ekch.dk is a .dk domain served by 4 nameservers (ns1-09.azure-dns.com, ns2-09.azure-dns.net, ns3-09.azure-dns.org and 1 more). It was already in the .dk zone when our tracking began on 16 June 2026. The zone is not DNSSEC-signed, publishes a DMARC policy and has no IPv6 address. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.
| TXT Record |
|---|
| v=spf1 -all |
| Policy | Record (ekch.dk) |
|---|---|
| -all (hard fail) | v=spf1 -all |
| Policy | Record (_dmarc.ekch.dk) |
|---|---|
| p=reject | v=DMARC1; p=reject; rua=mailto:dmarc-rua@cph.dk,mailto:m81dcjad@ag.eu.dmarcian.com; ruf=mailto:dmarc-ruf@cph.dk; fo=1; |
| www | 194.182.255.50 (AS3292) (address records, no CNAME) |
| www vs bare domain | Only www resolves (all like this) |
| Wildcard | No |
| Denial of existence | Compact NSEC (RFC 9824, "black lies") not walkable |
| CDS / CDNSKEY | None 0 CDS, 0 CDNSKEY |
DNS lookups: 0/10 · policy: -all
No problems found| Check | Result |
|---|---|
| Validation Status | 🔓 Insecure |
| AD Flag (resolver validates) | ✗ Not set |
| DS Record | ✗ Not found |
| DNSKEY Record | ✗ Not found |
| Flags | resolution failed: ncache nxrrset |
| Field | Value |
|---|---|
| Serial | 1 |
| Primary NS (MNAME) | ns1-09.azure-dns.com |
| Responsible (RNAME) | azuredns-hostmaster@microsoft.com |
| Refresh | 3600s |
| Retry | 300s |
| Expire | 2419200s |
| Minimum (neg-cache TTL) | 300s |
| Scanned At | Duration | Records | DNSSEC |
|---|---|---|---|
| 2026-10-26 07:45:46 | 405ms | 4 NS 0 A 0 MX | 🔒 Secure |
| 2026-06-25 23:16:34 | 621ms | 4 NS 0 A 0 MX | 🔓 Insecure |
| 2026-06-22 19:23:02 shown | 913ms | 4 NS 0 A 0 MX | 🔓 Insecure |
| 2026-06-22 11:40:33 | 920ms | 0 NS 0 A 0 MX | ❓ Unknown |
| 2026-06-17 06:26:08 | 358ms | 4 NS 0 A 0 MX | 🔓 Insecure |