bzn.dk

📜 Historical scan 2026-07-20 10:42:44 · ← Latest scan

⬇ Zone File 📜 Timeline & History ⚡ Scan Now

bzn.dk is a .dk domain served by 2 nameservers (brad.ns.cloudflare.com, lucy.ns.cloudflare.com). It was already in the .dk zone when our tracking began on 16 June 2026. Mail is handled by smtp.google.com, aspmx.l.google.com and 4 more. The zone is not DNSSEC-signed, has no DMARC policy and has no IPv6 address. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

2 records 42ms

Nameserver	IP addresses	PTR	ASN / ISP
brad.ns.cloudflare.com	108.162.193.105 172.64.33.105 173.245.59.105 2606:4700:58::adf5:3b69 2803:f800:50::6ca2:c169 2a06:98c1:50::ac40:2169	brad.ns.cloudflare.com brad.ns.cloudflare.com brad.ns.cloudflare.com brad.ns.cloudflare.com brad.ns.cloudflare.com brad.ns.cloudflare.com	AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc.
lucy.ns.cloudflare.com	108.162.192.133 172.64.32.133 173.245.58.133 2606:4700:50::adf5:3a85 2803:f800:50::6ca2:c085 2a06:98c1:50::ac40:2085	lucy.ns.cloudflare.com lucy.ns.cloudflare.com lucy.ns.cloudflare.com lucy.ns.cloudflare.com lucy.ns.cloudflare.com lucy.ns.cloudflare.com	AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc.

🌍 A Records#

🌍

No A records found

📧 MX Records#

6 records 30ms

Priority	TTL	Mail Server	IP addresses	PTR	ASN
1	300s	smtp.google.com	173.194.220.26 173.194.221.26 173.194.221.27 173.194.222.26 2a00:1450:4010:c09::1b 2a00:1450:4010:c09::1b 2a00:1450:4010:c0a::1a 2a00:1450:4010:c0a::1a 2a00:1450:4010:c0a::1b 2a00:1450:4010:c0a::1b 2a00:1450:4010:c0b::1b 2a00:1450:4010:c0b::1b 64.233.164.27	lk-in-f26.1e100.net lm-in-f26.1e100.net lm-in-f27.1e100.net lo-in-f26.1e100.net lk-in-f27.1e100.net lk-in-x1b.1e100.net lm-in-f26.1e100.net lm-in-x1a.1e100.net lm-in-f27.1e100.net lm-in-x1b.1e100.net lo-in-f27.1e100.net lo-in-x1b.1e100.net lf-in-f27.1e100.net	AS15169 Google LLC AS15169 Google LLC AS15169 Google LLC AS15169 Google LLC AS15169 Google LLC AS15169 Google LLC AS15169 Google LLC AS15169 Google LLC AS15169 Google LLC AS15169 Google LLC AS15169 Google LLC AS15169 Google LLC AS15169 Google LLC
2	300s	aspmx.l.google.com	172.253.130.27 2a00:1450:4010:c1e::1b	yulppbn-in-f27.1e100.net lb-in-f27.1e100.net	AS15169 Google LLC AS15169 Google LLC
5	300s	alt1.aspmx.l.google.com	192.178.158.27 2404:6800:4013:813::1b	lcdels-in-f27.1e100.net lcdels-in-f27.1e100.net	AS15169 Google LLC AS15169 Google LLC
5	300s	alt2.aspmx.l.google.com	172.253.158.27 2404:6800:4003:c26::1b	so-in-f27.1e100.net so-in-f27.1e100.net	AS15169 Google LLC AS15169 Google LLC
10	300s	alt3.aspmx.l.google.com	108.177.125.27 2404:6800:4008:c01::1b	tp-in-f27.1e100.net tp-in-f27.1e100.net	AS15169 Google LLC AS15169 Google LLC
10	300s	alt4.aspmx.l.google.com	192.178.230.26 2404:6800:400b:c01b::1a	yunrtab-in-f26.1e100.net yunrtab-in-f26.1e100.net	AS15169 Google LLC AS15169 Google LLC

