falconfms.dk

📜 Historical scan 2026-06-17 09:12:51  ·  ← Latest scan
⬇ Zone File 📜 Timeline & History ⚡ Scan Now

falconfms.dk is a .dk domain served by 2 nameservers (charles.ns.cloudflare.com, jade.ns.cloudflare.com). It was already in the .dk zone when our tracking began on 16 June 2026. Its website address 104.26.12.219 is hosted by Cloudflare, Inc. (AS13335). Mail is handled by aspmx.l.google.com, alt1.aspmx.l.google.com and 3 more. The zone is DNSSEC-signed and validates, publishes a DMARC policy and is reachable over IPv6. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

2 records   54ms
NameserverIP addressesPTRASN / ISP
charles.ns.cloudflare.com — — —
jade.ns.cloudflare.com — — —

🌍 A Records#

3 records   70ms
IPTTLPTRASNISP / OrgCIDRCountryCity
104.26.12.219 — — AS13335 Cloudflare, Inc. 104.26.0.0/20 — —
104.26.13.219 — — AS13335 Cloudflare, Inc. 104.26.0.0/20 — —
172.67.68.191 — — AS13335 Cloudflare, Inc. 172.67.64.0/18 — —

📧 MX Records#

5 records   51ms
PriorityTTLMail ServerIP addressesPTRASN
1 — aspmx.l.google.com 64.233.164.27 lf-in-f27.1e100.net AS15169 Google LLC
5 — alt1.aspmx.l.google.com 172.253.158.26 so-in-f26.1e100.net AS15169 Google LLC
5 — alt2.aspmx.l.google.com 172.253.158.27 so-in-f27.1e100.net AS15169 Google LLC
10 — aspmx2.googlemail.com 192.178.211.26 lcbomp-in-f26.1e100.net AS15169 Google LLC
10 — aspmx3.googlemail.com 192.178.211.26 lcbomp-in-f26.1e100.net AS15169 Google LLC

🔷 AAAA Records (IPv6)#

3 records   78ms
IPv6 AddressTTLPTRASNISP / OrgCIDRCountryCity
2606:4700:20::681a:cdb — — AS13335 Cloudflare, Inc. 2606:4700:20:0:0:0:0:0/44 — —
2606:4700:20::681a:ddb — — AS13335 Cloudflare, Inc. 2606:4700:20:0:0:0:0:0/44 — —
2606:4700:20::ac43:44bf — — AS13335 Cloudflare, Inc. 2606:4700:20:0:0:0:0:0/44 — —

🔐 HTTPS Records#

1 records   78ms
PriorityTargetSvcParams
1 service . alpn="h2" ipv4hint=104.26.12.219,104.26.13.219,172.67.68.191 ipv6hint=2606:4700:20::681a:cdb,2606:4700:20::681a:ddb,2606:4700:20::ac43:44bf

📝 TXT Records#

6 records   181ms
TXT Record
google-site-verification=kX1j5DzOFBZF16gfEYtJTRUr4z3XFbPY6jIX5q67FHY
google-site-verification=tY3ZbrFDn7If9W3JKM2ZIJQ-kxyP8IZwBXAl8QDVDv8
google-site-verification=vfNc6yAN3a5C7P_bBytyHZO1I06JbycEBeGxuHi0syQ
google-site-verification=ym1zsCHMXWWJ8yGZuK2YJYS6FZYsRAiSyRhtXWhNGdA
MS=F75E212895AD7208B0DE826776CD8D01572D2175
v=spf1 include:_spf.google.com include:mailgun.org ip4:139.59.0.0/16 include:emsd1.com include:servers.mcsv.net include:4206426.spf05.hubspotemail.net -all

✉️ SPF#

PolicyRecord (falconfms.dk)
-all (hard fail) v=spf1 include:_spf.google.com include:mailgun.org ip4:139.59.0.0/16 include:emsd1.com include:servers.mcsv.net include:4206426.spf05.hubspotemail.net -all

