krebs-scan.dk DNS records

🖥️ Nameservers2 records 33ms

Nameserver	IP addresses	PTR	ASN / ISP
lars.ns.cloudflare.com	108.162.193.195 172.64.33.195 173.245.59.195 2606:4700:58::adf5:3bc3 2803:f800:50::6ca2:c1c3 2a06:98c1:50::ac40:21c3	lars.ns.cloudflare.com lars.ns.cloudflare.com lars.ns.cloudflare.com lars.ns.cloudflare.com lars.ns.cloudflare.com lars.ns.cloudflare.com	AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc.
tani.ns.cloudflare.com	108.162.192.224 172.64.32.224 173.245.58.224 2606:4700:50::adf5:3ae0 2803:f800:50::6ca2:c0e0 2a06:98c1:50::ac40:20e0	tani.ns.cloudflare.com tani.ns.cloudflare.com tani.ns.cloudflare.com tani.ns.cloudflare.com tani.ns.cloudflare.com tani.ns.cloudflare.com	AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc.

🌍 A Records

🌍

No A records found

📧 MX Records

📧

No MX records found

🔷 AAAA Records (IPv6)

✗ No AAAA records — IPv6 not configured

🔐 HTTPS Records

✗ No HTTPS RR — no SVCB/HTTPS service binding

📝 TXT Records1 records 166ms

TXT Record
v=spf1 -all

✉️ SPF

Policy	Record (krebs-scan.dk)
-all (hard fail)	v=spf1 -all

📨 DMARC

Policy	Record (_dmarc.krebs-scan.dk)
p=none (monitor only)	v=DMARC1; p=none; sp=none; rua=mailto:hm_dmarc@hansemerkur.de,mailto:dmarc_agg@vali.email; ruf=mailto:postmaster@hansemerkur.de; fo=1; pct=100; aspf=r; adkim=r; ri=86400;

📬 MTA-STS

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records18 records 29ms

Flags	Tag	Value
0	issue	amazon.com
0	issue	amazonaws.com
0	issue	amazontrust.com
0	issue	awstrust.com
0	issue	comodoca.com
0	issue	digicert.com; cansignhttpexchanges=yes
0	issue	letsencrypt.org
0	issue	pki.goog; cansignhttpexchanges=yes
0	issue	ssl.com
0	issuewild	amazon.com
0	issuewild	amazonaws.com
0	issuewild	amazontrust.com
0	issuewild	awstrust.com
0	issuewild	comodoca.com
0	issuewild	digicert.com; cansignhttpexchanges=yes
0	issuewild	letsencrypt.org
0	issuewild	pki.goog; cansignhttpexchanges=yes
0	issuewild	ssl.com

🔗 TLSA / DANE

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC105ms

Check	Result
Validation Status	🔓 Insecure
AD Flag (resolver validates)	✗ Not set
DS Record	✗ Not found
DNSKEY Record	✓ Found
Flags	resolution failed: ncache nxrrset

🏷️ SOA0ms

Field	Value
Serial	2413140504
Primary NS (MNAME)	lars.ns.cloudflare.com
Responsible (RNAME)	dns@cloudflare.com
Refresh	10000s
Retry	2400s
Expire	604800s
Minimum (neg-cache TTL)	1800s

📋 Registration

✗ No registration data — collected automatically when SOA serial changes

📋 WHOIS

⏱️ Lookup Timing

NS

33ms

A

29ms

MX

25ms

AAAA

28ms

TXT

166ms

CAA

29ms

HTTPS

33ms

TLSA

42ms

SOA

0ms

MTA-STS

51ms

DNSSEC

105ms

SRV

53ms

Total

653ms

🕐 Scan History

Scanned At	Duration	Records	DNSSEC
2026-08-26 11:18:52	653ms	2 NS 0 A 0 MX	🔓 Insecure	View
2026-08-09 22:50:27	3764ms	2 NS 0 A 0 MX	🔓 Insecure	View
2026-08-08 02:08:21	938ms	2 NS 0 A 0 MX	🔓 Insecure	View
2026-07-24 17:07:10	1408ms	2 NS 0 A 0 MX	🔓 Insecure	View
2026-07-18 11:30:42	9762ms	2 NS 0 A 0 MX	🔓 Insecure	View
2026-07-08 22:49:04	8986ms	2 NS 0 A 0 MX	🔓 Insecure	View
2026-06-25 09:42:31	3392ms	2 NS 0 A 0 MX	🔓 Insecure	View
2026-06-19 22:22:49	2980ms	2 NS 0 A 0 MX	🔓 Insecure	View
2026-06-17 17:15:24	877ms	2 NS 0 A 0 MX	🔓 Insecure	View