diction.dk

📜 Historical scan 2026-09-16 06:59:51  ·  ← Latest scan
⬇ Zone File 📜 Timeline & History ⚡ Scan Now

diction.dk is a .dk domain served by 2 nameservers (lauryn.ns.cloudflare.com, peyton.ns.cloudflare.com). It was registered on 1 December 2010 (WHOIS) and was already in the .dk zone when our tracking began on 16 June 2026. Its website address 15.197.129.158 is hosted by Amazon.com, Inc. (AS16509) in United States. Mail is handled by in1-smtp.messagingengine.com, in2-smtp.messagingengine.com. The zone is not DNSSEC-signed, has no DMARC policy and has no IPv6 address. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

2 records   30ms

🌍 A Records#

4 records   51ms

📧 MX Records#

2 records   33ms

🔷 AAAA Records (IPv6)#

✗ No AAAA records — IPv6 not configured

🔐 HTTPS Records#

✗ No HTTPS RR — no SVCB/HTTPS service binding

📝 TXT Records#

3 records   171ms
TXT Record
google-site-verification=vfNNekGopunS01r5uUFsDgxheTBV8na6dl3oEiCRjRI
protonmail-verification=cc14d4c82735dc164d65e8a3c3c70d6348cdd9ce
v=spf1 a mx include:spf.messagingengine.com include:sendgrid.net include:emsd1.com ?all

✉️ SPF#

PolicyRecord (diction.dk)
?all (neutral) v=spf1 a mx include:spf.messagingengine.com include:sendgrid.net include:emsd1.com ?all

📨 DMARC#

✗ No DMARC record — mail spoofing not restricted

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

✗ No CAA records — any CA may issue certificates

🧩 Web & zone#

latest probe, not this scan · checked 2026-10-12 22:56:53

✍️ DKIM keys#

2 found
SelectorCNAMEKey
s1 s1.domainkey.u2877834.wl085.sendgrid.net RSA · ~2048 bit
s2 s2.domainkey.u2877834.wl085.sendgrid.net RSA · ~1024 bit below 2048 bit

DKIM selectors can't be listed, so we check the common ones (Microsoft 365, Google, Mailchimp, SendGrid, generic). Keys under other selectors aren't shown.

🔎 SPF check#

zone-wide SPF report

DNS lookups: 6/10 · policy: ?all

  • warn "?all" is neutral: it gives receivers no guidance, much like having no SPF

🔏 ACME Challenge#

TypeNameValue
TXT _acme-challenge.diction.dk EC8UOg8zEhY7smLples6MhtcMTC3cMuoP4EAgolIlek
TXT _acme-challenge.diction.dk j6NeFOq6zT2WxfIj1byAJ-WBN2ahLACoP1611QrPP2g

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

132ms
CheckResult
Validation Status🔓 Insecure
AD Flag (resolver validates)✗ Not set
DS Record✗ Not found
DNSKEY Record✗ Not found
Flagsunsigned answer

🏷️ SOA#

0ms
FieldValue
Serial2414888990
Primary NS (MNAME)lauryn.ns.cloudflare.com
Responsible (RNAME)dns@cloudflare.com
Refresh10000s
Retry2400s
Expire604800s
Minimum (neg-cache TTL)1800s

📋 Registration#

WHOIS fetched 2026-10-14 04:02:31
FieldValue
RegistrarPunktum dk A/S (direct)
Registered2010-12-01
Expires2026-12-31 (72d)

🔗 Same registrant#

0 domains

Other .dk domains whose WHOIS registrant has the same name and postal address. Matched on a keyed hash: the registrant's details are not stored or shown. Covers only domains whose WHOIS we have fetched (refreshed about monthly).

No other domain with this registrant in our WHOIS data yet
📋 WHOIS#

⏱️ Lookup Timing#

NS
30ms
A
51ms
MX
33ms
AAAA
55ms
TXT
171ms
CAA
29ms
HTTPS
61ms
TLSA
389ms
SOA
0ms
MTA-STS
57ms
DNSSEC
132ms
SRV
51ms
Total
2644ms

🕐 Scan History#

Scanned AtDurationRecordsDNSSEC
2026-09-23 07:28:49 1504ms 2 NS 4 A 2 MX 🔓 Insecure
2026-09-16 06:59:51 shown 2644ms 2 NS 4 A 2 MX 🔓 Insecure
2026-08-27 10:24:33 1459ms 2 NS 4 A 2 MX 🔓 Insecure
2026-08-26 10:22:36 2203ms 2 NS 2 A 2 MX 🔓 Insecure
2026-07-30 05:22:14 7880ms 2 NS 2 A 2 MX 🔓 Insecure
2026-06-27 13:58:33 1119ms 2 NS 2 A 2 MX 🔓 Insecure
2026-06-26 20:28:40 1340ms 2 NS 2 A 2 MX 🔓 Insecure
2026-06-21 03:25:09 2323ms 2 NS 2 A 2 MX 🔓 Insecure
2026-06-19 22:41:17 2508ms 2 NS 2 A 2 MX 🔓 Insecure
2026-06-17 02:46:17 815ms 2 NS 2 A 2 MX 🔓 Insecure
dhd.dk [/] search Domains, Hosts & DNS — .dk zone