krask.dk

📜 Historical scan 2026-06-17 15:36:04 · ← Latest scan

⬇ Zone File 📜 Timeline & History ⚡ Scan Now

krask.dk is a .dk domain served by 2 nameservers (angela.ns.cloudflare.com, bruce.ns.cloudflare.com). It was registered on 4 June 2025 (WHOIS) and was already in the .dk zone when our tracking began on 16 June 2026. Its website address 104.21.32.159 is hosted by Cloudflare, Inc. (AS13335). Mail is handled by krask-dk.mail.protection.outlook.com. The zone is DNSSEC-signed but currently fails validation, publishes a DMARC policy and is reachable over IPv6. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

2 records 40ms

Nameserver	IP addresses	PTR	ASN / ISP
angela.ns.cloudflare.com	108.162.192.65 172.64.32.65 173.245.58.65 2606:4700:50::adf5:3a41 2803:f800:50::6ca2:c041 2a06:98c1:50::ac40:2041	angela.ns.cloudflare.com angela.ns.cloudflare.com angela.ns.cloudflare.com angela.ns.cloudflare.com angela.ns.cloudflare.com angela.ns.cloudflare.com	AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc.
bruce.ns.cloudflare.com	108.162.193.77 172.64.33.77 173.245.59.77 2606:4700:58::adf5:3b4d 2803:f800:50::6ca2:c14d 2a06:98c1:50::ac40:214d	bruce.ns.cloudflare.com bruce.ns.cloudflare.com bruce.ns.cloudflare.com bruce.ns.cloudflare.com bruce.ns.cloudflare.com bruce.ns.cloudflare.com	AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc.

🌍 A Records#

2 records 45ms

IP	TTL	PTR	ASN	ISP / Org	CIDR	Country	City
104.21.32.159	—	—	AS13335	Cloudflare, Inc.	104.21.0.0/17	—	—
172.67.152.220	—	—	AS13335	Cloudflare, Inc.	172.67.128.0/17	—	—

📧 MX Records#

1 records 35ms

Priority	TTL	Mail Server	IP addresses	PTR	ASN
0	—	krask-dk.mail.protection.outlook.com	2a01:111:f403:c967:: 2a01:111:f403:c967::2 2a01:111:f403:c967::4 2a01:111:f403:c967::6 52.101.209.2 52.101.209.4 52.101.209.6 52.101.209.74	mail-cpcp307cu00400.inbound.protection.outlook.com mail-cpap307cu00402.inbound.protection.outlook.com mail-cpap307cu00204.inbound.protection.outlook.com mail-cpcp307cu00206.inbound.protection.outlook.com mail-cpap307cu00402.inbound.protection.outlook.com mail-cpap307cu00204.inbound.protection.outlook.com mail-cpcp307cu00206.inbound.protection.outlook.com mail-cpcp307cu00402.inbound.protection.outlook.com	AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation

🔷 AAAA Records (IPv6)#

2 records 34ms

IPv6 Address	TTL	PTR	ASN	ISP / Org	CIDR	Country	City
2606:4700:3031::ac43:98dc	—	—	AS13335	Cloudflare, Inc.	2606:4700:3000:0:0:0:0:0/42	—	—
2606:4700:3034::6815:209f	—	—	AS13335	Cloudflare, Inc.	2606:4700:3000:0:0:0:0:0/42	—	—

🔐 HTTPS Records#

1 records 29ms

Priority	Target	SvcParams
1 service	.	alpn="h3,h2" ipv4hint=104.21.32.159,172.67.152.220 ech=AEX+DQBB5wAgACAfhnj2QjvcLesWssUrB3a5fnOhseRkvqgkI6RuTYeBJAAEAAEAAQASY2xvdWRmbGFyZS1lY2guY29tAAA= ipv6hint=2606:4700:3031::ac43:98dc,2606:4700:3034::6815:209f

📝 TXT Records#

1 records 136ms

TXT Record
v=spf1 include:spf.protection.outlook.com ~all

✉️ SPF#

Policy	Record (krask.dk)
~all (soft fail)	v=spf1 include:spf.protection.outlook.com ~all

