.pl", "retry": 3600, "rname": "hostmaster.ksd.dk", "expire": 1209600, "serial": 2026041303, "refresh": 86400, "minimum_ttl": 3600 }

HTTP Headers

4

Strict-Transport-Security (HSTS) header mangler

Tilføj Strict-Transport-Security: max-age=31536000; includeSubDomains; preload

High

X-Frame-Options header mangler

Tilføj X-Frame-Options: DENY

Medium

Content-Security-Policy header mangler

Medium

X-Content-Type-Options header mangler

Low

Referrer-Policy header mangler

Permissions-Policy header mangler

Rå data (JSON)

{
    "dns": {
        "a": [
            {
                "ip": "185.110.51.179",
                "ttl": 3598
            }
        ],
        "mx": [
            {
                "ttl": 3600,
                "host": "mail.ksd.dk",
                "priority": 10
            }
        ],
        "ns": [
            {
                "ttl": 3599,
                "host": "ns1.hostido.net.pl"
            },
            {
                "ttl": 3599,
                "host": "ns3.hostido.net.pl"
            },
            {
                "ttl": 3599,
                "host": "ns2.hostido.net.pl"
            }
        ],
        "caa": [],
        "soa": [
            {
                "mname": "ns1.hostido.net.pl",
                "retry": 3600,
                "rname": "hostmaster.ksd.dk",
                "expire": 1209600,
                "serial": 2026041303,
                "refresh": 86400,
                "minimum_ttl": 3600
            }
        ],
        "txt": [
            {
                "ttl": null,
                "txt": "v=spf1 a mx include:spf.hostido.pl -all"
            }
        ],
        "aaaa": [],
        "cname": []
    },
    "ssl": {
        "san": [
            "*.ksd.dk",
            "ksd.dk"
        ],
        "chain": [
            {
                "issuer": "E7",
                "subject": "*.ksd.dk",
                "valid_to": "2026-07-12T19:02:14+00:00"
            },
            {
                "issuer": "ISRG Root X1",
                "subject": "E7",
                "valid_to": "2027-03-12T23:59:59+00:00"
            }
        ],
        "issuer": {
            "country": "US",
            "common_name": "E7",
            "organization": "Let's Encrypt"
        },
        "subject": {
            "state": null,
            "country": null,
            "locality": null,
            "common_name": "*.ksd.dk",
            "organization": null,
            "organizational_unit": null
        },
        "is_valid": true,
        "valid_to": "2026-07-12T19:02:14+00:00",
        "is_expired": false,
        "public_key": {
            "bits": 384,
            "type": "ECDSA"
        },
        "valid_from": "2026-04-13T19:02:15+00:00",
        "is_wildcard": true,
        "chain_length": 2,
        "serial_number": "06E17D96E1A39DCABD37F8C98D8818FF2E72",
        "chain_complete": true,
        "days_remaining": 48,
        "is_self_signed": false,
        "negotiated_cipher": "TLS_AES_256_GCM_SHA384",
        "fingerprint_sha256": "BE:38:10:63:78:DC:92:52:41:0D:CF:40:38:6B:3A:D5:B1:06:37:DD:45:55:8B:FA:5D:C7:A2:22:0C:2E:25:13",
        "negotiated_protocol": "TLSv1.3",
        "signature_algorithm": "ecdsa-with-SHA384"
    },
    "tls": {
        "cipher": null,
        "version": null,
        "is_secure": false,
        "is_insecure": false,
        "is_outdated": false
    },
    "https": {
        "has_https": true,
        "hsts_enabled": false,
        "hsts_max_age": null,
        "hsts_preload": false,
        "redirects_to_https": false,
        "hsts_include_subdomains": false
    },
    "whois": {
        "dnssec": false,
        "domain": "ksd.dk",
        "status": "registered",
        "registrar": null,
        "raw_status": [
            "Active"
        ],
        "expiry_date": "2027-03-11T00:00:00+01:00",
        "nameservers": [
            "ns1.hostido.net.pl",
            "ns2.hostido.net.pl",
            "ns3.hostido.net.pl"
        ],
        "created_date": "2024-03-12T00:00:00+01:00",
        "updated_date": null,
        "registrant_city": "rakszawa",
        "registrant_name": "Krystian Stafa",
        "registrant_email": null,
        "registrant_address": "Rakszawa 749a",
        "registrant_country": "PL",
        "registrant_postalcode": "37-111"
    },
    "metrics": {
        "pagerank": 1.02,
        "fetched_at": "2026-05-25T08:04:01+02:00",
        "wayback_snapshots": 539
    },
    "internal_checks": {
        "open_resolver": {
            "checked_at": "2026-05-25T08:03:47+02:00",
            "nameserver": "ns1.hostido.net.pl",
            "is_open_resolver": false
        }
    }
}