citrocasa.dk

📜 Historical scan 2026-09-05 13:45:39 · ← Latest scan

⬇ Zone File 📜 Timeline & History ⚡ Scan Now

citrocasa.dk is a .dk domain served by 3 nameservers (ns.kunden.de, sec.avency.de, theopolis.avency.de). It was registered on 1 November 2011 (WHOIS) and was already in the .dk zone when our tracking began on 16 June 2026. Its website address 195.60.121.90 is hosted by avency GmbH (AS12371) in Germany. Mail is handled by .. The zone is not DNSSEC-signed, publishes a DMARC policy and has no IPv6 address. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

3 records 29ms

Nameserver	IP addresses	PTR	ASN / ISP
ns.kunden.de	20.86.163.145	ns.kunden.de	AS8075 Microsoft Corporation
sec.avency.de	195.60.126.189	sec.avency.de	AS12371 avency GmbH
theopolis.avency.de	195.60.102.1	theopolis.avency.de	AS12371 avency GmbH

🌍 A Records#

1 records 57ms

IP	TTL	PTR	ASN	ISP / Org	CIDR	Country	City
195.60.121.90	86400s	www.vecchia-romagna.de	AS12371	avency GmbH	195.60.112.0/20	🇩🇪 Germany	—

📧 MX Records#

1 records 70ms

Priority	TTL	Mail Server	IP addresses	PTR	ASN
0	86400s	. Null MX — domain accepts no email (RFC 7505)

🔷 AAAA Records (IPv6)#

✗ No AAAA records — IPv6 not configured

🔐 HTTPS Records#

✗ No HTTPS RR — no SVCB/HTTPS service binding

📝 TXT Records#

1 records 373ms

TXT Record
v=spf1 -all

✉️ SPF#

Policy	Record (citrocasa.dk)
-all (hard fail)	v=spf1 -all

📨 DMARC#

Policy	Record (_dmarc.citrocasa.dk)
p=reject	v=DMARC1; p=reject; sp=reject; aspf=s; adkim=s;

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

✗ No CAA records — any CA may issue certificates

🧩 Web & zone#

latest probe, not this scan · checked 2026-10-11 14:19:03

www CNAME	citrocasa.dk (all on citrocasa.dk) → 195.60.121.90 (AS12371)
www vs bare domain	Same network citrocasa.dk: 195.60.121.90 (AS12371) www.citrocasa.dk: 195.60.121.90 (AS12371)
Wildcard	No

🔎 SPF check#

zone-wide SPF report

DNS lookups: 0/10 · policy: -all

No problems found

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

9088ms

Check	Result
Validation Status	🔓 Insecure
AD Flag (resolver validates)	✗ Not set
DS Record	✗ Not found
DNSKEY Record	✗ Not found
Flags	unsigned answer

🏷️ SOA#

0ms

Field	Value
Serial	2025090902
Primary NS (MNAME)	theopolis.avency.de
Responsible (RNAME)	postmaster@theopolis.avency.de
Refresh	28800s
Retry	7200s
Expire	604800s
Minimum (neg-cache TTL)	86400s

📋 Registration#

WHOIS fetched 2026-10-11 02:22:44

Field	Value
Registrar	Key-Systems GmbH
Registered	2011-11-01
Expires	2026-11-30 (43d)

📋 WHOIS#

⏱️ Lookup Timing#

29ms

57ms

70ms

AAAA

52ms

TXT

373ms

CAA

59ms

HTTPS

79ms

TLSA

153ms

SOA

0ms

MTA-STS

96ms

DNSSEC

9088ms

SRV

120ms

Total

9956ms

🕐 Scan History#

Scanned At	Duration	Records	DNSSEC
2026-09-20 23:55:04	2761ms	3 NS 1 A 1 MX	🔓 Insecure
2026-09-05 13:45:39 shown	9956ms	3 NS 1 A 1 MX	🔓 Insecure
2026-09-03 05:21:05	1390ms	3 NS 1 A 1 MX	🔓 Insecure
2026-07-02 11:51:39	813ms	3 NS 1 A 1 MX	🔓 Insecure
2026-06-26 23:30:33	724ms	3 NS 1 A 1 MX	🔓 Insecure
2026-06-16 20:55:14	716ms	3 NS 1 A 0 MX	🔓 Insecure