gaffa.dk

📜 Historical scan 2026-08-18 02:09:59 · ← Latest scan

⬇ Zone File 📜 Timeline & History ⚡ Scan Now

gaffa.dk is a .dk domain served by 2 nameservers (asa.ns.cloudflare.com, cody.ns.cloudflare.com). It was registered on 25 April 1996 (WHOIS) and was already in the .dk zone when our tracking began on 16 June 2026. Its website address 172.66.40.117 is hosted by Cloudflare, Inc. (AS13335). Mail is handled by aspmx.l.google.com, alt1.aspmx.l.google.com and 5 more. The zone is not DNSSEC-signed, publishes a DMARC policy and is reachable over IPv6. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

2 records 259ms

Nameserver	IP addresses	PTR	ASN / ISP
asa.ns.cloudflare.com	108.162.192.246 172.64.32.246 173.245.58.246 2606:4700:50::adf5:3af6 2803:f800:50::6ca2:c0f6 2a06:98c1:50::ac40:20f6	asa.ns.cloudflare.com asa.ns.cloudflare.com asa.ns.cloudflare.com asa.ns.cloudflare.com asa.ns.cloudflare.com asa.ns.cloudflare.com	AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc.
cody.ns.cloudflare.com	108.162.193.107 172.64.33.107 173.245.59.107 2606:4700:58::adf5:3b6b 2803:f800:50::6ca2:c16b 2a06:98c1:50::ac40:216b	cody.ns.cloudflare.com cody.ns.cloudflare.com cody.ns.cloudflare.com cody.ns.cloudflare.com cody.ns.cloudflare.com cody.ns.cloudflare.com	AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc.

🌍 A Records#

2 records 257ms

IP	TTL	PTR	ASN	ISP / Org	CIDR	Country	City
172.66.40.117	300s	—	AS13335	Cloudflare, Inc.	172.66.40.0/21	—	—
172.66.43.139	300s	—	AS13335	Cloudflare, Inc.	172.66.40.0/21	—	—

📧 MX Records#

7 records 227ms

Priority	TTL	Mail Server	IP addresses	PTR	ASN
10	300s	aspmx.l.google.com	142.251.127.26 2a00:1450:4001:c21::1b	lcfrai-in-f26.1e100.net lcfrai-in-f27.1e100.net	AS15169 Google LLC AS15169 Google LLC
20	300s	alt1.aspmx.l.google.com	142.250.147.27 2a00:1450:4025:c01::1a	rd-in-f27.1e100.net rd-in-f26.1e100.net	AS15169 Google LLC AS15169 Google LLC
20	300s	alt2.aspmx.l.google.com	172.253.152.26 2a00:1450:4010:c22::1a	yulpptr-in-f26.1e100.net yulpptr-in-f26.1e100.net	AS15169 Google LLC AS15169 Google LLC
30	300s	aspmx2.googlemail.com	142.250.147.26 2a00:1450:4025:c01::1a	rd-in-f26.1e100.net rd-in-f26.1e100.net	AS15169 Google LLC AS15169 Google LLC
30	300s	aspmx3.googlemail.com	172.253.152.27 2a00:1450:4010:c22::1a	yulpptr-in-f27.1e100.net yulpptr-in-f26.1e100.net	AS15169 Google LLC AS15169 Google LLC
30	300s	aspmx4.googlemail.com	192.178.211.26 2404:6800:4000:1025::1a	lcbomp-in-f26.1e100.net lcbomp-in-f26.1e100.net	AS15169 Google LLC AS15169 Google LLC
30	300s	aspmx5.googlemail.com	192.178.158.26 2404:6800:4013:813::1b	lcdels-in-f26.1e100.net lcdels-in-f27.1e100.net	AS15169 Google LLC AS15169 Google LLC

📧 Autodiscover / Autoconfig#

Service	CNAME / IP
🔷 Autodiscover	195.191.142.154
🔶 Autoconfig	195.191.142.154

🔷 AAAA Records (IPv6)#

2 records 178ms

IPv6 Address	TTL	PTR	ASN	ISP / Org	CIDR	Country	City
2606:4700:3108::ac42:2875	300s	—	AS13335	Cloudflare, Inc.	2606:4700:3108:0:0:0:0:0/48	—	—
2606:4700:3108::ac42:2b8b	300s	—	AS13335	Cloudflare, Inc.	2606:4700:3108:0:0:0:0:0/48	—	—

🔐 HTTPS Records#

1 records 216ms

Priority	Target	SvcParams
1 service	.	alpn="h3,h2" ipv4hint=172.66.40.117,172.66.43.139 ech=AEX+DQBBGQAgACBhTnTBQrVPo3FOYB4IYBImXRFfxB2VG28KnMxu4Vx0aQAEAAEAAQASY2xvdWRmbGFyZS1lY2guY29tAAA= ipv6hint=2606:4700:3108::ac42:2875,2606:4700:3108::ac42:2b8b