📨 DMARC#

Policy	Record (_dmarc.krask.dk)
p=reject	v=DMARC1; p=reject; sp=reject; adkim=s; aspf=s; rua=mailto:2a3cf2fbc30a4be6b78bec13b8b2d8be@dmarc-reports.cloudflare.net;

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

✗ No CAA records — any CA may issue certificates

🧩 Web & zone#

latest probe, not this scan · checked 2026-10-23 20:29:34

www	104.21.32.159 172.67.152.220 2606:4700:3034::6815:209f 2606:4700:3035::ac43:98dc (AS13335) (address records, no CNAME)
www vs bare domain	Same network krask.dk: 104.21.32.159 172.67.152.220 2606:4700:3034::6815:209f 2606:4700:3035::ac43:98dc (AS13335) www.krask.dk: 104.21.32.159 172.67.152.220 2606:4700:3034::6815:209f 2606:4700:3035::ac43:98dc (AS13335)
Wildcard	Yes: any name under the zone resolves
CDS / CDNSKEY	Delete signal: the zone asks the registry to remove its DS (go insecure) 1 CDS, 1 CDNSKEY

✍️ DKIM keys#

7 found

Selector	CNAME	Key
default	—	Revoked (empty key)
dkim	—	Revoked (empty key)
k1	—	Revoked (empty key)
mail	—	Revoked (empty key)
s1	—	Revoked (empty key)
s2	—	Revoked (empty key)
selector1	selector1-krask-dk._domainkey.kraskoutlook.k-v1.dkim.mail.microsoft	RSA · ~2048 bit

DKIM selectors can't be listed, so we check the common ones (Microsoft 365, Google, Mailchimp, SendGrid, generic). Keys under other selectors aren't shown.

🔎 SPF check#

zone-wide SPF report

DNS lookups: 1/10 · policy: ~all

No problems found

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

120ms

Check	Result
Validation Status	⚠️ Bogus
AD Flag (resolver validates)	✗ Not set
DS Record	✗ Not found
DNSKEY Record	✗ Not found
Flags	broken trust chain resolving 'krask.dk/A/IN': 127.0.0.1#53

🏷️ SOA#

30ms

Field	Value
Serial	2406472487
Primary NS (MNAME)	angela.ns.cloudflare.com
Responsible (RNAME)	dns@cloudflare.com
Refresh	10000s
Retry	2400s
Expire	604800s
Minimum (neg-cache TTL)	1800s

📋 Registration#

WHOIS fetched 2026-10-01 00:11:39

Field	Value
Registrar	DANDOMAIN A/S
Registered	2025-06-04
Expires	2027-06-03 (222d)

📋 WHOIS#

⏱️ Lookup Timing#

40ms

45ms

35ms

AAAA

34ms

TXT

136ms

CAA

39ms

HTTPS

29ms

TLSA

165ms

SOA

30ms

MTA-STS

106ms

DNSSEC

120ms

SRV

0ms

Total

1118ms

🕐 Scan History#

Scanned At	Duration	Records	DNSSEC
2026-10-23 20:29:34	690ms	2 NS 2 A 1 MX	🔓 Insecure
2026-10-08 02:12:16	1190ms	2 NS 2 A 1 MX	🔓 Insecure
2026-09-30 23:58:45	972ms	2 NS 2 A 1 MX	🔓 Insecure
2026-09-24 22:34:47	1092ms	2 NS 2 A 1 MX	🔓 Insecure
2026-09-09 20:42:08	1915ms	2 NS 2 A 1 MX	🔓 Insecure
2026-08-30 06:56:28	3172ms	2 NS 2 A 1 MX	🔓 Insecure
2026-08-28 07:21:32	1338ms	2 NS 2 A 1 MX	🔓 Insecure
2026-08-26 07:00:24	1197ms	2 NS 2 A 1 MX	🔓 Insecure
2026-08-26 06:25:50	1486ms	2 NS 2 A 1 MX	🔓 Insecure
2026-07-23 02:08:09	25232ms	2 NS 2 A 1 MX	🔓 Insecure
2026-06-24 00:06:13	1650ms	2 NS 2 A 1 MX	🔓 Insecure
2026-06-17 15:36:04 shown	1118ms	2 NS 2 A 1 MX	⚠️ Bogus