krebs-scan.dk

📜 Historical scan 2026-08-26 11:18:52  ·  ← Latest scan
⬇ Zone File 📜 Timeline & History ⚡ Scan Now

krebs-scan.dk is a .dk domain served by 2 nameservers (lars.ns.cloudflare.com, tani.ns.cloudflare.com). It was registered on 19 June 2023 (WHOIS) and was already in the .dk zone when our tracking began on 16 June 2026. The zone is not DNSSEC-signed, publishes a DMARC policy and has no IPv6 address. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

2 records   33ms

🌍 A Records#

🌍
No A records found

📧 MX Records#

📧
No MX records found

🔷 AAAA Records (IPv6)#

✗ No AAAA records — IPv6 not configured

🔐 HTTPS Records#

✗ No HTTPS RR — no SVCB/HTTPS service binding

📝 TXT Records#

1 records   166ms
TXT Record
v=spf1 -all

✉️ SPF#

PolicyRecord (krebs-scan.dk)
-all (hard fail) v=spf1 -all

📨 DMARC#

PolicyRecord (_dmarc.krebs-scan.dk)
p=none (monitor only) v=DMARC1; p=none; sp=none; rua=mailto:hm_dmarc@hansemerkur.de,mailto:dmarc_agg@vali.email; ruf=mailto:postmaster@hansemerkur.de; fo=1; pct=100; aspf=r; adkim=r; ri=86400;

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

18 records   29ms
FlagsTagValue
0 issue amazon.com
0 issue amazonaws.com
0 issue amazontrust.com
0 issue awstrust.com
0 issue comodoca.com
0 issue digicert.com; cansignhttpexchanges=yes
0 issue letsencrypt.org
0 issue pki.goog; cansignhttpexchanges=yes
0 issue ssl.com
0 issuewild amazon.com
0 issuewild amazonaws.com
0 issuewild amazontrust.com
0 issuewild awstrust.com
0 issuewild comodoca.com
0 issuewild digicert.com; cansignhttpexchanges=yes
0 issuewild letsencrypt.org
0 issuewild pki.goog; cansignhttpexchanges=yes
0 issuewild ssl.com

🧩 Web & zone#

latest probe, not this scan · checked 2026-10-13 10:35:09
wwwExists, no address
www vs bare domainNeither resolves
krebs-scan.dk: no address
www.krebs-scan.dk: no address
WildcardNo
Denial of existenceCompact NSEC (RFC 9824, "black lies") not walkable
CDS / CDNSKEYPublished: key rollovers can be automated with the registry (RFC 7344/8078) 1 CDS, 1 CDNSKEY

🔎 SPF check#

zone-wide SPF report

DNS lookups: 0/10 · policy: -all

No problems found

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

105ms
CheckResult
Validation Status🔓 Insecure
AD Flag (resolver validates)✗ Not set
DS Record✗ Not found
DNSKEY Record✓ Found
Flagsresolution failed: ncache nxrrset

🏷️ SOA#

0ms
FieldValue
Serial2413140504
Primary NS (MNAME)lars.ns.cloudflare.com
Responsible (RNAME)dns@cloudflare.com
Refresh10000s
Retry2400s
Expire604800s
Minimum (neg-cache TTL)1800s

📋 Registration#

WHOIS fetched 2026-10-07 16:13:35
FieldValue
RegistrarKey-Systems GmbH
Registered2023-06-19
Expires2027-06-18 (237d)
📋 WHOIS#

⏱️ Lookup Timing#

NS
33ms
A
29ms
MX
25ms
AAAA
28ms
TXT
166ms
CAA
29ms
HTTPS
33ms
TLSA
42ms
SOA
0ms
MTA-STS
51ms
DNSSEC
105ms
SRV
53ms
Total
653ms

🕐 Scan History#

Scanned AtDurationRecordsDNSSEC
2026-10-13 10:35:09 838ms 2 NS 0 A 0 MX 🔒 Secure
2026-10-07 16:02:37 864ms 2 NS 0 A 0 MX 🔒 Secure
2026-09-29 13:45:46 2432ms 2 NS 0 A 0 MX 🔒 Secure
2026-09-22 22:45:18 2536ms 2 NS 0 A 0 MX 🔒 Secure
2026-09-21 05:20:19 908ms 2 NS 0 A 0 MX 🔒 Secure
2026-08-26 11:18:52 shown 653ms 2 NS 0 A 0 MX 🔓 Insecure
2026-08-09 22:50:27 3764ms 2 NS 0 A 0 MX 🔓 Insecure
2026-08-08 02:08:21 938ms 2 NS 0 A 0 MX 🔓 Insecure
2026-07-24 17:07:10 1408ms 2 NS 0 A 0 MX 🔓 Insecure
2026-07-18 11:30:42 9762ms 2 NS 0 A 0 MX 🔓 Insecure
2026-07-08 22:49:04 8986ms 2 NS 0 A 0 MX 🔓 Insecure
2026-06-25 09:42:31 3392ms 2 NS 0 A 0 MX 🔓 Insecure
2026-06-19 22:22:49 2980ms 2 NS 0 A 0 MX 🔓 Insecure
2026-06-17 17:15:24 877ms 2 NS 0 A 0 MX 🔓 Insecure
dhd.dk [/] search Domains, Hosts & DNS — .dk zone