grandhood.dk

📜 Historical scan 2026-06-22 13:14:25 · ← Latest scan

⬇ Zone File 📜 Timeline & History ⚡ Scan Now

grandhood.dk is a .dk domain served by 4 nameservers (ns-1504.awsdns-60.org, ns-1900.awsdns-45.co.uk, ns-468.awsdns-58.com and 1 more). It was registered on 27 October 2017 (WHOIS) and was already in the .dk zone when our tracking began on 16 June 2026. Its website address 198.202.211.1 is hosted by Cloudflare London, LLC (AS209242) in United States. Mail is handled by aspmx.l.google.com, alt1.aspmx.l.google.com and 3 more. The zone is not DNSSEC-signed, publishes a DMARC policy and has no IPv6 address. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

4 records 43ms

Nameserver	IP addresses	PTR	ASN / ISP
ns-1504.awsdns-60.org	205.251.197.224 2600:9000:5305:e000::1	ns-1504.awsdns-60.org ns-1504.awsdns-60.org	AS16509 Amazon.com, Inc. AS16509 Amazon.com, Inc.
ns-1900.awsdns-45.co.uk	205.251.199.108 2600:9000:5307:6c00::1	ns-1900.awsdns-45.co.uk ns-1900.awsdns-45.co.uk	AS16509 Amazon.com, Inc. AS16509 Amazon.com, Inc.
ns-468.awsdns-58.com	205.251.193.212 2600:9000:5301:d400::1	ns-468.awsdns-58.com ns-468.awsdns-58.com	AS16509 Amazon.com, Inc. AS16509 Amazon.com, Inc.
ns-513.awsdns-00.net	205.251.194.1 2600:9000:5302:100::1	ns-513.awsdns-00.net ns-513.awsdns-00.net	AS16509 Amazon.com, Inc. AS16509 Amazon.com, Inc.

🌍 A Records#

1 records 58ms

IP	TTL	PTR	ASN	ISP / Org	CIDR	Country	City
198.202.211.1	600s	—	AS209242	Cloudflare London, LLC	198.202.211.0/24	🇺🇸 United States	—

📧 MX Records#

5 records 69ms

Priority	TTL	Mail Server	IP addresses	PTR	ASN
1	600s	aspmx.l.google.com	142.250.147.26 2a00:1450:4025:c03::1a	rd-in-f26.1e100.net rc-in-f26.1e100.net	AS15169 Google LLC AS15169 Google LLC
5	600s	alt1.aspmx.l.google.com	192.178.213.27 2404:6800:4003:c26::1b	yugrqzs-in-f27.1e100.net so-in-f27.1e100.net	AS15169 Google LLC AS15169 Google LLC
5	600s	alt2.aspmx.l.google.com	172.253.158.27 2a00:1450:4025:c01::1b	so-in-f27.1e100.net rd-in-f27.1e100.net	AS15169 Google LLC AS15169 Google LLC
10	600s	alt3.aspmx.l.google.com	192.178.230.27 2404:6800:400b:c01b::1a	yunrtab-in-f27.1e100.net yunrtab-in-f26.1e100.net	AS15169 Google LLC AS15169 Google LLC
10	600s	alt4.aspmx.l.google.com	192.178.230.26 2404:6800:4000:1025::1b	yunrtab-in-f26.1e100.net lcbomp-in-f27.1e100.net	AS15169 Google LLC AS15169 Google LLC

🔷 AAAA Records (IPv6)#

✗ No AAAA records — IPv6 not configured

🔐 HTTPS Records#

✗ No HTTPS RR — no SVCB/HTTPS service binding

📝 TXT Records#

4 records 238ms

TXT Record
google-site-verification=Gw89dtV-9VbrzyKnv2azKCY1N8m0okscH1Hd5Z_Bgdg
google-site-verification=qrHluGtOvIw_-M6fT8_ylYCpEyjwwpz51sfNMjXG7OE
stripe-verification=6e8cbfadd4feb32df124a45065959aa64fd9d175e47db0e7b1cdbabc0670f92d
v=spf1 include:servers.mcsv.net ?all

✉️ SPF#

Policy	Record (grandhood.dk)
?all (neutral)	v=spf1 include:servers.mcsv.net ?all

📨 DMARC#

Policy	Record (_dmarc.grandhood.dk)
p=none (monitor only)	v=DMARC1; p=none

📬 MTA-STS#

169ms

Check	Result
Status	🔒 Enforce
TXT record (_mta-sts)	✓ Found
HTTPS policy	✓ Valid
Mode	enforce
Policy ID	1610466088147
max_age	604800s
Policy MX	aspmx.l.google.com, alt3.aspmx.l.google.com, alt4.aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com

📈 TLSRPT#

Status	Report address (rua)
✓ Enabled	mailto:smtp-tls-reports@grandhood.dk

📜 CAA Records#

✗ No CAA records — any CA may issue certificates

🧩 Web & zone#

latest probe, not this scan · checked 2026-10-08 00:10:54

www CNAME	cdn.webflow.com (all on webflow.com) → 198.202.211.1 2620:cb:2000::1 (AS13335 AS209242)
www vs bare domain	Same network grandhood.dk: 198.202.211.1 (AS209242) www.grandhood.dk: 198.202.211.1 2620:cb:2000::1 (AS13335 AS209242)
Wildcard	No

✍️ DKIM keys#

1 found

Selector	CNAME	Key
google	—	RSA · ~2048 bit

DKIM selectors can't be listed, so we check the common ones (Microsoft 365, Google, Mailchimp, SendGrid, generic). Keys under other selectors aren't shown.

🔎 SPF check#

zone-wide SPF report

DNS lookups: 1/10 · policy: ?all

warn "?all" is neutral: it gives receivers no guidance, much like having no SPF

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

86ms

Check	Result
Validation Status	🔓 Insecure
AD Flag (resolver validates)	✗ Not set
DS Record	✗ Not found
DNSKEY Record	✗ Not found
Flags	unsigned answer

🏷️ SOA#

59ms

Field	Value
Serial	1
Primary NS (MNAME)	ns-1504.awsdns-60.org
Responsible (RNAME)	awsdns-hostmaster@amazon.com
Refresh	7200s
Retry	900s
Expire	1209600s
Minimum (neg-cache TTL)	86400s

📋 Registration#

WHOIS fetched 2026-10-23 03:25:19

Field	Value
Registrar	Punktum dk A/S (direct)
Registered	2017-10-27
Expires	2027-10-31 (369d)

🔗 Same registrant#

0 domains

Other .dk domains whose WHOIS registrant has the same name and postal address. Matched on a keyed hash: the registrant's details are not stored or shown. Covers only domains whose WHOIS we have fetched (refreshed about monthly).

No other domain with this registrant in our WHOIS data yet

📋 WHOIS#

⏱️ Lookup Timing#

43ms

58ms

69ms

AAAA

47ms

TXT

238ms

CAA

60ms

HTTPS

34ms

TLSA

897ms

SOA

59ms

MTA-STS

169ms

DNSSEC

86ms

SRV

114ms

Total

2052ms

🕐 Scan History#

Scanned At	Duration	Records	DNSSEC
2026-09-30 22:23:47	4740ms	4 NS 1 A 5 MX	🔓 Insecure
2026-06-29 04:33:12	1338ms	4 NS 1 A 5 MX	🔓 Insecure
2026-06-22 13:14:25 shown	2052ms	4 NS 1 A 5 MX	🔓 Insecure
2026-06-17 09:59:49	1346ms	4 NS 1 A 5 MX	⚠️ Bogus