extensa.dk

📜 Historical scan 2026-08-28 18:56:40  ·  ← Latest scan
⬇ Zone File 📜 Timeline & History ⚡ Scan Now

extensa.dk is a .dk domain served by 2 nameservers (noor.ns.cloudflare.com, yadiel.ns.cloudflare.com). It was already in the .dk zone when our tracking began on 16 June 2026. Its website address 104.26.4.52 is hosted by Cloudflare, Inc. (AS13335). Mail is handled by mail.bradwell.nl. The zone is not DNSSEC-signed, publishes a DMARC policy and is reachable over IPv6. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

2 records   76ms
NameserverIP addressesPTRASN / ISP
noor.ns.cloudflare.com 108.162.194.74
162.159.38.74
172.64.34.74
2606:4700:50::a29f:264a
2803:f800:50::6ca2:c24a
2a06:98c1:50::ac40:224a		 noor.ns.cloudflare.com
noor.ns.cloudflare.com
noor.ns.cloudflare.com
noor.ns.cloudflare.com
noor.ns.cloudflare.com
noor.ns.cloudflare.com		 AS13335 Cloudflare, Inc.
AS13335 Cloudflare, Inc.
AS13335 Cloudflare, Inc.
AS13335 Cloudflare, Inc.
AS13335 Cloudflare, Inc.
AS13335 Cloudflare, Inc.
yadiel.ns.cloudflare.com 108.162.195.4
162.159.44.4
172.64.35.4
2606:4700:58::a29f:2c04
2803:f800:50::6ca2:c304
2a06:98c1:50::ac40:2304		 yadiel.ns.cloudflare.com
yadiel.ns.cloudflare.com
yadiel.ns.cloudflare.com
yadiel.ns.cloudflare.com
yadiel.ns.cloudflare.com
yadiel.ns.cloudflare.com		 AS13335 Cloudflare, Inc.
AS13335 Cloudflare, Inc.
AS13335 Cloudflare, Inc.
AS13335 Cloudflare, Inc.
AS13335 Cloudflare, Inc.
AS13335 Cloudflare, Inc.

🌍 A Records#

3 records   132ms
IPTTLPTRASNISP / OrgCIDRCountryCity
104.26.4.52 300s — AS13335 Cloudflare, Inc. 104.26.0.0/20 — —
104.26.5.52 300s — AS13335 Cloudflare, Inc. 104.26.0.0/20 — —
172.67.75.209 300s — AS13335 Cloudflare, Inc. 172.67.64.0/18 — —

📧 MX Records#

1 records   75ms
PriorityTTLMail ServerIP addressesPTRASN
0 300s mail.bradwell.nl 74.63.240.58 mail.bradwell.nl AS46475 Limestone Networks, Inc.

🔷 AAAA Records (IPv6)#

3 records   132ms
IPv6 AddressTTLPTRASNISP / OrgCIDRCountryCity
2606:4700:20::681a:434 300s — AS13335 Cloudflare, Inc. 2606:4700:0:0:0:0:0:0/41 — —
2606:4700:20::681a:534 300s — AS13335 Cloudflare, Inc. 2606:4700:0:0:0:0:0:0/41 — —
2606:4700:20::ac43:4bd1 300s — AS13335 Cloudflare, Inc. 2606:4700:0:0:0:0:0:0/41 — —

🔐 HTTPS Records#

1 records   141ms
PriorityTargetSvcParams
1 service . alpn="h3,h2" ipv4hint=104.26.4.52,104.26.5.52,172.67.75.209 ipv6hint=2606:4700:20::681a:434,2606:4700:20::681a:534,2606:4700:20::ac43:4bd1

📝 TXT Records#

1 records   607ms
TXT Record
v=spf1 ip4:64.31.1.98 ip4:95.168.186.193 ip4:95.168.190.151 ip4:95.154.201.97 ip4:95.154.201.238 ip4:74.63.240.58 +a +mx ~all

✉️ SPF#

PolicyRecord (extensa.dk)
~all (soft fail) v=spf1 ip4:64.31.1.98 ip4:95.168.186.193 ip4:95.168.190.151 ip4:95.154.201.97 ip4:95.154.201.238 ip4:74.63.240.58 +a +mx ~all