📨 DMARC#

PolicyRecord (_dmarc.falconfms.dk)
p=reject v=DMARC1; p=reject; pct=100; rua=mailto:re+bbt7qstlx81@dmarc.postmarkapp.com; sp=reject; aspf=r; adkim=r;

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

✗ No CAA records — any CA may issue certificates

🧩 Web & zone#

latest probe, not this scan · checked 2026-10-15 06:40:42
www104.26.12.219 104.26.13.219 172.67.68.191 2606:4700:20::681a:cdb 2606:4700:20::681a:ddb 2606:4700:20::ac43:44bf (AS13335) (address records, no CNAME)
www vs bare domainSame network
WildcardNo
Denial of existenceCompact NSEC (RFC 9824, "black lies") not walkable
CDS / CDNSKEYPublished: key rollovers can be automated with the registry (RFC 7344/8078) 1 CDS, 1 CDNSKEY

✍️ DKIM keys#

4 found
SelectorCNAMEKey
google — RSA · ~2048 bit
k1 dkim.mcsv.net RSA · ~1024 bit below 2048 bit
s1 s1.domainkey.u3545842.wl093.sendgrid.net RSA · ~2048 bit
s2 s2.domainkey.u3545842.wl093.sendgrid.net RSA · ~1024 bit below 2048 bit

DKIM selectors can't be listed, so we check the common ones (Microsoft 365, Google, Mailchimp, SendGrid, generic). Keys under other selectors aren't shown.

🔎 SPF check#

zone-wide SPF report

DNS lookups: 9/10 · policy: -all

  • warn 9 of the 10 allowed DNS lookups used: one more include can break SPF

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

165ms
CheckResult
Validation Status🔒 Secure
AD Flag (resolver validates)✓ Set
DS Record✓ Found
DNSKEY Record✓ Found
Flagsfully validated

🏷️ SOA#

65ms
FieldValue
Serial2407081499
Primary NS (MNAME)charles.ns.cloudflare.com
Responsible (RNAME)dns@cloudflare.com
Refresh10000s
Retry2400s
Expire604800s
Minimum (neg-cache TTL)1800s

📋 Registration#

✗ No registration data yet — queued for a WHOIS lookup
📋 WHOIS#

⏱️ Lookup Timing#

NS
54ms
A
70ms
MX
51ms
AAAA
78ms
TXT
181ms
CAA
60ms
HTTPS
78ms
TLSA
120ms
SOA
65ms
MTA-STS
91ms
DNSSEC
165ms
SRV
0ms
Total
1083ms

🕐 Scan History#

Scanned AtDurationRecordsDNSSEC
2026-10-15 06:40:42 3797ms 2 NS 3 A 5 MX 🔒 Secure
2026-10-07 13:41:17 3522ms 2 NS 3 A 5 MX 🔒 Secure
2026-09-23 10:42:26 1102ms 2 NS 3 A 5 MX 🔒 Secure
2026-08-28 03:25:12 778ms 2 NS 3 A 5 MX 🔒 Secure
2026-08-27 01:38:39 1124ms 2 NS 3 A 5 MX 🔒 Secure
2026-08-21 09:14:48 4259ms 2 NS 3 A 5 MX 🔒 Secure
2026-08-09 19:50:19 2591ms 2 NS 3 A 5 MX 🔒 Secure
2026-07-12 11:23:47 1549ms 2 NS 3 A 5 MX 🔒 Secure
2026-06-23 20:00:36 2751ms 2 NS 3 A 5 MX 🔒 Secure
2026-06-20 01:05:20 1838ms 2 NS 3 A 5 MX 🔒 Secure
2026-06-17 09:12:51 shown 1083ms 2 NS 3 A 5 MX 🔒 Secure
dhd.dk [/] search Domains, Hosts & DNS — .dk zone