stewe.de

DNS sikkerhedsrapport

16 bestået
9 advarsler
0 fejlet
C
76/100
Moderat konfiguration - flere forbedringer nødvendige.
Scannet 18. Feb 2026 kl. 18:25

Website preview

Domæneoplysninger

DNSSEC

Inaktiv

Navneservere

3

servere

Sidst opdateret 03. Feb 2022
Status Aktiv

Navneservere

ns2.oberberg-online.de ns3.oberberg-online.de ns.oberberg-online.de

Domænestatus (EPP)

active

Domæne metrics

PageRank

2.5

ud af 10

Archive.org

10,053

snapshots Se historik →

Metrics hentet for 1 uge siden

Sikkerhedsoversigt

HTTPS

SSL

HSTS

SPF

DMARC

DNSSEC

Sikkerhed

4 5

DMARC policy er sat til none - overvej quarantine eller reject

Medium

Ingen DKIM records fundet (testet almindelige selectors)

Medium

DNSSEC er ikke aktiveret

Aktiver DNSSEC for at beskytte mod DNS spoofing

Medium

DMARC aggregate reporting (rua) er ikke konfigureret

Tilføj rua= for at modtage DMARC rapporter

Low

Ingen CAA records fundet

Tilføj CAA records for at kontrollere hvilke CAs der kan udstede certifikater

Low

Ingen security.txt fil (RFC 9116)

Overvej at tilføje /.well-known/security.txt med kontaktinfo til sikkerhedsrapportering

MTA-STS ikke konfigureret

MTA-STS sikrer krypteret email-transport. Relevant for NIS2 compliance.

SPF record fundet

v=spf1 mx a:mx.stewe.de a:mail.stewe.de include:_spf.oberberg.net ip4:185.113.122.252/32 -all

SPF bruger streng policy (-all)

DMARC record fundet

v=DMARC1; p=none;

Zone transfer (AXFR) er korrekt blokeret

SSL / HTTPS

3 2

SSL-certifikat udløber om 12 dage

High

HSTS er ikke aktiveret

Aktiver HSTS for at forbedre sikkerheden

Medium

HTTPS er aktiveret

HTTP redirecter til HTTPS

SSL-certifikat er gyldigt

DNS Records

6

Ingen IPv6 (AAAA) records

3 nameserver(s) fundet

Multiple nameservers for redundans

2 MX record(s) fundet

[ { "ttl": 300, "host": "mx02.secure-mailgate.com", "priority": 10 }, { "ttl": 300, "host": "mx01.secure-mailgate.com", "priority": 10 } ]

Ingen wildcard DNS konfiguration

1 A record(s) fundet

[ { "ip": "152.53.143.43", "ttl": 298 } ]

SOA record fundet

{ "mname": "ns.oberberg-online.de", "retry": 3600, "rname": "breidenbach.oberberg.net", "expire": 604800, "serial": 2026020301, "refresh": 10800, "minimum_ttl": 10800 }

HTTP Headers

3 2

Strict-Transport-Security (HSTS) header mangler

Tilføj Strict-Transport-Security: max-age=31536000; includeSubDomains; preload

High

Content-Security-Policy header mangler

Medium

Permissions-Policy header mangler

X-Frame-Options: SAMEORIGIN

X-Content-Type-Options: nosniff

Referrer-Policy: same-origin

Rå data (JSON)

{
    "dns": {
        "a": [
            {
                "ip": "152.53.143.43",
                "ttl": 298
            }
        ],
        "mx": [
            {
                "ttl": 300,
                "host": "mx02.secure-mailgate.com",
                "priority": 10
            },
            {
                "ttl": 300,
                "host": "mx01.secure-mailgate.com",
                "priority": 10
            }
        ],
        "ns": [
            {
                "ttl": 299,
                "host": "ns.oberberg-online.de"
            },
            {
                "ttl": 299,
                "host": "ns3.oberberg-online.de"
            },
            {
                "ttl": 299,
                "host": "ns2.oberberg-online.de"
            }
        ],
        "caa": [],
        "soa": [
            {
                "mname": "ns.oberberg-online.de",
                "retry": 3600,
                "rname": "breidenbach.oberberg.net",
                "expire": 604800,
                "serial": 2026020301,
                "refresh": 10800,
                "minimum_ttl": 10800
            }
        ],
        "txt": [
            {
                "ttl": null,
                "txt": "apple-domain-verification=jxA7S9fLERehN5NZ"
            },
            {
                "ttl": null,
                "txt": "google-site-verification=EeSxnK4MiP2kKLgE1ZwhyHupMqv7SwgDZ8M3sAfWu10"
            },
            {
                "ttl": null,
                "txt": "MS=ms27263523"
            },
            {
                "ttl": null,
                "txt": "v=spf1 mx a:mx.stewe.de a:mail.stewe.de include:_spf.oberberg.net ip4:185.113.122.252\/32 -all"
            },
            {
                "ttl": null,
                "txt": "linkedin-site-verification=6751be09-e110-4795-a7ff-6efd0dae19c2"
            }
        ],
        "aaaa": [],
        "cname": []
    },
    "ssl": {
        "san": [
            "stewe.de",
            "www.stewe.de"
        ],
        "chain": [
            {
                "issuer": "R13",
                "subject": "stewe.de",
                "valid_to": "2026-03-03T12:01:48+00:00"
            },
            {
                "issuer": "ISRG Root X1",
                "subject": "R13",
                "valid_to": "2027-03-12T23:59:59+00:00"
            }
        ],
        "issuer": {
            "country": "US",
            "common_name": "R13",
            "organization": "Let's Encrypt"
        },
        "subject": {
            "state": null,
            "country": null,
            "locality": null,
            "common_name": "stewe.de",
            "organization": null,
            "organizational_unit": null
        },
        "is_valid": true,
        "valid_to": "2026-03-03T12:01:48+00:00",
        "is_expired": false,
        "valid_from": "2025-12-03T12:01:49+00:00",
        "chain_length": 2,
        "serial_number": "05E7DFFB4F0FB421911C299F80E85248CA4E",
        "days_remaining": 12,
        "is_self_signed": false,
        "signature_algorithm": "RSA-SHA256"
    },
    "tls": {
        "cipher": null,
        "version": null,
        "is_secure": false,
        "is_insecure": false,
        "is_outdated": false
    },
    "https": {
        "has_https": true,
        "hsts_enabled": false,
        "hsts_max_age": null,
        "hsts_preload": false,
        "redirects_to_https": true,
        "hsts_include_subdomains": false
    },
    "whois": {
        "dnssec": false,
        "domain": "stewe.de",
        "status": "registered",
        "registrar": null,
        "raw_status": [
            "active"
        ],
        "expiry_date": null,
        "nameservers": [
            "ns2.oberberg-online.de",
            "ns3.oberberg-online.de",
            "ns.oberberg-online.de"
        ],
        "created_date": null,
        "updated_date": "2022-02-03T08:33:24+01:00"
    },
    "metrics": {
        "pagerank": 2.53,
        "fetched_at": "2026-02-18T18:25:49+01:00",
        "wayback_snapshots": 10053
    },
    "internal_checks": {
        "open_resolver": {
            "checked_at": "2026-02-18T18:25:31+01:00",
            "nameserver": "ns.oberberg-online.de",
            "is_open_resolver": false
        }
    }
}