canf.dk

📜 Historical scan 2026-10-01 08:49:53  ·  ← Latest scan
⬇ Zone File 📜 Timeline & History ⚡ Scan Now

canf.dk is a .dk domain served by 2 nameservers (gabe.ns.cloudflare.com, lindsey.ns.cloudflare.com). It was registered on 29 September 2026 (WHOIS) and first appeared in the .dk zone on 30 September 2026. Its website address 104.21.76.248 is hosted by Cloudflare, Inc. (AS13335). Mail is handled by mx01.mail.icloud.com, mx02.mail.icloud.com. The zone is not DNSSEC-signed, publishes a DMARC policy and is reachable over IPv6. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

2 records   56ms

🌍 A Records#

2 records   42ms
IPTTLPTRASNISP / OrgCIDRCountryCity
104.21.76.248 300s — AS13335 Cloudflare, Inc. 104.21.0.0/17 — —
172.67.202.129 300s — AS13335 Cloudflare, Inc. 172.67.128.0/17 — —

📧 MX Records#

2 records   46ms

🔷 AAAA Records (IPv6)#

2 records   42ms

🔐 HTTPS Records#

1 records   38ms
PriorityTargetSvcParams
1 service . alpn="h3,h2" ipv4hint=104.21.76.248,172.67.202.129 ech=AEX+DQBBIQAgACDepu5XFhjNsTaJykFP5aC6eLhW+KKUXtgKGuWt2c26QgAEAAEAAQASY2xvdWRmbGFyZS1lY2guY29tAAA= ipv6hint=2606:4700:3033::6815:4cf8,2606:4700:3034::ac43:ca81

📝 TXT Records#

2 records   186ms
TXT Record
apple-domain=ylLEOLjFPWblAHO4
v=spf1 include:icloud.com ~all

✉️ SPF#

PolicyRecord (canf.dk)
~all (soft fail) v=spf1 include:icloud.com ~all

📨 DMARC#

PolicyRecord (_dmarc.canf.dk)
p=none (monitor only) v=DMARC1; p=none;

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

✗ No CAA records — any CA may issue certificates

🧩 Web & zone#

latest probe, not this scan · checked 2026-10-08 21:11:34
www104.21.76.248 172.67.202.129 2606:4700:3033::6815:4cf8 2606:4700:3034::ac43:ca81 (AS13335) (address records, no CNAME)
www vs bare domainSame network
WildcardNo
Denial of existenceCompact NSEC (RFC 9824, "black lies") not walkable
CDS / CDNSKEYPublished: key rollovers can be automated with the registry (RFC 7344/8078) 1 CDS, 1 CDNSKEY

🔎 SPF check#

zone-wide SPF report

DNS lookups: 5/10 · policy: ~all

No problems found

🔏 ACME Challenge#

TypeNameValue
TXT _acme-challenge.canf.dk EgzbrwrcVrkoee9GLXe-bKauslLezmf14JzqMveRGSI
TXT _acme-challenge.canf.dk IkhG7FXOaonijPGFVR7dh4XQPKgGAD2ONHCbZa0gTvE

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

130ms
CheckResult
Validation Status🔓 Insecure
AD Flag (resolver validates)✗ Not set
DS Record✗ Not found
DNSKEY Record✗ Not found
Flagsunsigned answer

🏷️ SOA#

28ms
FieldValue
Serial2416291967
Primary NS (MNAME)gabe.ns.cloudflare.com
Responsible (RNAME)dns@cloudflare.com
Refresh10000s
Retry2400s
Expire604800s
Minimum (neg-cache TTL)1800s

📋 Registration#

WHOIS fetched 2026-10-04 09:21:41
FieldValue
RegistrarSimply.com A/S
Registered2026-09-29
Expires2027-09-28 (345d)
📋 WHOIS#

⏱️ Lookup Timing#

NS
56ms
A
42ms
MX
46ms
AAAA
42ms
TXT
186ms
CAA
32ms
HTTPS
38ms
TLSA
302ms
SOA
28ms
MTA-STS
59ms
DNSSEC
130ms
SRV
57ms
Total
1217ms

🕐 Scan History#

Scanned AtDurationRecordsDNSSEC
2026-10-08 21:11:34 576ms 2 NS 2 A 2 MX 🔒 Secure
2026-10-04 08:55:51 654ms 2 NS 2 A 2 MX 🔒 Secure
2026-10-03 08:54:53 623ms 2 NS 2 A 2 MX 🔓 Insecure
2026-10-02 08:54:16 2228ms 2 NS 2 A 2 MX 🔓 Insecure
2026-10-01 08:49:53 shown 1217ms 2 NS 2 A 2 MX 🔓 Insecure
2026-09-30 08:45:57 1022ms 3 NS 1 A 2 MX 🔒 Secure
dhd.dk [/] search Domains, Hosts & DNS — .dk zone