d20.dk

📜 Historical scan 2026-06-16 23:35:56 · ← Latest scan

⬇ Zone File 📜 Timeline & History ⚡ Scan Now

d20.dk is a .dk domain served by 2 nameservers (nataly.ns.cloudflare.com, pranab.ns.cloudflare.com). It was already in the .dk zone when our tracking began on 16 June 2026. Its website address 104.21.94.224 is hosted by Cloudflare, Inc. (AS13335). Mail is handled by route3.mx.cloudflare.net, route2.mx.cloudflare.net and 1 more. The zone is not DNSSEC-signed, publishes a DMARC policy and is reachable over IPv6. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

2 records 278ms

Nameserver	IP addresses	PTR	ASN / ISP
nataly.ns.cloudflare.com	—	—	—
pranab.ns.cloudflare.com	—	—	—

🌍 A Records#

2 records 297ms

IP	TTL	PTR	ASN	ISP / Org	CIDR	Country	City
104.21.94.224	—	—	AS13335	Cloudflare, Inc.	104.21.0.0/17	—	—
172.67.140.219	—	—	AS13335	Cloudflare, Inc.	172.67.128.0/17	—	—

📧 MX Records#

3 records 229ms

Priority	TTL	Mail Server	IP addresses	PTR	ASN
10	—	route3.mx.cloudflare.net	162.159.205.23 162.159.205.24 162.159.205.25	route3.mx.cloudflare.net route3.mx.cloudflare.net route3.mx.cloudflare.net	AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc.
50	—	route2.mx.cloudflare.net	162.159.205.17 162.159.205.18 162.159.205.19	route2.mx.cloudflare.net route2.mx.cloudflare.net route2.mx.cloudflare.net	AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc.
56	—	route1.mx.cloudflare.net	162.159.205.11 162.159.205.12 162.159.205.13	route1.mx.cloudflare.net route1.mx.cloudflare.net route1.mx.cloudflare.net	AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc.

🔷 AAAA Records (IPv6)#

2 records 261ms

IPv6 Address	TTL	PTR	ASN	ISP / Org	CIDR	Country	City
2606:4700:3032::6815:5ee0	—	—	AS13335	Cloudflare, Inc.	2606:4700:3000:0:0:0:0:0/42	—	—
2606:4700:3035::ac43:8cdb	—	—	AS13335	Cloudflare, Inc.	2606:4700:3000:0:0:0:0:0/42	—	—

🔐 HTTPS Records#

1 records 259ms

Priority	Target	SvcParams
1 service	.	alpn="h3,h2" ipv4hint=104.21.94.224,172.67.140.219 ech=AEX+DQBBxAAgACDj7TsM1XQ2Je0M+m3yUJPxgZYPa5bYDBn/ZlIFcoqSfQAEAAEAAQASY2xvdWRmbGFyZS1lY2guY29tAAA= ipv6hint=2606:4700:3032::6815:5ee0,2606:4700:3035::ac43:8cdb

📝 TXT Records#

1 records 562ms

TXT Record
v=spf1 include:_spf.mx.cloudflare.net ~all

✉️ SPF#

Policy	Record (d20.dk)
~all (soft fail)	v=spf1 include:_spf.mx.cloudflare.net ~all

📨 DMARC#

Policy	Record (_dmarc.d20.dk)
p=reject	v=DMARC1; p=reject; sp=reject; adkim=s; aspf=s;

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

✗ No CAA records — any CA may issue certificates

🧩 Web & zone#

latest probe, not this scan · checked 2026-10-08 05:22:29

www	188.114.96.1 188.114.97.1 2606:4700:3031::6815:5ee0 2606:4700:3032::ac43:8cdb (AS13335) (address records, no CNAME)
www vs bare domain	Same network d20.dk: 104.21.94.224 172.67.140.219 2606:4700:3031::6815:5ee0 2606:4700:3032::ac43:8cdb (AS13335) www.d20.dk: 188.114.96.1 188.114.97.1 2606:4700:3031::6815:5ee0 2606:4700:3032::ac43:8cdb (AS13335)
Wildcard	Yes: any name under the zone resolves

✍️ DKIM keys#

6 found

Selector	CNAME	Key
default	—	Revoked (empty key)
dkim	—	Revoked (empty key)
k1	—	Revoked (empty key)
mail	—	Revoked (empty key)
s1	—	Revoked (empty key)
s2	—	Revoked (empty key)

DKIM selectors can't be listed, so we check the common ones (Microsoft 365, Google, Mailchimp, SendGrid, generic). Keys under other selectors aren't shown.

