falconinvest.dk

📜 Historical scan 2026-06-22 06:05:23 · ← Latest scan

⬇ Zone File 📜 Timeline & History ⚡ Scan Now

falconinvest.dk is a .dk domain served by 2 nameservers (charles.ns.cloudflare.com, jade.ns.cloudflare.com). It was registered on 2 December 2014 (WHOIS) and was already in the .dk zone when our tracking began on 16 June 2026. Mail is handled by aspmx.l.google.com, alt1.aspmx.l.google.com and 5 more. The zone is not DNSSEC-signed, publishes a DMARC policy and has no IPv6 address. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

2 records 55ms

Nameserver	IP addresses	PTR	ASN / ISP
charles.ns.cloudflare.com	108.162.193.83 172.64.33.83 173.245.59.83 2606:4700:58::adf5:3b53 2803:f800:50::6ca2:c153 2a06:98c1:50::ac40:2153	charles.ns.cloudflare.com charles.ns.cloudflare.com charles.ns.cloudflare.com charles.ns.cloudflare.com charles.ns.cloudflare.com charles.ns.cloudflare.com	AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc.
jade.ns.cloudflare.com	108.162.192.167 172.64.32.167 173.245.58.167 2606:4700:50::adf5:3aa7 2803:f800:50::6ca2:c0a7 2a06:98c1:50::ac40:20a7	jade.ns.cloudflare.com jade.ns.cloudflare.com jade.ns.cloudflare.com jade.ns.cloudflare.com jade.ns.cloudflare.com jade.ns.cloudflare.com	AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc.

🌍 A Records#

3 records 70ms

IP	TTL	PTR	ASN	ISP / Org	CIDR	Country	City
104.26.4.147	300s	—	AS13335	—	—	—	—
104.26.5.147	300s	—	AS13335	—	—	—	—
172.67.72.20	300s	—	AS13335	—	—	—	—

📧 MX Records#

7 records 63ms

Priority	TTL	Mail Server	IP addresses	PTR	ASN
1	300s	aspmx.l.google.com	173.194.222.27 2a00:1450:4010:c06::1b 2a00:1450:4010:c06::1b	lo-in-f27.1e100.net lj-in-x1b.1e100.net lj-in-f27.1e100.net	AS15169 Google LLC AS15169 Google LLC AS15169 Google LLC
5	300s	alt1.aspmx.l.google.com	192.178.211.27 2404:6800:4000:1025::1b	lcbomp-in-f27.1e100.net lcbomp-in-f27.1e100.net	AS15169 Google LLC AS15169 Google LLC
5	300s	alt2.aspmx.l.google.com	108.177.125.27 2404:6800:4008:c01::1b	tp-in-f27.1e100.net tp-in-f27.1e100.net	AS15169 Google LLC AS15169 Google LLC
10	300s	aspmx2.googlemail.com	172.253.158.27 2404:6800:4003:c26::1a	so-in-f27.1e100.net so-in-f26.1e100.net	AS15169 Google LLC AS15169 Google LLC
10	300s	aspmx3.googlemail.com	108.177.125.26 2404:6800:4008:c01::1a	tp-in-f26.1e100.net tp-in-f26.1e100.net	AS15169 Google LLC AS15169 Google LLC
10	300s	mxa.eu.mailgun.org	34.111.130.244	244.130.111.34.bc.googleusercontent.com	AS396982 Google LLC
10	300s	mxb.eu.mailgun.org	34.111.130.244	244.130.111.34.bc.googleusercontent.com	AS396982 Google LLC

📧 Autodiscover / Autoconfig#

Service	CNAME / IP
🔷 Autodiscover	wordpress-24918-53412-140564.cloudwaysapps.com → 139.59.208.51
🔶 Autoconfig	wordpress-24918-53412-140564.cloudwaysapps.com → 139.59.208.51

🔷 AAAA Records (IPv6)#

✗ No AAAA records — IPv6 not configured

🔐 HTTPS Records#

1 records 68ms

Priority	Target	SvcParams
1 service	.	alpn="h2" ipv4hint=104.26.4.147,104.26.5.147,172.67.72.20

📝 TXT Records#

8 records 297ms

TXT Record
dropbox-domain-verification=bg0vdja3nc4j
facebook-domain-verification=9qp8thvxpnpwhx7zidxn78z188i4wg
google-site-verification=CtHREC9IQMkeyQ2X05wOspuBdAYbHyUiKe0G0KSD3Rw
google-site-verification=GS5gvHGa17eUClnrVQNFFUKFRs41uOTONeuljOTzO5Q
google-site-verification=Ph8uduV6y_AObdbTz2A-Ah8tK7CNH5XxxWjTy9QqmQE
google-site-verification=pOyGoOnnZFmEy0ZoKoq5tMdBPSLB81XyAH5WuRm6z6A
v=spf1 include:_spf.google.com include:spf.protection.outlook.com 4206426.spf05.hubspotemail.net ip4:139.59.0.0/16 include:servers.mcsv.net -all
v=spf1 include:mailgun.org ~all

✉️ SPF#

⚠ Multiple SPF records — RFC 7208 §4.5 violation (receivers must treat this as permerror)

Policy	Record (falconinvest.dk)
-all (hard fail)	v=spf1 include:_spf.google.com include:spf.protection.outlook.com 4206426.spf05.hubspotemail.net ip4:139.59.0.0/16 include:servers.mcsv.net -all
~all (soft fail)	v=spf1 include:mailgun.org ~all

