crt.dk

📜 Historical scan 2026-06-16 23:13:43  ·  ← Latest scan
⬇ Zone File 📜 Timeline & History ⚡ Scan Now

crt.dk is a .dk domain served by 2 nameservers (ns.scannet2.dk, ns2.scannet2.dk). It was already in the .dk zone when our tracking began on 16 June 2026. Its website address 198.202.211.1 is hosted by Cloudflare London, LLC (AS209242) in United States. Mail is handled by crt-dk.mail.protection.outlook.com. The zone is DNSSEC-signed and validates, publishes a DMARC policy and has no IPv6 address. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

2 records   37ms
NameserverIP addressesPTRASN / ISP
ns.scannet2.dk — — —
ns2.scannet2.dk — — —

🌍 A Records#

1 records   37ms
IPTTLPTRASNISP / OrgCIDRCountryCity
198.202.211.1 — — AS209242 Cloudflare London, LLC 198.202.211.0/24 🇺🇸 United States —

📧 MX Records#

1 records   24ms
PriorityTTLMail ServerIP addressesPTRASN
0 — crt-dk.mail.protection.outlook.com 52.101.68.21
52.101.68.27
52.101.68.5
52.101.73.8		 mail-db4pr02cu00205.inbound.protection.outlook.com
mail-db7pr03cu00503.inbound.protection.outlook.com
mail-du2pr03cu00105.inbound.protection.outlook.com
mail-am0pr04cu00500.inbound.protection.outlook.com		 AS8075 Microsoft Corporation
AS8075 Microsoft Corporation
AS8075 Microsoft Corporation
AS8075 Microsoft Corporation

🔷 AAAA Records (IPv6)#

✗ No AAAA records — IPv6 not configured

🔐 HTTPS Records#

✗ No HTTPS RR — no SVCB/HTTPS service binding

📝 TXT Records#

2 records   149ms
TXT Record
MS=AFC64591004E2A8F40FE4570DF40FB1E7DEA851E
v=spf1 include:web.shared.mysmtp.com ip4:80.63.32.62 include:servers.mcsv.net include:spf.protection.outlook.com -all

✉️ SPF#

PolicyRecord (crt.dk)
-all (hard fail) v=spf1 include:web.shared.mysmtp.com ip4:80.63.32.62 include:servers.mcsv.net include:spf.protection.outlook.com -all

📨 DMARC#

PolicyRecord (_dmarc.crt.dk)
p=none (monitor only) v=DMARC1; p=none;

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

✗ No CAA records — any CA may issue certificates

🧩 Web & zone#

latest probe, not this scan · checked 2026-10-08 15:05:13
www CNAMEcdn.webflow.com (all on webflow.com)
www vs bare domainSame network
WildcardNo
Denial of existenceNSEC3 · 1 iteration · 1-byte salt RFC 9276 recommends 0 iterations and no salt
CDS / CDNSKEYNone 0 CDS, 0 CDNSKEY

✍️ DKIM keys#

1 found
SelectorCNAMEKey
k1 dkim.mcsv.net RSA · ~1024 bit below 2048 bit

DKIM selectors can't be listed, so we check the common ones (Microsoft 365, Google, Mailchimp, SendGrid, generic). Keys under other selectors aren't shown.

🔎 SPF check#

zone-wide SPF report

DNS lookups: 6/10 · policy: -all

No problems found

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

52ms
CheckResult
Validation Status🔒 Secure
AD Flag (resolver validates)✓ Set
DS Record✓ Found
DNSKEY Record✓ Found
Flagsfully validated

🏷️ SOA#

23ms
FieldValue
Serial2026032602
Primary NS (MNAME)ns.scannet2.dk
Responsible (RNAME)hostmaster@scannet.dk
Refresh14400s
Retry3600s
Expire1209600s
Minimum (neg-cache TTL)300s

📋 Registration#

✗ No registration data yet — queued for a WHOIS lookup
📋 WHOIS#

⏱️ Lookup Timing#

NS
37ms
A
37ms
MX
24ms
AAAA
29ms
TXT
149ms
CAA
78ms
HTTPS
35ms
TLSA
920ms
SOA
23ms
MTA-STS
102ms
DNSSEC
52ms
SRV
0ms
Total
1303ms

🕐 Scan History#

Scanned AtDurationRecordsDNSSEC
2026-09-25 09:47:47 980ms 2 NS 1 A 1 MX 🔒 Secure
2026-09-15 17:21:29 1423ms 2 NS 1 A 1 MX 🔒 Secure
2026-08-26 02:28:14 1015ms 2 NS 1 A 1 MX 🔒 Secure
2026-07-25 08:40:16 25912ms 2 NS 1 A 1 MX 🔒 Secure
2026-06-28 11:05:56 1362ms 2 NS 1 A 1 MX 🔒 Secure
2026-06-26 00:46:23 1725ms 2 NS 1 A 1 MX 🔒 Secure
2026-06-16 23:13:43 shown 1303ms 2 NS 1 A 1 MX 🔒 Secure
2026-06-16 23:00:08 3209ms 2 NS 1 A 1 MX 🔒 Secure
2026-06-16 23:00:08 626ms 2 NS 1 A 1 MX 🔒 Secure
dhd.dk [/] search Domains, Hosts & DNS — .dk zone