grindeks.dk

📜 Historical scan 2026-06-17 09:50:39  ·  ← Latest scan
⬇ Zone File 📜 Timeline & History ⚡ Scan Now

grindeks.dk is a .dk domain served by 2 nameservers (chris.ns.cloudflare.com, kristin.ns.cloudflare.com). It was registered on 10 April 2020 (WHOIS) and was already in the .dk zone when our tracking began on 16 June 2026. Its website address 104.21.6.215 is hosted by Cloudflare, Inc. (AS13335). Mail is handled by grindeks-dk.mail.protection.outlook.com. The zone is DNSSEC-signed but currently fails validation, publishes a DMARC policy and is reachable over IPv6. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

2 records   29ms
NameserverIP addressesPTRASN / ISP
chris.ns.cloudflare.com — — —
kristin.ns.cloudflare.com — — —

🌍 A Records#

2 records   42ms
IPTTLPTRASNISP / OrgCIDRCountryCity
104.21.6.215 — — AS13335 Cloudflare, Inc. 104.21.0.0/17 — —
172.67.135.77 — — AS13335 Cloudflare, Inc. 172.67.128.0/17 — —

📧 MX Records#

1 records   26ms

🔷 AAAA Records (IPv6)#

2 records   40ms

🔐 HTTPS Records#

1 records   23ms
PriorityTargetSvcParams
1 service . alpn="h3,h2" ipv4hint=104.21.6.215,172.67.135.77 ech=AEX+DQBBBwAgACCqfmcfnIuoKJ5IlEf/fctMxRpLGzhWDr4T3BFQFMHreQAEAAEAAQASY2xvdWRmbGFyZS1lY2guY29tAAA= ipv6hint=2606:4700:3036::ac43:874d,2606:4700:3037::6815:6d7

📝 TXT Records#

3 records   275ms
TXT Record
atlassian-domain-verification=MzX9g0vk1mOiHLEDhptLDbjXfCrwlBCesZ7Tz0RTGXqGSuD6uc3OEbCWXa6QtaCm
MS=ms22661803
v=spf1 include:spf.protection.outlook.com -all

✉️ SPF#

PolicyRecord (grindeks.dk)
-all (hard fail) v=spf1 include:spf.protection.outlook.com -all

📨 DMARC#

PolicyRecord (_dmarc.grindeks.dk)
p=quarantine v=DMARC1;+p=quarantine;+pct=100

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

✗ No CAA records — any CA may issue certificates

🧩 Web & zone#

latest probe, not this scan · checked 2026-10-09 14:36:01

✍️ DKIM keys#

1 found
SelectorCNAMEKey
selector1 selector1-grindeks-dk._domainkey.grindekscloud.onmicrosoft.com RSA · ~2048 bit

DKIM selectors can't be listed, so we check the common ones (Microsoft 365, Google, Mailchimp, SendGrid, generic). Keys under other selectors aren't shown.

🔎 SPF check#

zone-wide SPF report

DNS lookups: 1/10 · policy: -all

No problems found

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

119ms
CheckResult
Validation Status⚠️ Bogus
AD Flag (resolver validates)✗ Not set
DS Record✗ Not found
DNSKEY Record✗ Not found
Flagsbroken trust chain resolving 'grindeks.dk/A/IN': 127.0.0.1#53

🏷️ SOA#

23ms
FieldValue
Serial2406666926
Primary NS (MNAME)chris.ns.cloudflare.com
Responsible (RNAME)dns@cloudflare.com
Refresh10000s
Retry2400s
Expire604800s
Minimum (neg-cache TTL)1800s

📋 Registration#

WHOIS fetched 2026-10-09 14:49:12
FieldValue
RegistrarMarcaria.com LLC
Registered2020-04-10
Expires2027-04-30 (192d)
📋 WHOIS#

⏱️ Lookup Timing#

NS
29ms
A
42ms
MX
26ms
AAAA
40ms
TXT
275ms
CAA
26ms
HTTPS
23ms
TLSA
110ms
SOA
23ms
MTA-STS
60ms
DNSSEC
119ms
SRV
0ms
Total
817ms

🕐 Scan History#

Scanned AtDurationRecordsDNSSEC
2026-10-09 14:36:01 4677ms 2 NS 2 A 1 MX 🔓 Insecure
2026-10-08 12:12:40 511ms 2 NS 2 A 1 MX 🔓 Insecure
2026-10-01 01:37:08 1154ms 2 NS 2 A 1 MX 🔓 Insecure
2026-09-30 04:24:54 1262ms 2 NS 2 A 1 MX 🔓 Insecure
2026-09-29 14:32:21 1803ms 2 NS 2 A 1 MX 🔓 Insecure
2026-08-27 01:41:11 978ms 2 NS 2 A 1 MX 🔓 Insecure
2026-08-12 04:17:53 1884ms 2 NS 2 A 1 MX 🔓 Insecure
2026-06-28 09:33:46 1238ms 2 NS 2 A 1 MX 🔓 Insecure
2026-06-25 09:42:09 1865ms 2 NS 2 A 1 MX 🔓 Insecure
2026-06-17 09:50:39 shown 817ms 2 NS 2 A 1 MX ⚠️ Bogus
dhd.dk [/] search Domains, Hosts & DNS — .dk zone