🔷 AAAA Records (IPv6)#

✗ No AAAA records — IPv6 not configured

🔐 HTTPS Records#

✗ No HTTPS RR — no SVCB/HTTPS service binding

📝 TXT Records#

2 records 173ms

TXT Record
v=spf1 include:_spf.google.com ~all
v=spf1 ip4:37.187.75.88 ip4:212.129.24.42 include:relay.creativeoutcast.com include:spf.protection.outlook.com -all

✉️ SPF#

⚠ Multiple SPF records — RFC 7208 §4.5 violation (receivers must treat this as permerror)

Policy	Record (bzn.dk)
~all (soft fail)	v=spf1 include:_spf.google.com ~all
-all (hard fail)	v=spf1 ip4:37.187.75.88 ip4:212.129.24.42 include:relay.creativeoutcast.com include:spf.protection.outlook.com -all

📨 DMARC#

✗ No DMARC record — mail spoofing not restricted

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

✗ No CAA records — any CA may issue certificates

🧩 Web & zone#

latest probe, not this scan · checked 2026-10-09 09:24:55

www	NXDOMAIN
www vs bare domain	Neither resolves bzn.dk: no address www.bzn.dk: no address
Wildcard	No

✍️ DKIM keys#

1 found

Selector	CNAME	Key
google	—	RSA · ~1024 bit below 2048 bit

DKIM selectors can't be listed, so we check the common ones (Microsoft 365, Google, Mailchimp, SendGrid, generic). Keys under other selectors aren't shown.

🔎 SPF check#

zone-wide SPF report

DNS lookups: 1/10 · policy: ~all

error 2 SPF records: receivers must treat that as a permanent error (RFC 7208 §4.5)

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

59ms

Check	Result
Validation Status	🔓 Insecure
AD Flag (resolver validates)	✗ Not set
DS Record	✗ Not found
DNSKEY Record	✗ Not found
Flags	resolution failed: ncache nxrrset

🏷️ SOA#

0ms

Field	Value
Serial	2410006985
Primary NS (MNAME)	brad.ns.cloudflare.com
Responsible (RNAME)	dns@cloudflare.com
Refresh	10000s
Retry	2400s
Expire	604800s
Minimum (neg-cache TTL)	1800s

📋 Registration#

✗ No registration data yet — queued for a WHOIS lookup

📋 WHOIS#

⏱️ Lookup Timing#

42ms

31ms

30ms

AAAA

29ms

TXT

173ms

CAA

40ms

HTTPS

40ms

TLSA

109ms

SOA

0ms

MTA-STS

39ms

DNSSEC

59ms

SRV

42ms

Total

1862ms

🕐 Scan History#

Scanned At	Duration	Records	DNSSEC
2026-10-09 09:24:55	1788ms	2 NS 0 A 6 MX	🔓 Insecure
2026-09-29 23:07:23	678ms	2 NS 0 A 6 MX	🔓 Insecure
2026-09-21 16:31:16	1313ms	2 NS 0 A 6 MX	🔓 Insecure
2026-09-08 13:56:42	757ms	2 NS 0 A 6 MX	🔓 Insecure
2026-08-09 07:33:27	2024ms	2 NS 0 A 6 MX	🔓 Insecure
2026-08-07 19:32:19	2128ms	2 NS 0 A 6 MX	🔓 Insecure
2026-07-20 10:42:44 shown	1862ms	2 NS 0 A 6 MX	🔓 Insecure
2026-07-18 18:46:44	3067ms	2 NS 0 A 6 MX	🔓 Insecure
2026-06-27 14:58:53	1024ms	2 NS 0 A 6 MX	🔓 Insecure
2026-06-26 06:59:39	1694ms	2 NS 0 A 6 MX	🔓 Insecure
2026-06-23 02:37:55	933ms	0 NS 0 A 0 MX	❓ Unknown
2026-06-22 15:14:46	948ms	2 NS 0 A 6 MX	🔓 Insecure
2026-06-16 18:37:49	5108ms	2 NS 0 A 6 MX	🔓 Insecure
2026-06-16 18:30:29	2654ms	2 NS 0 A 6 MX	🔓 Insecure
2026-06-16 18:30:28	2572ms	2 NS 0 A 6 MX	🔓 Insecure