🔎 SPF check#

zone-wide SPF report

DNS lookups: 1/10 · policy: ~all

No problems found

🔗 TLSA / DANE#

9 records 401ms

Service / Owner	Type	Cert association
SMTP _25._tcp.route1.mx.cloudflare.net	DANE-EE · SPKI · SHA-256	0F0C6C164A36F97E7B4C5A5B69D6F4F2…
SMTP _25._tcp.route1.mx.cloudflare.net	DANE-EE · SPKI · SHA-256	9BE5B7D47F9EFF930C11EB04D27CAE6B…
SMTP _25._tcp.route1.mx.cloudflare.net	DANE-TA · SPKI · SHA-256	59E738E674221702AF1EDB87C5200C1A…
SMTP _25._tcp.route2.mx.cloudflare.net	DANE-EE · SPKI · SHA-256	9BE5B7D47F9EFF930C11EB04D27CAE6B…
SMTP _25._tcp.route2.mx.cloudflare.net	DANE-TA · SPKI · SHA-256	59E738E674221702AF1EDB87C5200C1A…
SMTP _25._tcp.route2.mx.cloudflare.net	DANE-EE · SPKI · SHA-256	0F0C6C164A36F97E7B4C5A5B69D6F4F2…
SMTP _25._tcp.route3.mx.cloudflare.net	DANE-EE · SPKI · SHA-256	9BE5B7D47F9EFF930C11EB04D27CAE6B…
SMTP _25._tcp.route3.mx.cloudflare.net	DANE-TA · SPKI · SHA-256	59E738E674221702AF1EDB87C5200C1A…
SMTP _25._tcp.route3.mx.cloudflare.net	DANE-EE · SPKI · SHA-256	0F0C6C164A36F97E7B4C5A5B69D6F4F2…

🔐 DNSSEC#

360ms

Check	Result
Validation Status	🔓 Insecure
AD Flag (resolver validates)	✗ Not set
DS Record	✗ Not found
DNSKEY Record	✗ Not found
Flags	unsigned answer

🏷️ SOA#

271ms

Field	Value
Serial	2405943935
Primary NS (MNAME)	nataly.ns.cloudflare.com
Responsible (RNAME)	dns@cloudflare.com
Refresh	10000s
Retry	2400s
Expire	604800s
Minimum (neg-cache TTL)	1800s

📋 Registration#

✗ No registration data yet — queued for a WHOIS lookup

📋 WHOIS#

⏱️ Lookup Timing#

278ms

297ms

229ms

AAAA

261ms

TXT

562ms

CAA

279ms

HTTPS

259ms

TLSA

401ms

SOA

271ms

MTA-STS

382ms

DNSSEC

360ms

SRV

0ms

Total

3488ms

🕐 Scan History#

Scanned At	Duration	Records	DNSSEC
2026-09-30 03:47:51	1966ms	2 NS 2 A 3 MX	🔓 Insecure
2026-09-29 03:40:01	1149ms	2 NS 2 A 3 MX	🔓 Insecure
2026-09-16 18:39:57	1244ms	2 NS 2 A 3 MX	🔓 Insecure
2026-08-07 22:13:44	2139ms	2 NS 2 A 3 MX	🔓 Insecure
2026-07-16 07:40:42	2032ms	2 NS 2 A 3 MX	🔓 Insecure
2026-06-26 18:00:50	1280ms	2 NS 2 A 3 MX	🔓 Insecure
2026-06-16 23:35:56 shown	3488ms	2 NS 2 A 3 MX	🔓 Insecure
2026-06-16 23:31:06	845ms	2 NS 2 A 3 MX	🔓 Insecure