krebs-scan.dk

📜 Historical scan 2026-08-08 02:08:21  ·  ← Latest scan
⬇ Zone File 📜 Timeline & History ⚡ Scan Now

krebs-scan.dk is a .dk domain served by 2 nameservers (lars.ns.cloudflare.com, tani.ns.cloudflare.com). It was registered on 19 June 2023 (WHOIS) and was already in the .dk zone when our tracking began on 16 June 2026. The zone is not DNSSEC-signed, publishes a DMARC policy and has no IPv6 address. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

2 records   49ms

🌍 A Records#

🌍
No A records found

📧 MX Records#

📧
No MX records found

🔷 AAAA Records (IPv6)#

✗ No AAAA records — IPv6 not configured

🔐 HTTPS Records#

✗ No HTTPS RR — no SVCB/HTTPS service binding

📝 TXT Records#

1 records   205ms
TXT Record
v=spf1 -all

✉️ SPF#

PolicyRecord (krebs-scan.dk)
-all (hard fail) v=spf1 -all

📨 DMARC#

PolicyRecord (_dmarc.krebs-scan.dk)
p=none (monitor only) v=DMARC1; p=none; sp=none; rua=mailto:hm_dmarc@hansemerkur.de,mailto:dmarc_agg@vali.email; ruf=mailto:postmaster@hansemerkur.de; fo=1; pct=100; aspf=r; adkim=r; ri=86400;

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

18 records   47ms
FlagsTagValue
0 issue amazon.com
0 issue amazonaws.com
0 issue amazontrust.com
0 issue awstrust.com
0 issue comodoca.com
0 issue digicert.com; cansignhttpexchanges=yes
0 issue letsencrypt.org
0 issue pki.goog; cansignhttpexchanges=yes
0 issue ssl.com
0 issuewild amazon.com
0 issuewild amazonaws.com
0 issuewild amazontrust.com
0 issuewild awstrust.com
0 issuewild comodoca.com
0 issuewild digicert.com; cansignhttpexchanges=yes
0 issuewild letsencrypt.org
0 issuewild pki.goog; cansignhttpexchanges=yes
0 issuewild ssl.com

🧩 Web & zone#

latest probe, not this scan · checked 2026-10-13 10:35:09
wwwExists, no address
www vs bare domainNeither resolves
krebs-scan.dk: no address
www.krebs-scan.dk: no address
WildcardNo
Denial of existenceCompact NSEC (RFC 9824, "black lies") not walkable
CDS / CDNSKEYPublished: key rollovers can be automated with the registry (RFC 7344/8078) 1 CDS, 1 CDNSKEY

🔎 SPF check#

zone-wide SPF report

DNS lookups: 0/10 · policy: -all

No problems found

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

94ms
CheckResult
Validation Status🔓 Insecure
AD Flag (resolver validates)✗ Not set
DS Record✗ Not found
DNSKEY Record✓ Found
Flagsresolution failed: ncache nxrrset

🏷️ SOA#

0ms
FieldValue
Serial2411066900
Primary NS (MNAME)lars.ns.cloudflare.com
Responsible (RNAME)dns@cloudflare.com
Refresh10000s
Retry2400s
Expire604800s
Minimum (neg-cache TTL)1800s

📋 Registration#

WHOIS fetched 2026-10-07 16:13:35
FieldValue
RegistrarKey-Systems GmbH
Registered2023-06-19
Expires2027-06-18 (237d)
📋 WHOIS#

⏱️ Lookup Timing#

NS
49ms
A
63ms
MX
43ms
AAAA
42ms
TXT
205ms
CAA
47ms
HTTPS
52ms
TLSA
40ms
SOA
0ms
MTA-STS
67ms
DNSSEC
94ms
SRV
77ms
Total
938ms

🕐 Scan History#

Scanned AtDurationRecordsDNSSEC
2026-10-13 10:35:09 838ms 2 NS 0 A 0 MX 🔒 Secure
2026-10-07 16:02:37 864ms 2 NS 0 A 0 MX 🔒 Secure
2026-09-29 13:45:46 2432ms 2 NS 0 A 0 MX 🔒 Secure
2026-09-22 22:45:18 2536ms 2 NS 0 A 0 MX 🔒 Secure
2026-09-21 05:20:19 908ms 2 NS 0 A 0 MX 🔒 Secure
2026-08-26 11:18:52 653ms 2 NS 0 A 0 MX 🔓 Insecure
2026-08-09 22:50:27 3764ms 2 NS 0 A 0 MX 🔓 Insecure
2026-08-08 02:08:21 shown 938ms 2 NS 0 A 0 MX 🔓 Insecure
2026-07-24 17:07:10 1408ms 2 NS 0 A 0 MX 🔓 Insecure
2026-07-18 11:30:42 9762ms 2 NS 0 A 0 MX 🔓 Insecure
2026-07-08 22:49:04 8986ms 2 NS 0 A 0 MX 🔓 Insecure
2026-06-25 09:42:31 3392ms 2 NS 0 A 0 MX 🔓 Insecure
2026-06-19 22:22:49 2980ms 2 NS 0 A 0 MX 🔓 Insecure
2026-06-17 17:15:24 877ms 2 NS 0 A 0 MX 🔓 Insecure
dhd.dk [/] search Domains, Hosts & DNS — .dk zone