candox.dk

📜 Historical scan 2026-06-16 19:10:40  ·  ← Latest scan
⬇ Zone File 📜 Timeline & History ⚡ Scan Now

candox.dk is a .dk domain served by 3 nameservers (ns1.simply.com, ns2.simply.com, ns3.simply.com). It was registered on 9 December 2014 (WHOIS) and was already in the .dk zone when our tracking began on 16 June 2026. Its website address 94.231.103.122 is hosted by team.blue Denmark A/S (AS48854) in Denmark. Mail is handled by smtp.google.com. The zone is not DNSSEC-signed, publishes a DMARC policy and has no IPv6 address. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

3 records   66ms
NameserverIP addressesPTRASN / ISP
ns1.simply.com — — —
ns2.simply.com — — —
ns3.simply.com — — —

🌍 A Records#

1 records   74ms

📧 MX Records#

1 records   64ms

🔷 AAAA Records (IPv6)#

✗ No AAAA records — IPv6 not configured

🔐 HTTPS Records#

✗ No HTTPS RR — no SVCB/HTTPS service binding

📝 TXT Records#

3 records   178ms
TXT Record
google-site-verification=25XVAiaZLdYWxDGvAndHqY6-QdxdEsf0s49msa8a5mI
google-site-verification=BzrkLQi8ehr7VRnLxbNcq70eAPchtQP0Jy7tfIC8cxI
v=spf1 include:_spf.google.com include:spf.one.com include:spf.simply.com -all

✉️ SPF#

PolicyRecord (candox.dk)
-all (hard fail) v=spf1 include:_spf.google.com include:spf.one.com include:spf.simply.com -all

📨 DMARC#

PolicyRecord (_dmarc.candox.dk)
p=reject v=DMARC1; p=reject; rua=mailto:dmarc@robot.simply.com; ruf=mailto:dmarc@robot.simply.com;

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

✗ No CAA records — any CA may issue certificates

🧩 Web & zone#

latest probe, not this scan · checked 2026-10-08 03:41:57
www94.231.103.122 (AS48854) (address records, no CNAME)
www vs bare domainSame network
candox.dk: 94.231.103.122 (AS48854)
www.candox.dk: 94.231.103.122 (AS48854)
WildcardYes: any name under the zone resolves
Denial of existenceNSEC zone can be walked (all names enumerable)
CDS / CDNSKEYPublished: key rollovers can be automated with the registry (RFC 7344/8078) 1 CDS, 1 CDNSKEY

✍️ DKIM keys#

2 found
SelectorCNAMEKey
s1 s1.domainkey.u37693368.wl119.sendgrid.net RSA · ~2048 bit
s2 s2.domainkey.u37693368.wl119.sendgrid.net RSA · ~2048 bit

DKIM selectors can't be listed, so we check the common ones (Microsoft 365, Google, Mailchimp, SendGrid, generic). Keys under other selectors aren't shown.

🔎 SPF check#

zone-wide SPF report

DNS lookups: 3/10 · policy: -all

  • error include:spf.one.com has no SPF record: receivers that reach it return permerror (RFC 7208 §5.2)

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

205ms
CheckResult
Validation Status🔓 Insecure
AD Flag (resolver validates)✗ Not set
DS Record✗ Not found
DNSKEY Record✓ Found
Flagsunsigned answer

🏷️ SOA#

64ms
FieldValue
Serial2025102004
Primary NS (MNAME)ns1.simply.com
Responsible (RNAME)hostmaster@simply.com
Refresh14400s
Retry3600s
Expire1209600s
Minimum (neg-cache TTL)3600s

📋 Registration#

WHOIS fetched 2026-10-04 01:24:01
FieldValue
RegistrarSimply.com A/S
Registered2014-12-09
Expires2026-12-31 (73d)
📋 WHOIS#

⏱️ Lookup Timing#

NS
66ms
A
74ms
MX
64ms
AAAA
62ms
TXT
178ms
CAA
74ms
HTTPS
67ms
TLSA
129ms
SOA
64ms
MTA-STS
24ms
DNSSEC
205ms
SRV
0ms
Total
656ms

🕐 Scan History#

Scanned AtDurationRecordsDNSSEC
2026-10-04 01:17:22 666ms 3 NS 1 A 1 MX 🔓 Insecure
2026-09-25 23:27:11 585ms 3 NS 1 A 1 MX 🔓 Insecure
2026-07-02 09:47:08 1232ms 3 NS 1 A 1 MX 🔓 Insecure
2026-06-25 15:54:14 691ms 3 NS 1 A 1 MX 🔓 Insecure
2026-06-16 19:10:40 shown 656ms 3 NS 1 A 1 MX 🔓 Insecure
dhd.dk [/] search Domains, Hosts & DNS — .dk zone