cafeen.dk

📜 Historical scan 2026-08-25 05:29:16 · ← Latest scan

⬇ Zone File 📜 Timeline & History ⚡ Scan Now

cafeen.dk is a .dk domain served by 2 nameservers (ns01.one.com, ns02.one.com). It was already in the .dk zone when our tracking began on 16 June 2026. Its website address 130.225.204.42 is hosted by IDDQD-AS (AS1835) in Denmark. Mail is handled by mail.kildetoft.dk. The zone is not DNSSEC-signed, has no DMARC policy and has no IPv6 address. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

2 records 109ms

Nameserver	IP addresses	PTR	ASN / ISP
ns01.one.com	195.206.121.10 2001:67c:28cc::10	ns01.one.com ns01.one.com	AS197495 One.com A/S AS197495 One.com A/S
ns02.one.com	185.10.11.10 2001:67c:3c0::10	ns02.one.com ns02.one.com	AS51468 One.com A/S AS51468 One.com A/S

🌍 A Records#

1 records 151ms

IP	TTL	PTR	ASN	ISP / Org	CIDR	Country	City
130.225.204.42	600s	fs.net.ku.dk	AS1835	IDDQD-AS	130.225.0.0/16	🇩🇰 Denmark	Aalborg

📧 MX Records#

1 records 262ms

Priority	TTL	Mail Server	IP addresses	PTR	ASN
20	600s	mail.kildetoft.dk	188.166.18.180	mail.kildetoft.dk	AS14061 DigitalOcean, LLC

🔷 AAAA Records (IPv6)#

✗ No AAAA records — IPv6 not configured

🔐 HTTPS Records#

✗ No HTTPS RR — no SVCB/HTTPS service binding

📝 TXT Records#

1 records 470ms

TXT Record
v=spf1 a:mail.cafeen.dk ?all

✉️ SPF#

Policy	Record (cafeen.dk)
?all (neutral)	v=spf1 a:mail.cafeen.dk ?all

📨 DMARC#

✗ No DMARC record — mail spoofing not restricted

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

✗ No CAA records — any CA may issue certificates

🧩 Web & zone#

latest probe, not this scan · checked 2026-10-16 06:54:21

www	130.225.204.42 (AS1835) (address records, no CNAME)
www vs bare domain	Same network cafeen.dk: 130.225.204.42 (AS1835) www.cafeen.dk: 130.225.204.42 (AS1835)
Wildcard	No

🔎 SPF check#

zone-wide SPF report

DNS lookups: 1/10 · policy: ?all

warn "?all" is neutral: it gives receivers no guidance, much like having no SPF

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

329ms

Check	Result
Validation Status	🔓 Insecure
AD Flag (resolver validates)	✗ Not set
DS Record	✗ Not found
DNSKEY Record	✗ Not found
Flags	unsigned answer

🏷️ SOA#

0ms

Field	Value
Serial	2026082405
Primary NS (MNAME)	ns01.one.com
Responsible (RNAME)	hostmaster@one.com
Refresh	14400s
Retry	3600s
Expire	1209600s
Minimum (neg-cache TTL)	600s

📋 Registration#

✗ No registration data yet — queued for a WHOIS lookup

📋 WHOIS#

⏱️ Lookup Timing#

109ms

151ms

262ms

AAAA

103ms

TXT

470ms

CAA

152ms

HTTPS

254ms

TLSA

918ms

SOA

0ms

MTA-STS

180ms

DNSSEC

329ms

SRV

2090ms

Total

3843ms

🕐 Scan History#

Scanned At	Duration	Records	DNSSEC
2026-09-24 13:21:16	605ms	2 NS 1 A 1 MX	🔓 Insecure
2026-09-21 13:53:29	1236ms	2 NS 1 A 1 MX	🔓 Insecure
2026-08-25 05:29:16 shown	3843ms	2 NS 1 A 1 MX	🔓 Insecure
2026-06-24 17:35:06	720ms	2 NS 1 A 1 MX	🔓 Insecure
2026-06-22 22:49:00	888ms	2 NS 1 A 1 MX	🔓 Insecure
2026-06-22 17:19:34	1117ms	0 NS 0 A 0 MX	❓ Unknown
2026-06-20 03:31:59	6470ms	2 NS 1 A 1 MX	🔓 Insecure
2026-06-16 18:50:14	751ms	2 NS 1 A 1 MX	🔓 Insecure