📝 TXT Records#

6 records 726ms

TXT Record
google-site-verification=gPE1r0h03qzzoeCcDY7I6_hpruvj6-q3r5QCkOOhM98
google-site-verification=j4l7p_-Lz8lNunV9HHZzeXN-vQOoUXpayrJyIkgpQSs
google-site-verification=SUyZPLhekXVNUlYiL0jNITvRPdIp5AkaPyX6Pf9YuXE
linkedin-site-verification=25a33fa3-4722-4cec-b6c9-957f81b7df12
mailerlite-domain-verification=2dbedb29b5d724fa686a2230321a1f330b1d6888
v=spf1 include:_spf.google.com include:web.shared.mysmtp.com include:mail.iteras.dk include:ses.echobox.com include:carmamail.com a mx include:_spf.mlsend.com ~all

✉️ SPF#

Policy	Record (gaffa.dk)
~all (soft fail)	v=spf1 include:_spf.google.com include:web.shared.mysmtp.com include:mail.iteras.dk include:ses.echobox.com include:carmamail.com a mx include:_spf.mlsend.com ~all

📨 DMARC#

Policy	Record (_dmarc.gaffa.dk)
p=none (monitor only)	v=DMARC1; p=none; rua=mailto:ef9eecb0a07a4ec394dca5dd46f6e92d@dmarc-reports.cloudflare.net

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

✗ No CAA records — any CA may issue certificates

🧩 Web & zone#

latest probe, not this scan · checked 2026-10-17 06:04:59

www	172.66.40.117 172.66.43.139 2606:4700:3108::ac42:2875 2606:4700:3108::ac42:2b8b (AS13335) (address records, no CNAME)
www vs bare domain	Same network gaffa.dk: 172.66.40.117 172.66.43.139 2606:4700:3108::ac42:2875 2606:4700:3108::ac42:2b8b (AS13335) www.gaffa.dk: 172.66.40.117 172.66.43.139 2606:4700:3108::ac42:2875 2606:4700:3108::ac42:2b8b (AS13335)
Wildcard	Yes: any name under the zone resolves

🔎 SPF check#

zone-wide SPF report

DNS lookups: 11/10 · policy: ~all

error 11 DNS lookups: the limit is 10, so a receiver whose evaluation gets past the 10th returns permerror (SPF fails)

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

521ms

Check	Result
Validation Status	🔓 Insecure
AD Flag (resolver validates)	✗ Not set
DS Record	✗ Not found
DNSKEY Record	✗ Not found
Flags	unsigned answer

🏷️ SOA#

0ms

Field	Value
Serial	2412424750
Primary NS (MNAME)	asa.ns.cloudflare.com
Responsible (RNAME)	dns@cloudflare.com
Refresh	10000s
Retry	2400s
Expire	604800s
Minimum (neg-cache TTL)	1800s

📋 Registration#

WHOIS fetched 2026-10-11 12:46:53

Field	Value
Registrar	Punktum dk A/S (direct)
Registered	1996-04-25
Expires	2027-06-30 (250d)

🔗 Same registrant#

0 domains

Other .dk domains whose WHOIS registrant has the same name and postal address. Matched on a keyed hash: the registrant's details are not stored or shown. Covers only domains whose WHOIS we have fetched (refreshed about monthly).

No other domain with this registrant in our WHOIS data yet

📋 WHOIS#

⏱️ Lookup Timing#

259ms

257ms

227ms

AAAA

178ms

TXT

726ms

CAA

242ms

HTTPS

216ms

TLSA

627ms

SOA

0ms

MTA-STS

452ms

DNSSEC

521ms

SRV

269ms

Total

6213ms

🕐 Scan History#

Scanned At	Duration	Records	DNSSEC
2026-10-17 06:04:59	924ms	2 NS 2 A 7 MX	🔓 Insecure
2026-10-16 05:41:08	609ms	2 NS 2 A 7 MX	🔓 Insecure
2026-09-30 10:48:15	1874ms	2 NS 2 A 7 MX	🔓 Insecure
2026-09-27 08:04:25	2728ms	2 NS 2 A 7 MX	🔓 Insecure
2026-09-06 15:46:45	1690ms	2 NS 2 A 7 MX	🔓 Insecure
2026-09-01 02:22:43	1614ms	2 NS 2 A 7 MX	🔓 Insecure
2026-08-25 12:41:03	1268ms	2 NS 2 A 7 MX	🔓 Insecure
2026-08-18 02:09:59 shown	6213ms	2 NS 2 A 7 MX	🔓 Insecure
2026-08-16 21:34:13	5923ms	2 NS 2 A 7 MX	🔓 Insecure
2026-07-07 07:32:15	2961ms	2 NS 2 A 7 MX	🔓 Insecure
2026-06-28 02:02:30	1069ms	2 NS 2 A 7 MX	🔓 Insecure
2026-06-26 20:37:43	1132ms	2 NS 2 A 7 MX	🔓 Insecure
2026-06-17 09:34:52	866ms	2 NS 2 A 7 MX	🔓 Insecure