📨 DMARC#

PolicyRecord (_dmarc.extensa.dk)
p=reject v=DMARC1; p=reject; rua=mailto:dmarc@bradwell.nl; adkim=s; aspf=s

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

✗ No CAA records — any CA may issue certificates

🧩 Web & zone#

latest probe, not this scan · checked 2026-10-16 01:25:18
www104.26.4.52 104.26.5.52 172.67.75.209 2606:4700:20::681a:434 2606:4700:20::681a:534 2606:4700:20::ac43:4bd1 (AS13335) (address records, no CNAME)
www vs bare domainSame network
WildcardNo
BIMIv=BIMI1; l=https://extensa.dk/media/bimi/extensa-bimi.svg; a=;

✍️ DKIM keys#

1 found
SelectorCNAMEKey
default — RSA · ~2048 bit

DKIM selectors can't be listed, so we check the common ones (Microsoft 365, Google, Mailchimp, SendGrid, generic). Keys under other selectors aren't shown.

🔎 SPF check#

zone-wide SPF report

DNS lookups: 2/10 · policy: ~all

No problems found

🔏 ACME Challenge#

TypeNameValue
TXT _acme-challenge.extensa.dk 9ZCIQsTqmssXKNqUu2WmxAheJP-PQoa2O_KSHA4wWdo
TXT _acme-challenge.extensa.dk QvLlaLtq8uJPPvkSxOdC-o-bnl_EurKDLIyvEvu3EzE
TXT _acme-challenge.extensa.dk _x4TP1x0jfq6IwSyTe572uMOnvCLEWnTWBfa8gCmSMM

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

252ms
CheckResult
Validation Status🔓 Insecure
AD Flag (resolver validates)✗ Not set
DS Record✗ Not found
DNSKEY Record✗ Not found
Flagsunsigned answer

🏷️ SOA#

0ms
FieldValue
Serial2413403380
Primary NS (MNAME)noor.ns.cloudflare.com
Responsible (RNAME)dns@cloudflare.com
Refresh10000s
Retry2400s
Expire604800s
Minimum (neg-cache TTL)1800s

📋 Registration#

✗ No registration data yet — queued for a WHOIS lookup
📋 WHOIS#

⏱️ Lookup Timing#

NS
76ms
A
132ms
MX
75ms
AAAA
132ms
TXT
607ms
CAA
80ms
HTTPS
141ms
TLSA
4037ms
SOA
0ms
MTA-STS
204ms
DNSSEC
252ms
SRV
173ms
Total
5923ms

🕐 Scan History#

Scanned AtDurationRecordsDNSSEC
2026-10-01 07:33:20 5105ms 2 NS 3 A 1 MX 🔓 Insecure
2026-09-29 15:47:44 4876ms 2 NS 3 A 1 MX 🔓 Insecure
2026-09-24 08:48:25 12182ms 2 NS 3 A 1 MX 🔓 Insecure
2026-09-23 18:27:31 2735ms 2 NS 3 A 1 MX 🔓 Insecure
2026-09-04 04:49:40 3598ms 2 NS 3 A 1 MX 🔓 Insecure
2026-09-03 08:53:06 4448ms 2 NS 3 A 1 MX 🔓 Insecure
2026-08-31 23:52:33 5485ms 2 NS 3 A 1 MX 🔓 Insecure
2026-08-31 16:27:46 4929ms 2 NS 3 A 1 MX 🔓 Insecure
2026-08-28 18:56:40 shown 5923ms 2 NS 3 A 1 MX 🔓 Insecure
2026-08-26 15:21:01 3246ms 2 NS 3 A 1 MX 🔓 Insecure
2026-08-06 17:52:42 4518ms 2 NS 3 A 1 MX 🔓 Insecure
2026-06-19 22:04:09 3091ms 2 NS 3 A 1 MX 🔓 Insecure
2026-06-17 09:09:51 5925ms 2 NS 3 A 1 MX 🔓 Insecure
dhd.dk [/] search Domains, Hosts & DNS — .dk zone