krebs-scan.dk

📜 Historical scan 2026-08-09 22:50:27  ·  ← Latest scan
⬇ Zone File 📜 Timeline & History ⚡ Scan Now

krebs-scan.dk is a .dk domain served by 2 nameservers (lars.ns.cloudflare.com, tani.ns.cloudflare.com). It was registered on 19 June 2023 (WHOIS) and was already in the .dk zone when our tracking began on 16 June 2026. The zone is not DNSSEC-signed, publishes a DMARC policy and has no IPv6 address. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

2 records   210ms

🌍 A Records#

🌍
No A records found

📧 MX Records#

📧
No MX records found

🔷 AAAA Records (IPv6)#

✗ No AAAA records — IPv6 not configured

🔐 HTTPS Records#

✗ No HTTPS RR — no SVCB/HTTPS service binding

📝 TXT Records#

1 records   511ms
TXT Record
v=spf1 -all

✉️ SPF#

PolicyRecord (krebs-scan.dk)
-all (hard fail) v=spf1 -all

📨 DMARC#

PolicyRecord (_dmarc.krebs-scan.dk)
p=none (monitor only) v=DMARC1; p=none; sp=none; rua=mailto:hm_dmarc@hansemerkur.de,mailto:dmarc_agg@vali.email; ruf=mailto:postmaster@hansemerkur.de; fo=1; pct=100; aspf=r; adkim=r; ri=86400;

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

18 records   227ms
FlagsTagValue
0 issue amazon.com
0 issue amazonaws.com
0 issue amazontrust.com
0 issue awstrust.com
0 issue comodoca.com
0 issue digicert.com; cansignhttpexchanges=yes
0 issue letsencrypt.org
0 issue pki.goog; cansignhttpexchanges=yes
0 issue ssl.com
0 issuewild amazon.com
0 issuewild amazonaws.com
0 issuewild amazontrust.com
0 issuewild awstrust.com
0 issuewild comodoca.com
0 issuewild digicert.com; cansignhttpexchanges=yes
0 issuewild letsencrypt.org
0 issuewild pki.goog; cansignhttpexchanges=yes
0 issuewild ssl.com

🧩 Web & zone#

latest probe, not this scan · checked 2026-10-13 10:35:09
wwwExists, no address
www vs bare domainNeither resolves
krebs-scan.dk: no address
www.krebs-scan.dk: no address
WildcardNo
Denial of existenceCompact NSEC (RFC 9824, "black lies") not walkable
CDS / CDNSKEYPublished: key rollovers can be automated with the registry (RFC 7344/8078) 1 CDS, 1 CDNSKEY

🔎 SPF check#

zone-wide SPF report

DNS lookups: 0/10 · policy: -all

No problems found

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

412ms
CheckResult
Validation Status🔓 Insecure
AD Flag (resolver validates)✗ Not set
DS Record✗ Not found
DNSKEY Record✓ Found
Flagsresolution failed: ncache nxrrset

🏷️ SOA#

0ms
FieldValue
Serial2411727972
Primary NS (MNAME)lars.ns.cloudflare.com
Responsible (RNAME)dns@cloudflare.com
Refresh10000s
Retry2400s
Expire604800s
Minimum (neg-cache TTL)1800s

📋 Registration#

WHOIS fetched 2026-10-07 16:13:35
FieldValue
RegistrarKey-Systems GmbH
Registered2023-06-19
Expires2027-06-18 (237d)
📋 WHOIS#

⏱️ Lookup Timing#

NS
210ms
A
225ms
MX
224ms
AAAA
252ms
TXT
511ms
CAA
227ms
HTTPS
223ms
TLSA
69ms
SOA
0ms
MTA-STS
287ms
DNSSEC
412ms
SRV
268ms
Total
3764ms

🕐 Scan History#

Scanned AtDurationRecordsDNSSEC
2026-10-13 10:35:09 838ms 2 NS 0 A 0 MX 🔒 Secure
2026-10-07 16:02:37 864ms 2 NS 0 A 0 MX 🔒 Secure
2026-09-29 13:45:46 2432ms 2 NS 0 A 0 MX 🔒 Secure
2026-09-22 22:45:18 2536ms 2 NS 0 A 0 MX 🔒 Secure
2026-09-21 05:20:19 908ms 2 NS 0 A 0 MX 🔒 Secure
2026-08-26 11:18:52 653ms 2 NS 0 A 0 MX 🔓 Insecure
2026-08-09 22:50:27 shown 3764ms 2 NS 0 A 0 MX 🔓 Insecure
2026-08-08 02:08:21 938ms 2 NS 0 A 0 MX 🔓 Insecure
2026-07-24 17:07:10 1408ms 2 NS 0 A 0 MX 🔓 Insecure
2026-07-18 11:30:42 9762ms 2 NS 0 A 0 MX 🔓 Insecure
2026-07-08 22:49:04 8986ms 2 NS 0 A 0 MX 🔓 Insecure
2026-06-25 09:42:31 3392ms 2 NS 0 A 0 MX 🔓 Insecure
2026-06-19 22:22:49 2980ms 2 NS 0 A 0 MX 🔓 Insecure
2026-06-17 17:15:24 877ms 2 NS 0 A 0 MX 🔓 Insecure
dhd.dk [/] search Domains, Hosts & DNS — .dk zone