cits.dk

📜 Historical scan 2026-06-20 22:49:51 · ← Latest scan

⬇ Zone File 📜 Timeline & History ⚡ Scan Now

cits.dk is a .dk domain served by 2 nameservers (graham.ns.cloudflare.com, katja.ns.cloudflare.com). It was already in the .dk zone when our tracking began on 16 June 2026. Mail is handled by smtp.google.com, mx1.smtp.goog and 3 more. The zone is DNSSEC-signed and validates, publishes a DMARC policy and has no IPv6 address. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

2 records 64ms

Nameserver	IP addresses	PTR	ASN / ISP
graham.ns.cloudflare.com	108.162.193.171 172.64.33.171 173.245.59.171 2606:4700:58::adf5:3bab 2803:f800:50::6ca2:c1ab 2a06:98c1:50::ac40:21ab	graham.ns.cloudflare.com graham.ns.cloudflare.com graham.ns.cloudflare.com graham.ns.cloudflare.com graham.ns.cloudflare.com graham.ns.cloudflare.com	AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc.
katja.ns.cloudflare.com	108.162.194.53 162.159.38.53 172.64.34.53 2606:4700:50::a29f:2635 2803:f800:50::6ca2:c235 2a06:98c1:50::ac40:2235	katja.ns.cloudflare.com katja.ns.cloudflare.com katja.ns.cloudflare.com katja.ns.cloudflare.com katja.ns.cloudflare.com katja.ns.cloudflare.com	AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc.

🌍 A Records#

🌍

No A records found

📧 MX Records#

5 records 67ms

Priority	TTL	Mail Server	IP addresses	PTR	ASN
1	300s	smtp.google.com	142.251.127.26 142.251.127.27 2a00:1450:4001:c21::1a 2a00:1450:4001:c21::1b	lcfrai-in-f26.1e100.net lcfrai-in-f27.1e100.net lcfrai-in-f26.1e100.net lcfrai-in-f27.1e100.net	AS15169 Google LLC AS15169 Google LLC AS15169 Google LLC AS15169 Google LLC
10	300s	mx1.smtp.goog	2001:4860:4802:32::97 216.239.32.151	— —	AS15169 Google LLC AS15169 Google LLC
20	300s	mx2.smtp.goog	2001:4860:4802:34::97 216.239.34.151	— —	AS15169 Google LLC AS15169 Google LLC
30	300s	mx3.smtp.goog	2001:4860:4802:36::97 216.239.36.151	— —	AS15169 Google LLC AS15169 Google LLC
40	300s	mx4.smtp.goog	2001:4860:4802:38::97 216.239.38.151	— —	AS15169 Google LLC AS15169 Google LLC

🔷 AAAA Records (IPv6)#

✗ No AAAA records — IPv6 not configured

🔐 HTTPS Records#

✗ No HTTPS RR — no SVCB/HTTPS service binding

📝 TXT Records#

2 records 275ms

TXT Record
google-site-verification=yi8_9V8eN-mJ2nxkOFt5Ue_I00qMsESYVUl_QvNu3rw
v=spf1 include:_spf.google.com ~all

✉️ SPF#

Policy	Record (cits.dk)
~all (soft fail)	v=spf1 include:_spf.google.com ~all

📨 DMARC#

Policy	Record (_dmarc.cits.dk)
p=reject	v=DMARC1; p=reject; pct=100; rua=mailto:469ejltc@ag.eu.dmarcian.com;

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

✗ No CAA records — any CA may issue certificates

🧩 Web & zone#

latest probe, not this scan · checked 2026-10-13 01:29:13

www	Exists, no address
www vs bare domain	Neither resolves cits.dk: no address www.cits.dk: no address
Wildcard	No
Denial of existence	Compact NSEC (RFC 9824, "black lies") not walkable
CDS / CDNSKEY	Published: key rollovers can be automated with the registry (RFC 7344/8078) 1 CDS, 1 CDNSKEY

✍️ DKIM keys#

1 found

Selector	CNAME	Key
google	—	RSA · ~2048 bit

DKIM selectors can't be listed, so we check the common ones (Microsoft 365, Google, Mailchimp, SendGrid, generic). Keys under other selectors aren't shown.

🔎 SPF check#

zone-wide SPF report

DNS lookups: 1/10 · policy: ~all

No problems found

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

2116ms

Check	Result
Validation Status	🔒 Secure
AD Flag (resolver validates)	✓ Set
DS Record	✓ Found
DNSKEY Record	✓ Found
Flags	resolution failed: ncache nxrrset

🏷️ SOA#

0ms

Field	Value
Serial	2407435240
Primary NS (MNAME)	graham.ns.cloudflare.com
Responsible (RNAME)	dns@cloudflare.com
Refresh	10000s
Retry	2400s
Expire	604800s
Minimum (neg-cache TTL)	1800s

📋 Registration#

✗ No registration data yet — queued for a WHOIS lookup

📋 WHOIS#

⏱️ Lookup Timing#

64ms

78ms

67ms

AAAA

61ms

TXT

275ms

CAA

79ms

HTTPS

92ms

TLSA

266ms

SOA

0ms

MTA-STS

73ms

DNSSEC

2116ms

SRV

166ms

Total

3252ms

🕐 Scan History#

Scanned At	Duration	Records	DNSSEC
2026-09-25 06:28:43	1152ms	2 NS 0 A 5 MX	🔒 Secure
2026-09-24 06:18:15	1217ms	2 NS 0 A 5 MX	🔒 Secure
2026-09-23 05:33:27	1042ms	2 NS 0 A 5 MX	🔒 Secure
2026-09-15 05:57:14	1440ms	2 NS 0 A 5 MX	🔒 Secure
2026-09-01 02:05:38	1309ms	2 NS 0 A 5 MX	🔒 Secure
2026-08-07 19:31:45	1919ms	2 NS 0 A 5 MX	🔒 Secure
2026-07-26 22:03:44	2745ms	2 NS 0 A 5 MX	🔒 Secure
2026-07-25 21:23:54	2265ms	2 NS 0 A 5 MX	🔒 Secure
2026-07-15 13:59:07	2217ms	2 NS 0 A 5 MX	🔒 Secure
2026-06-27 03:17:27	2088ms	2 NS 0 A 5 MX	🔒 Secure
2026-06-20 22:49:51 shown	3252ms	2 NS 0 A 5 MX	🔒 Secure
2026-06-16 20:55:55	768ms	2 NS 0 A 5 MX	🔒 Secure