📨 DMARC#

Policy	Record (_dmarc.falconinvest.dk)
p=reject	v=DMARC1; p=reject; pct=100; rua=mailto:re+ffav2zced8v@dmarc.postmarkapp.com; sp=reject; aspf=r; adkim=r;

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

✗ No CAA records — any CA may issue certificates

🧩 Web & zone#

latest probe, not this scan · checked 2026-10-18 15:11:02

www	104.26.4.147 104.26.5.147 172.67.72.20 (AS13335) (address records, no CNAME)
www vs bare domain	Same network falconinvest.dk: 104.26.4.147 104.26.5.147 172.67.72.20 (AS13335) www.falconinvest.dk: 104.26.4.147 104.26.5.147 172.67.72.20 (AS13335)
Wildcard	Yes: any name under the zone resolves
CDS / CDNSKEY	Published: key rollovers can be automated with the registry (RFC 7344/8078) 1 CDS, 1 CDNSKEY

✍️ DKIM keys#

4 found

Selector	CNAME	Key
google	—	RSA · ~1024 bit below 2048 bit
k1	dkim.mcsv.net	RSA · ~1024 bit below 2048 bit
s1	s1.domainkey.u3545842.wl093.sendgrid.net	RSA · ~2048 bit
s2	s2.domainkey.u3545842.wl093.sendgrid.net	RSA · ~1024 bit below 2048 bit

DKIM selectors can't be listed, so we check the common ones (Microsoft 365, Google, Mailchimp, SendGrid, generic). Keys under other selectors aren't shown.

🔎 SPF check#

zone-wide SPF report

DNS lookups: 3/10 · policy: -all

error 2 SPF records: receivers must treat that as a permanent error (RFC 7208 §4.5)
error Unknown mechanism "4206426.spf05.hubspotemail.net": receivers treat the record as a permanent error

🔏 ACME Challenge#

Type	Name	Value
CNAME	_acme-challenge.falconinvest.dk	wordpress-24918-53412-140564.cloudwaysapps.com

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

173ms

Check	Result
Validation Status	🔓 Insecure
AD Flag (resolver validates)	✗ Not set
DS Record	✗ Not found
DNSKEY Record	✓ Found
Flags	unsigned answer

🏷️ SOA#

0ms

Field	Value
Serial	2407569088
Primary NS (MNAME)	charles.ns.cloudflare.com
Responsible (RNAME)	dns@cloudflare.com
Refresh	10000s
Retry	2400s
Expire	604800s
Minimum (neg-cache TTL)	1800s

📋 Registration#

WHOIS fetched 2026-10-18 15:43:10

Field	Value
Registrar	Punktum dk A/S (direct)
Registered	2014-12-02
Expires	2027-12-31 (429d)

🔗 Same registrant#

4 domains

Other .dk domains whose WHOIS registrant has the same name and postal address. Matched on a keyed hash: the registrant's details are not stored or shown. Covers only domains whose WHOIS we have fetched (refreshed about monthly).

Domain	Registrar
annoxkvant.dk	ONE.COM A/S
falcon-invest.dk	Punktum dk A/S (direct)
falconfms.dk	Punktum dk A/S (direct)
falkoninvest.dk	Punktum dk A/S (direct)

📋 WHOIS#

⏱️ Lookup Timing#

55ms

70ms

63ms

AAAA

60ms

TXT

297ms

CAA

56ms

HTTPS

68ms

TLSA

2119ms

SOA

0ms

MTA-STS

71ms

DNSSEC

173ms

SRV

125ms

Total

3160ms

🕐 Scan History#

Scanned At	Duration	Records	DNSSEC
2026-10-18 15:11:02	863ms	2 NS 3 A 7 MX	🔓 Insecure
2026-10-15 12:23:40	4167ms	2 NS 3 A 7 MX	🔓 Insecure
2026-10-07 18:41:57	749ms	2 NS 3 A 7 MX	🔓 Insecure
2026-09-26 04:26:47	888ms	2 NS 3 A 7 MX	🔓 Insecure
2026-09-21 07:20:14	4251ms	2 NS 3 A 7 MX	🔓 Insecure
2026-09-19 15:55:53	1718ms	2 NS 3 A 7 MX	🔓 Insecure
2026-09-12 13:51:48	2285ms	2 NS 3 A 7 MX	🔓 Insecure
2026-09-07 12:04:54	1052ms	2 NS 3 A 7 MX	🔓 Insecure
2026-08-28 08:47:08	1770ms	2 NS 3 A 7 MX	🔓 Insecure
2026-08-27 17:35:30	802ms	2 NS 3 A 7 MX	🔓 Insecure
2026-08-26 16:03:23	10071ms	2 NS 3 A 7 MX	🔓 Insecure
2026-08-20 21:02:19	4227ms	2 NS 3 A 7 MX	🔓 Insecure
2026-08-16 13:45:32	2821ms	2 NS 3 A 7 MX	🔓 Insecure
2026-08-05 11:40:07	2352ms	2 NS 3 A 7 MX	🔓 Insecure
2026-07-16 17:03:33	1750ms	2 NS 3 A 7 MX	🔓 Insecure
2026-07-10 23:10:19	10274ms	2 NS 3 A 7 MX	🔓 Insecure
2026-06-27 11:35:08	1512ms	2 NS 3 A 7 MX	🔓 Insecure
2026-06-22 06:05:23 shown	3160ms	2 NS 3 A 7 MX	🔓 Insecure
2026-06-19 10:14:23	1534ms	2 NS 3 A 7 MX	🔓 Insecure
2026-06-17 09:12:56	1992ms	2 NS 3 A 7 MX	🔓 Insecure