krebs-scan.dk

📜 Historical scan 2026-09-21 05:20:19  ·  ← Latest scan
⬇ Zone File 📜 Timeline & History ⚡ Scan Now

krebs-scan.dk is a .dk domain served by 2 nameservers (lars.ns.cloudflare.com, tani.ns.cloudflare.com). It was registered on 19 June 2023 (WHOIS) and was already in the .dk zone when our tracking began on 16 June 2026. The zone is DNSSEC-signed and validates, publishes a DMARC policy and has no IPv6 address. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

2 records   103ms

🌍 A Records#

🌍
No A records found

📧 MX Records#

📧
No MX records found

🔷 AAAA Records (IPv6)#

✗ No AAAA records — IPv6 not configured

🔐 HTTPS Records#

✗ No HTTPS RR — no SVCB/HTTPS service binding

📝 TXT Records#

1 records   233ms
TXT Record
v=spf1 -all

✉️ SPF#

PolicyRecord (krebs-scan.dk)
-all (hard fail) v=spf1 -all

📨 DMARC#

PolicyRecord (_dmarc.krebs-scan.dk)
p=none (monitor only) v=DMARC1; p=none; sp=none; rua=mailto:hm_dmarc@hansemerkur.de,mailto:dmarc_agg@vali.email; ruf=mailto:postmaster@hansemerkur.de; fo=1; pct=100; aspf=r; adkim=r; ri=86400;

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

18 records   127ms
FlagsTagValue
0 issue amazon.com
0 issue amazonaws.com
0 issue amazontrust.com
0 issue awstrust.com
0 issue comodoca.com
0 issue digicert.com; cansignhttpexchanges=yes
0 issue letsencrypt.org
0 issue pki.goog; cansignhttpexchanges=yes
0 issue ssl.com
0 issuewild amazon.com
0 issuewild amazonaws.com
0 issuewild amazontrust.com
0 issuewild awstrust.com
0 issuewild comodoca.com
0 issuewild digicert.com; cansignhttpexchanges=yes
0 issuewild letsencrypt.org
0 issuewild pki.goog; cansignhttpexchanges=yes
0 issuewild ssl.com

🧩 Web & zone#

latest probe, not this scan · checked 2026-10-13 10:35:09
wwwExists, no address
www vs bare domainNeither resolves
krebs-scan.dk: no address
www.krebs-scan.dk: no address
WildcardNo
Denial of existenceCompact NSEC (RFC 9824, "black lies") not walkable
CDS / CDNSKEYPublished: key rollovers can be automated with the registry (RFC 7344/8078) 1 CDS, 1 CDNSKEY

🔎 SPF check#

zone-wide SPF report

DNS lookups: 0/10 · policy: -all

No problems found

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

167ms
CheckResult
Validation Status🔒 Secure
AD Flag (resolver validates)✓ Set
DS Record✓ Found
DNSKEY Record✓ Found
Flagsresolution failed: ncache nxrrset

🏷️ SOA#

0ms
FieldValue
Serial2415214108
Primary NS (MNAME)lars.ns.cloudflare.com
Responsible (RNAME)dns@cloudflare.com
Refresh10000s
Retry2400s
Expire604800s
Minimum (neg-cache TTL)1800s

📋 Registration#

WHOIS fetched 2026-10-07 16:13:35
FieldValue
RegistrarKey-Systems GmbH
Registered2023-06-19
Expires2027-06-18 (237d)
📋 WHOIS#

⏱️ Lookup Timing#

NS
103ms
A
123ms
MX
127ms
AAAA
125ms
TXT
233ms
CAA
127ms
HTTPS
118ms
TLSA
30ms
SOA
0ms
MTA-STS
125ms
DNSSEC
167ms
SRV
125ms
Total
908ms

🕐 Scan History#

Scanned AtDurationRecordsDNSSEC
2026-10-13 10:35:09 838ms 2 NS 0 A 0 MX 🔒 Secure
2026-10-07 16:02:37 864ms 2 NS 0 A 0 MX 🔒 Secure
2026-09-29 13:45:46 2432ms 2 NS 0 A 0 MX 🔒 Secure
2026-09-22 22:45:18 2536ms 2 NS 0 A 0 MX 🔒 Secure
2026-09-21 05:20:19 shown 908ms 2 NS 0 A 0 MX 🔒 Secure
2026-08-26 11:18:52 653ms 2 NS 0 A 0 MX 🔓 Insecure
2026-08-09 22:50:27 3764ms 2 NS 0 A 0 MX 🔓 Insecure
2026-08-08 02:08:21 938ms 2 NS 0 A 0 MX 🔓 Insecure
2026-07-24 17:07:10 1408ms 2 NS 0 A 0 MX 🔓 Insecure
2026-07-18 11:30:42 9762ms 2 NS 0 A 0 MX 🔓 Insecure
2026-07-08 22:49:04 8986ms 2 NS 0 A 0 MX 🔓 Insecure
2026-06-25 09:42:31 3392ms 2 NS 0 A 0 MX 🔓 Insecure
2026-06-19 22:22:49 2980ms 2 NS 0 A 0 MX 🔓 Insecure
2026-06-17 17:15:24 877ms 2 NS 0 A 0 MX 🔓 Insecure
dhd.dk [/] search Domains, Hosts & DNS — .dk zone