toftteknik.dk

DNS sikkerhedsrapport

19 bestået
6 advarsler
0 fejlet
B+
88/100
God konfiguration med få mangler.
Scannet 29. Aug 2026 kl. 12:07

Website preview

Domæneoplysninger

Alder

3 måneder

Ny

Udløber om

268 dage

25. May 2027

DNSSEC

Aktiv

Navneservere

2

servere

Oprettet 26. May 2026
Status Aktiv

Registrant

Navn Patrick Thamsdorf Toft
Adresse Kulvej 12, 1. tv
By 2450 København SV
Land DK

Navneservere

ns01.one.com ns02.one.com

Domænestatus (EPP)

Active

Domæne metrics

PageRank

0

Ingen data

Archive.org

0

Ingen historik

Metrics hentet for 8 timer siden

Sikkerhedsoversigt

HTTPS

SSL

HSTS

SPF

DMARC

DNSSEC

Sikkerhed

5 4

SPF bruger soft fail (~all) - overvej at bruge -all

Medium

Ingen DKIM records fundet (testet almindelige selectors)

Medium

DMARC aggregate reporting (rua) er ikke konfigureret

Tilføj rua= for at modtage DMARC rapporter

Low

Ingen CAA records fundet

Tilføj CAA records for at kontrollere hvilke CAs der kan udstede certifikater

Low

Ingen security.txt fil (RFC 9116)

Overvej at tilføje /.well-known/security.txt med kontaktinfo til sikkerhedsrapportering

MTA-STS ikke konfigureret

MTA-STS sikrer krypteret email-transport. Relevant for NIS2 compliance.

SPF record fundet

v=spf1 include:_custspf.one.com ~all

DMARC record fundet

v=DMARC1; p=reject

DMARC policy er sat til reject (streng)

DNSSEC er aktiveret

Zone transfer (AXFR) er korrekt blokeret

SSL / HTTPS

5

HTTPS er aktiveret

HTTP redirecter til HTTPS

HSTS er aktiveret

SSL-certifikat er gyldigt

SSL-certifikat er gyldigt i 54 dage

DNS Records

6

Ingen IPv6 (AAAA) records

2 nameserver(s) fundet

Multiple nameservers for redundans

4 MX record(s) fundet

[ { "ttl": 10800, "host": "mx3.mailpod15-cph3.g1i.one.com", "priority": 10 }, { "ttl": 10800, "host": "mx2.mailpod15-cph3.g1i.one.com", "priority": 10 }, { "ttl": 10800, "host": "mx4.mailpod15-cph3.g1i.one.com", "priority": 10 }, { "ttl": 10800, "host": "mx1.mailpod15-cph3.g1i.one.com", "priority": 10 } ]

Ingen wildcard DNS konfiguration

1 A record(s) fundet

[ { "ip": "185.158.133.1", "ttl": 597 } ]

SOA record fundet

{ "mname": "ns01.one.com", "retry": 3600, "rname": "hostmaster.one.com", "expire": 1209600, "serial": 2026081901, "refresh": 14400, "minimum_ttl": 600 }

HTTP Headers

3 2

X-Frame-Options header mangler

Tilføj X-Frame-Options: DENY

Medium

Content-Security-Policy header mangler

Medium

Permissions-Policy header mangler

Strict-Transport-Security: includeSubDomains, max-age=31,536,000

X-Content-Type-Options: nosniff

Referrer-Policy: strict-origin-when-cross-origin

Rå data (JSON)

