cair.dk

📜 Historical scan 2026-06-16 18:55:04  ·  ← Latest scan
⬇ Zone File 📜 Timeline & History ⚡ Scan Now

cair.dk is a .dk domain served by 2 nameservers (randy.ns.cloudflare.com, zelda.ns.cloudflare.com). It was registered on 18 June 2014 (WHOIS) and was already in the .dk zone when our tracking began on 16 June 2026. Its website address 104.21.77.142 is hosted by Cloudflare, Inc. (AS13335). Mail is handled by aspmx.l.google.com, alt1.aspmx.l.google.com and 3 more. The zone is not DNSSEC-signed, publishes a DMARC policy and is reachable over IPv6. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

2 records   49ms
NameserverIP addressesPTRASN / ISP
randy.ns.cloudflare.com — — —
zelda.ns.cloudflare.com — — —

🌍 A Records#

2 records   53ms
IPTTLPTRASNISP / OrgCIDRCountryCity
104.21.77.142 — — AS13335 Cloudflare, Inc. 104.21.0.0/17 — —
172.67.208.235 — — AS13335 Cloudflare, Inc. 172.67.128.0/17 — —

📧 MX Records#

5 records   44ms
PriorityTTLMail ServerIP addressesPTRASN
10 — aspmx.l.google.com 64.233.164.27 lf-in-f27.1e100.net AS15169 Google LLC
20 — alt1.aspmx.l.google.com 172.253.158.27 so-in-f27.1e100.net AS15169 Google LLC
20 — alt2.aspmx.l.google.com 172.253.158.26 so-in-f26.1e100.net AS15169 Google LLC
30 — alt3.aspmx.l.google.com 172.253.152.26 yulpptr-in-f26.1e100.net AS15169 Google LLC
30 — alt4.aspmx.l.google.com 192.178.230.26 yunrtab-in-f26.1e100.net AS15169 Google LLC

🔷 AAAA Records (IPv6)#

2 records   45ms
IPv6 AddressTTLPTRASNISP / OrgCIDRCountryCity
2606:4700:3030::ac43:d0eb — — AS13335 Cloudflare, Inc. 2606:4700:3000:0:0:0:0:0/42 — —
2606:4700:3033::6815:4d8e — — AS13335 Cloudflare, Inc. 2606:4700:3000:0:0:0:0:0/42 — —

🔐 HTTPS Records#

1 records   48ms
PriorityTargetSvcParams
1 service . alpn="h3,h2" ipv4hint=104.21.77.142,172.67.208.235 ech=AEX+DQBBiQAgACB6fwZmiM8HN6m0zArqRqb3a8Bz4w83oH5zMt0Ta81SRQAEAAEAAQASY2xvdWRmbGFyZS1lY2guY29tAAA= ipv6hint=2606:4700:3030::ac43:d0eb,2606:4700:3033::6815:4d8e

📝 TXT Records#

2 records   160ms
TXT Record
google-site-verification=5zjkpz8AK_Z6J426ICaQvWReUJfX_Kw6rDHDbhsCZ6s
v=spf1 ip4:136.243.246.81 include:_spf.google.com include:send.heyloyalty.com include:25457169.spf07.hubspotemail.net ~all

✉️ SPF#

PolicyRecord (cair.dk)
~all (soft fail) v=spf1 ip4:136.243.246.81 include:_spf.google.com include:send.heyloyalty.com include:25457169.spf07.hubspotemail.net ~all

📨 DMARC#

PolicyRecord (_dmarc.cair.dk)
p=reject v=DMARC1; p=reject; rua=mailto:dmarc@n4uecdqr.uriports.com; pct=100; adkim=s; aspf=r

📬 MTA-STS#

443ms
CheckResult
Status🧪 Testing
TXT record (_mta-sts)✓ Found
HTTPS policy✓ Valid
Modetesting
Policy ID20250608110042Z
max_age86400s
Policy MX—

📈 TLSRPT#

StatusReport address (rua)
✓ Enabled mailto:tlsrpt@n4uecdqr.uriports.com

📜 CAA Records#

✗ No CAA records — any CA may issue certificates

🧩 Web & zone#

latest probe, not this scan · checked 2026-10-08 04:26:42
www104.21.77.142 172.67.208.235 2606:4700:3032::6815:4d8e 2606:4700:3033::ac43:d0eb (AS13335) (address records, no CNAME)
www vs bare domainSame network
WildcardNo

✍️ DKIM keys#

1 found
SelectorCNAMEKey
google — RSA · ~2048 bit

DKIM selectors can't be listed, so we check the common ones (Microsoft 365, Google, Mailchimp, SendGrid, generic). Keys under other selectors aren't shown.

🔎 SPF check#

zone-wide SPF report

DNS lookups: 3/10 · policy: ~all

No problems found

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

122ms
CheckResult
Validation Status🔓 Insecure
AD Flag (resolver validates)✗ Not set
DS Record✗ Not found
DNSKEY Record✗ Not found
Flagsunsigned answer

🏷️ SOA#

48ms
FieldValue
Serial2404353314
Primary NS (MNAME)randy.ns.cloudflare.com
Responsible (RNAME)dns@cloudflare.com
Refresh10000s
Retry2400s
Expire604800s
Minimum (neg-cache TTL)1800s

📋 Registration#

WHOIS fetched 2026-10-13 07:56:33
FieldValue
RegistrarPunktum dk A/S (direct)
Registered2014-06-18
Expires2027-06-30 (256d)

🔗 Same registrant#

1 domain

Other .dk domains whose WHOIS registrant has the same name and postal address. Matched on a keyed hash: the registrant's details are not stored or shown. Covers only domains whose WHOIS we have fetched (refreshed about monthly).

DomainRegistrar
tolure.dkPunktum dk A/S (direct)
📋 WHOIS#

⏱️ Lookup Timing#

NS
49ms
A
53ms
MX
44ms
AAAA
45ms
TXT
160ms
CAA
51ms
HTTPS
48ms
TLSA
61ms
SOA
48ms
MTA-STS
443ms
DNSSEC
122ms
SRV
0ms
Total
1086ms

🕐 Scan History#

Scanned AtDurationRecordsDNSSEC
2026-10-08 04:26:42 851ms 2 NS 2 A 5 MX 🔓 Insecure
2026-09-30 21:39:16 1125ms 2 NS 2 A 5 MX 🔓 Insecure
2026-09-29 15:06:04 2316ms 2 NS 2 A 5 MX 🔓 Insecure
2026-09-26 05:46:38 1091ms 2 NS 2 A 5 MX 🔓 Insecure
2026-09-11 02:10:14 2880ms 2 NS 2 A 5 MX 🔓 Insecure
2026-09-04 00:09:33 912ms 2 NS 2 A 5 MX 🔓 Insecure
2026-07-10 21:33:17 10453ms 2 NS 2 A 5 MX 🔓 Insecure
2026-06-25 17:41:08 1437ms 2 NS 2 A 5 MX 🔓 Insecure
2026-06-24 03:34:58 4054ms 2 NS 2 A 5 MX 🔓 Insecure
2026-06-23 20:55:46 985ms 0 NS 0 A 0 MX ❓ Unknown
2026-06-20 07:15:00 1230ms 2 NS 2 A 5 MX 🔓 Insecure
2026-06-16 18:55:04 shown 1086ms 2 NS 2 A 5 MX 🔓 Insecure
dhd.dk [/] search Domains, Hosts & DNS — .dk zone