goodmask.dk

Records from scan: 2026-09-25 15:27:55  ·  4014ms total  ·  last checked 2026-10-15 16:59 (unchanged)
⬇ Zone File 📜 Timeline & History ⚡ Scan Now

goodmask.dk is a .dk domain served by 5 nameservers (ns.gransy.com, ns2.gransy.com, ns3.gransy.com and 2 more). It was already in the .dk zone when our tracking began on 16 June 2026. Its website address 77.78.104.3 is hosted by CASABLANCA INT a.s. (AS15685) in Czechia. Mail is handled by ASPMX.L.GOOGLE.COM, ALT1.ASPMX.L.GOOGLE.COM and 4 more. The zone is not DNSSEC-signed, has no DMARC policy and has no IPv6 address. Below are all of its DNS records from our latest scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

5 records   87ms

🌍 A Records#

1 records   59ms

📧 MX Records#

6 records   250ms

📧 Autodiscover / Autoconfig#

ServiceCNAME / IP
🔷 Autodiscovergoodmask.dk → 77.78.104.3
🔶 Autoconfiggoodmask.dk → 77.78.104.3

🔷 AAAA Records (IPv6)#

✗ No AAAA records — IPv6 not configured

🔐 HTTPS Records#

✗ No HTTPS RR — no SVCB/HTTPS service binding

📝 TXT Records#

1 records   653ms
TXT Record
google-site-verification=Fm-95aJsh0mH2hM3ZSHLxlcBluVXqiMlxP3IfyM4QZY

✉️ SPF#

✗ No SPF record — mail spoofing not restricted

📨 DMARC#

✗ No DMARC record — mail spoofing not restricted

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

✗ No CAA records — any CA may issue certificates

🧩 Web & zone#

checked 2026-10-11 09:33:20
www CNAMEgoodmask.dk (all on goodmask.dk)
www vs bare domainSame network
goodmask.dk: 77.78.104.3 (AS15685)
www.goodmask.dk: 77.78.104.3 (AS15685)
WildcardYes: any name under the zone resolves
Denial of existenceNSEC zone can be walked (all names enumerable)
CDS / CDNSKEYPublished: key rollovers can be automated with the registry (RFC 7344/8078) 4 CDS, 0 CDNSKEY

✍️ DKIM keys#

1 found
SelectorCNAMEKey
mail mail._domainkey.mail.gransy.com RSA · ~2048 bit

DKIM selectors can't be listed, so we check the common ones (Microsoft 365, Google, Mailchimp, SendGrid, generic). Keys under other selectors aren't shown.

🔏 ACME Challenge#

TypeNameValue
CNAME _acme-challenge.goodmask.dk goodmask.dk

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

241ms
CheckResult
Validation Status🔓 Insecure
AD Flag (resolver validates)✗ Not set
DS Record✗ Not found
DNSKEY Record✓ Found
Flagsunsigned answer

🏷️ SOA#

0ms
FieldValue
Serial2783282862
Primary NS (MNAME)ns.gransy.com
Responsible (RNAME)root@gransy.com
Refresh86400s
Retry900s
Expire1209600s
Minimum (neg-cache TTL)1800s

📋 Registration#

✗ No registration data yet — queued for a WHOIS lookup
📋 WHOIS#

⏱️ Lookup Timing#

NS
87ms
A
59ms
MX
250ms
AAAA
124ms
TXT
653ms
CAA
101ms
HTTPS
143ms
TLSA
343ms
SOA
0ms
MTA-STS
142ms
DNSSEC
241ms
SRV
794ms
Total
4014ms

🕐 Scan History#

Scanned AtDurationRecordsDNSSEC
2026-09-25 15:27:55 shown 4014ms 5 NS 1 A 6 MX 🔓 Insecure
2026-08-12 14:52:01 35192ms 5 NS 1 A 6 MX 🔓 Insecure
2026-07-06 22:00:07 11972ms 5 NS 1 A 6 MX 🔓 Insecure
2026-07-03 05:09:48 3328ms 5 NS 1 A 6 MX 🔓 Insecure
2026-06-23 12:02:19 4305ms 5 NS 1 A 6 MX 🔓 Insecure
2026-06-17 10:31:57 5563ms 5 NS 1 A 6 MX ⚠️ Bogus
dhd.dk [/] search Domains, Hosts & DNS — .dk zone