{
    "dns": {
        "a": [
            {
                "ip": "185.158.133.1",
                "ttl": 597
            }
        ],
        "mx": [
            {
                "ttl": 10800,
                "host": "mx3.mailpod15-cph3.g1i.one.com",
                "priority": 10
            },
            {
                "ttl": 10800,
                "host": "mx2.mailpod15-cph3.g1i.one.com",
                "priority": 10
            },
            {
                "ttl": 10800,
                "host": "mx4.mailpod15-cph3.g1i.one.com",
                "priority": 10
            },
            {
                "ttl": 10800,
                "host": "mx1.mailpod15-cph3.g1i.one.com",
                "priority": 10
            }
        ],
        "ns": [
            {
                "ttl": 7199,
                "host": "ns01.one.com"
            },
            {
                "ttl": 7199,
                "host": "ns02.one.com"
            }
        ],
        "caa": [],
        "soa": [
            {
                "mname": "ns01.one.com",
                "retry": 3600,
                "rname": "hostmaster.one.com",
                "expire": 1209600,
                "serial": 2026081901,
                "refresh": 14400,
                "minimum_ttl": 600
            }
        ],
        "txt": [
            {
                "ttl": null,
                "txt": "v=spf1 include:_custspf.one.com ~all"
            },
            {
                "ttl": null,
                "txt": "google-site-verification=3SL2wRyi80RbrLX7vRSkP3410UWGdugWhsmHxYruyoI"
            }
        ],
        "aaaa": [],
        "cname": []
    },
    "ssl": {
        "san": [
            "toftteknik.dk"
        ],
        "chain": [
            {
                "issuer": "WE1",
                "subject": "toftteknik.dk",
                "valid_to": "2026-10-22T21:30:27+00:00"
            },
            {
                "issuer": "GTS Root R4",
                "subject": "WE1",
                "valid_to": "2029-02-20T14:00:00+00:00"
            },
            {
                "issuer": "GlobalSign Root CA",
                "subject": "GTS Root R4",
                "valid_to": "2028-01-28T00:00:42+00:00"
            }
        ],
        "issuer": {
            "country": "US",
            "common_name": "WE1",
            "organization": "Google Trust Services"
        },
        "subject": {
            "state": null,
            "country": null,
            "locality": null,
            "common_name": "toftteknik.dk",
            "organization": null,
            "organizational_unit": null
        },
        "is_valid": true,
        "valid_to": "2026-10-22T21:30:27+00:00",
        "is_expired": false,
        "public_key": {
            "bits": 256,
            "type": "ECDSA"
        },
        "valid_from": "2026-07-24T20:30:33+00:00",
        "is_wildcard": false,
        "chain_length": 3,
        "serial_number": "89C267C68947A3CE0EF11A970DDD8472",
        "chain_complete": true,
        "days_remaining": 54,
        "is_self_signed": false,
        "negotiated_cipher": "TLS_AES_256_GCM_SHA384",
        "fingerprint_sha256": "3D:89:3A:6B:01:5C:14:DF:2F:85:A1:02:92:F3:5D:B0:EB:F5:19:6C:24:F7:6E:F8:6A:24:D0:88:23:DC:73:91",
        "negotiated_protocol": "TLSv1.3",
        "signature_algorithm": "ecdsa-with-SHA256"
    },
    "tls": {
        "cipher": null,
        "version": null,
        "is_secure": false,
        "is_insecure": false,
        "is_outdated": false
    },
    "https": {
        "has_https": true,
        "hsts_enabled": true,
        "hsts_max_age": 31536000,
        "hsts_preload": false,
        "redirects_to_https": true,
        "hsts_include_subdomains": true
    },
    "whois": {
        "dnssec": true,
        "domain": "toftteknik.dk",
        "status": "registered",
        "registrar": null,
        "raw_status": [
            "Active"
        ],
        "expiry_date": "2027-05-25T00:00:00+02:00",
        "nameservers": [
            "ns01.one.com",
            "ns02.one.com"
        ],
        "created_date": "2026-05-26T00:00:00+02:00",
        "updated_date": null,
        "registrant_city": "København SV",
        "registrant_name": "Patrick Thamsdorf Toft",
        "registrant_email": null,
        "registrant_address": "Kulvej 12, 1. tv",
        "registrant_country": "DK",
        "registrant_postalcode": "2450"
    },
    "metrics": {
        "pagerank": 0,
        "fetched_at": "2026-08-29T12:07:40+02:00",
        "wayback_snapshots": 0
    },
    "internal_checks": {
        "open_resolver": {
            "checked_at": "2026-08-29T12:07:35+02:00",
            "nameserver": "ns01.one.com",
            "is_open_resolver": false
        }
    }
}