csis-cert.dk

📜 Historical scan 2026-06-16 23:05:13 · ← Latest scan

⬇ Zone File 📜 Timeline & History ⚡ Scan Now

csis-cert.dk is a .dk domain served by 4 nameservers (ns-cloud-e1.googledomains.com, ns-cloud-e2.googledomains.com, ns-cloud-e3.googledomains.com and 1 more). It was already in the .dk zone when our tracking began on 16 June 2026. Its website address 116.203.43.243 is hosted by Hetzner Online GmbH (AS24940) in Germany. The zone is DNSSEC-signed and validates, publishes a DMARC policy and has no IPv6 address. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

4 records 75ms

Nameserver	IP addresses	PTR	ASN / ISP
ns-cloud-e1.googledomains.com	—	—	—
ns-cloud-e2.googledomains.com	—	—	—
ns-cloud-e3.googledomains.com	—	—	—
ns-cloud-e4.googledomains.com	—	—	—

🌍 A Records#

1 records 99ms

IP	TTL	PTR	ASN	ISP / Org	CIDR	Country	City
116.203.43.243	—	static.243.43.203.116.clients.your-server.de	AS24940	Hetzner Online GmbH	116.202.0.0/15	🇩🇪 Germany	Nuremberg

📧 MX Records#

📧

No MX records found

🔷 AAAA Records (IPv6)#

✗ No AAAA records — IPv6 not configured

🔐 HTTPS Records#

✗ No HTTPS RR — no SVCB/HTTPS service binding

📝 TXT Records#

1 records 227ms

TXT Record
v=spf1 -all

✉️ SPF#

Policy	Record (csis-cert.dk)
-all (hard fail)	v=spf1 -all

📨 DMARC#

Policy	Record (_dmarc.csis-cert.dk)
p=reject	v=DMARC1; p=reject; rua=mailto:btpv5zey@ag.dmarcian.com; ruf=mailto:btpv5zey@fr.dmarcian.com;

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

✗ No CAA records — any CA may issue certificates

🧩 Web & zone#

latest probe, not this scan · checked 2026-10-10 10:17:49

www	NXDOMAIN
www vs bare domain	www does not resolve csis-cert.dk: 116.203.43.243 (AS24940) www.csis-cert.dk: no address (all like this)
Wildcard	No
Denial of existence	NSEC3 · 1 iteration · 8-byte salt RFC 9276 recommends 0 iterations and no salt
CDS / CDNSKEY	Published: key rollovers can be automated with the registry (RFC 7344/8078) 1 CDS, 0 CDNSKEY

🔎 SPF check#

zone-wide SPF report

DNS lookups: 0/10 · policy: -all

No problems found

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

173ms

Check	Result
Validation Status	🔒 Secure
AD Flag (resolver validates)	✓ Set
DS Record	✓ Found
DNSKEY Record	✓ Found
Flags	fully validated

🏷️ SOA#

76ms

Field	Value
Serial	1
Primary NS (MNAME)	ns-cloud-e1.googledomains.com
Responsible (RNAME)	cloud-dns-hostmaster@google.com
Refresh	21600s
Retry	3600s
Expire	259200s
Minimum (neg-cache TTL)	300s

📋 Registration#

✗ No registration data yet — queued for a WHOIS lookup

📋 WHOIS#

⏱️ Lookup Timing#

75ms

99ms

78ms

AAAA

66ms

TXT

227ms

CAA

64ms

HTTPS

87ms

TLSA

2040ms

SOA

76ms

MTA-STS

68ms

DNSSEC

173ms

SRV

0ms

Total

2480ms

🕐 Scan History#

Scanned At	Duration	Records	DNSSEC
2026-10-03 05:39:04	786ms	4 NS 1 A 0 MX	🔒 Secure
2026-10-01 04:52:39	833ms	4 NS 1 A 0 MX	🔒 Secure
2026-06-21 14:21:21	592ms	4 NS 1 A 0 MX	🔒 Secure
2026-06-20 16:19:24	745ms	4 NS 1 A 0 MX	🔒 Secure
2026-06-16 23:05:13 shown	2480ms	4 NS 1 A 0 MX	🔒 Secure