hflaw.dk

📜 Historical scan 2026-06-29 19:18:37  ·  ← Latest scan
⬇ Zone File 📜 Timeline & History ⚡ Scan Now

hflaw.dk is a .dk domain served by 3 nameservers (ns1.simply.com, ns2.simply.com, ns3.simply.com). It was registered on 25 September 2018 (WHOIS) and was already in the .dk zone when our tracking began on 16 June 2026. Its website address 46.36.206.131 is hosted by team.blue Denmark A/S (AS48854) in Denmark. Mail is handled by aspmx.l.google.com, alt1.aspmx.l.google.com and 3 more. The zone is not DNSSEC-signed, has no DMARC policy and has no IPv6 address. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

3 records   28ms

🌍 A Records#

1 records   28ms

📧 MX Records#

5 records   45ms

📧 Autodiscover / Autoconfig#

ServiceCNAME / IP
🔷 Autodiscover46.36.206.131
🔶 Autoconfig46.36.206.131

🔷 AAAA Records (IPv6)#

✗ No AAAA records — IPv6 not configured

🔐 HTTPS Records#

✗ No HTTPS RR — no SVCB/HTTPS service binding

📝 TXT Records#

3 records   134ms
TXT Record
google-site-verification=-k1n1Op0zLilPFfJayjU8D6GJcmW46UqPhMolUDmoLA
google-site-verification=3nAiVdnHanjyTGOSw78eqWz5usoi7RA0GS-KsoPai68
v=spf1 mx include:spf.simply.com include:spf.curanet.dk include:_spf.google.com -all

✉️ SPF#

PolicyRecord (hflaw.dk)
-all (hard fail) v=spf1 mx include:spf.simply.com include:spf.curanet.dk include:_spf.google.com -all

📨 DMARC#

✗ No DMARC record — mail spoofing not restricted

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

✗ No CAA records — any CA may issue certificates

🧩 Web & zone#

latest probe, not this scan · checked 2026-10-12 22:00:08
www46.36.206.131 (AS48854) (address records, no CNAME)
www vs bare domainSame network
hflaw.dk: 46.36.206.131 (AS48854)
www.hflaw.dk: 46.36.206.131 (AS48854)
WildcardYes: any name under the zone resolves
Denial of existenceNSEC zone can be walked (all names enumerable)
CDS / CDNSKEYPublished: key rollovers can be automated with the registry (RFC 7344/8078) 1 CDS, 1 CDNSKEY

🔎 SPF check#

zone-wide SPF report

DNS lookups: 6/10 · policy: -all

No problems found

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

53ms
CheckResult
Validation Status🔓 Insecure
AD Flag (resolver validates)✗ Not set
DS Record✗ Not found
DNSKEY Record✓ Found
Flagsunsigned answer

🏷️ SOA#

28ms
FieldValue
Serial2025101402
Primary NS (MNAME)ns1.simply.com
Responsible (RNAME)hostmaster@simply.com
Refresh14400s
Retry3600s
Expire1209600s
Minimum (neg-cache TTL)3600s

📋 Registration#

WHOIS fetched 2026-10-12 22:12:09
FieldValue
RegistrarPunktum dk A/S (direct)
Registered2018-09-25
Expires2027-09-30 (345d)

🔗 Same registrant#

1 domain

Other .dk domains whose WHOIS registrant has the same name and postal address. Matched on a keyed hash: the registrant's details are not stored or shown. Covers only domains whose WHOIS we have fetched (refreshed about monthly).

DomainRegistrar
confidens.dkPunktum dk A/S (direct)
📋 WHOIS#

⏱️ Lookup Timing#

NS
28ms
A
28ms
MX
45ms
AAAA
37ms
TXT
134ms
CAA
28ms
HTTPS
27ms
TLSA
49ms
SOA
28ms
MTA-STS
36ms
DNSSEC
53ms
SRV
42ms
Total
694ms

🕐 Scan History#

Scanned AtDurationRecordsDNSSEC
2026-10-12 22:00:08 1745ms 3 NS 1 A 5 MX 🔓 Insecure
2026-10-09 13:51:33 1032ms 3 NS 1 A 5 MX 🔓 Insecure
2026-10-03 05:53:31 955ms 3 NS 1 A 5 MX 🔓 Insecure
2026-09-30 05:41:56 631ms 3 NS 1 A 5 MX 🔓 Insecure
2026-09-25 18:34:11 647ms 3 NS 1 A 5 MX 🔓 Insecure
2026-06-29 19:18:37 shown 694ms 3 NS 1 A 5 MX 🔓 Insecure
2026-06-24 14:14:48 678ms 3 NS 1 A 5 MX 🔓 Insecure
2026-06-17 11:16:57 848ms 3 NS 1 A 5 MX 🔓 Insecure
dhd.dk [/] search Domains, Hosts & DNS — .dk zone