cafeen.dk

📜 Historical scan 2026-06-22 22:49:00 · ← Latest scan

⬇ Zone File 📜 Timeline & History ⚡ Scan Now

cafeen.dk is a .dk domain served by 2 nameservers (ns01.one.com, ns02.one.com). It was already in the .dk zone when our tracking began on 16 June 2026. Its website address 130.225.98.27 is hosted by IDDQD-AS (AS1835) in Denmark. Mail is handled by mail.kildetoft.dk. The zone is not DNSSEC-signed, has no DMARC policy and has no IPv6 address. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

2 records 67ms

Nameserver	IP addresses	PTR	ASN / ISP
ns01.one.com	195.206.121.10 2001:67c:28cc::10	ns01.one.com ns01.one.com	AS197495 One.com A/S AS197495 One.com A/S
ns02.one.com	185.10.11.10 2001:67c:3c0::10	ns02.one.com ns02.one.com	AS51468 One.com A/S AS51468 One.com A/S

🌍 A Records#

1 records 77ms

IP	TTL	PTR	ASN	ISP / Org	CIDR	Country	City
130.225.98.27	600s	ip130-225-98-027.science.ku.dk	AS1835	IDDQD-AS	130.225.0.0/16	🇩🇰 Denmark	Copenhagen

📧 MX Records#

1 records 60ms

Priority	TTL	Mail Server	IP addresses	PTR	ASN
20	600s	mail.kildetoft.dk	188.166.18.180	mail.kildetoft.dk	AS14061 DigitalOcean, LLC

🔷 AAAA Records (IPv6)#

✗ No AAAA records — IPv6 not configured

🔐 HTTPS Records#

✗ No HTTPS RR — no SVCB/HTTPS service binding

📝 TXT Records#

1 records 208ms

TXT Record
v=spf1 a:mail.cafeen.dk ?all

✉️ SPF#

Policy	Record (cafeen.dk)
?all (neutral)	v=spf1 a:mail.cafeen.dk ?all

📨 DMARC#

✗ No DMARC record — mail spoofing not restricted

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

✗ No CAA records — any CA may issue certificates

🧩 Web & zone#

latest probe, not this scan · checked 2026-10-16 06:54:21

www	130.225.204.42 (AS1835) (address records, no CNAME)
www vs bare domain	Same network cafeen.dk: 130.225.204.42 (AS1835) www.cafeen.dk: 130.225.204.42 (AS1835)
Wildcard	No

🔎 SPF check#

zone-wide SPF report

DNS lookups: 1/10 · policy: ?all

warn "?all" is neutral: it gives receivers no guidance, much like having no SPF

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

161ms

Check	Result
Validation Status	🔓 Insecure
AD Flag (resolver validates)	✗ Not set
DS Record	✗ Not found
DNSKEY Record	✗ Not found
Flags	unsigned answer

🏷️ SOA#

60ms

Field	Value
Serial	2026032401
Primary NS (MNAME)	ns01.one.com
Responsible (RNAME)	hostmaster@one.com
Refresh	14400s
Retry	3600s
Expire	1209600s
Minimum (neg-cache TTL)	600s

📋 Registration#

✗ No registration data yet — queued for a WHOIS lookup

📋 WHOIS#

⏱️ Lookup Timing#

67ms

77ms

60ms

AAAA

69ms

TXT

208ms

CAA

72ms

HTTPS

67ms

TLSA

170ms

SOA

60ms

MTA-STS

77ms

DNSSEC

161ms

SRV

266ms

Total

888ms

🕐 Scan History#

Scanned At	Duration	Records	DNSSEC
2026-09-24 13:21:16	605ms	2 NS 1 A 1 MX	🔓 Insecure
2026-09-21 13:53:29	1236ms	2 NS 1 A 1 MX	🔓 Insecure
2026-08-25 05:29:16	3843ms	2 NS 1 A 1 MX	🔓 Insecure
2026-06-24 17:35:06	720ms	2 NS 1 A 1 MX	🔓 Insecure
2026-06-22 22:49:00 shown	888ms	2 NS 1 A 1 MX	🔓 Insecure
2026-06-22 17:19:34	1117ms	0 NS 0 A 0 MX	❓ Unknown
2026-06-20 03:31:59	6470ms	2 NS 1 A 1 MX	🔓 Insecure
2026-06-16 18:50:14	751ms	2 NS 1 A 1 MX	🔓 Insecure