krebsscan.dk

📜 Historical scan 2026-08-25 16:36:37  ·  ← Latest scan
⬇ Zone File 📜 Timeline & History ⚡ Scan Now

krebsscan.dk is a .dk domain served by 2 nameservers (lars.ns.cloudflare.com, tani.ns.cloudflare.com). It was registered on 27 April 2023 (WHOIS) and was already in the .dk zone when our tracking began on 16 June 2026. The zone is not DNSSEC-signed, publishes a DMARC policy and has no IPv6 address. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

2 records   30ms

🌍 A Records#

🌍
No A records found

📧 MX Records#

📧
No MX records found

🔷 AAAA Records (IPv6)#

✗ No AAAA records — IPv6 not configured

🔐 HTTPS Records#

✗ No HTTPS RR — no SVCB/HTTPS service binding

📝 TXT Records#

1 records   152ms
TXT Record
v=spf1 -all

✉️ SPF#

PolicyRecord (krebsscan.dk)
-all (hard fail) v=spf1 -all

📨 DMARC#

PolicyRecord (_dmarc.krebsscan.dk)
p=none (monitor only) v=DMARC1; p=none; sp=none; rua=mailto:hm_dmarc@hansemerkur.de,mailto:dmarc_agg@vali.email; ruf=mailto:postmaster@hansemerkur.de; fo=1; pct=100; aspf=r; adkim=r; ri=86400;

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

18 records   30ms
FlagsTagValue
0 issue amazon.com
0 issue amazonaws.com
0 issue amazontrust.com
0 issue awstrust.com
0 issue comodoca.com
0 issue digicert.com; cansignhttpexchanges=yes
0 issue letsencrypt.org
0 issue pki.goog; cansignhttpexchanges=yes
0 issue ssl.com
0 issuewild amazon.com
0 issuewild amazonaws.com
0 issuewild amazontrust.com
0 issuewild awstrust.com
0 issuewild comodoca.com
0 issuewild digicert.com; cansignhttpexchanges=yes
0 issuewild letsencrypt.org
0 issuewild pki.goog; cansignhttpexchanges=yes
0 issuewild ssl.com

🧩 Web & zone#

latest probe, not this scan · checked 2026-10-13 05:21:28
wwwExists, no address
www vs bare domainNeither resolves
krebsscan.dk: no address
www.krebsscan.dk: no address
WildcardNo
Denial of existenceCompact NSEC (RFC 9824, "black lies") not walkable
CDS / CDNSKEYPublished: key rollovers can be automated with the registry (RFC 7344/8078) 1 CDS, 1 CDNSKEY

🔎 SPF check#

zone-wide SPF report

DNS lookups: 0/10 · policy: -all

No problems found

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

106ms
CheckResult
Validation Status🔓 Insecure
AD Flag (resolver validates)✗ Not set
DS Record✗ Not found
DNSKEY Record✓ Found
Flagsresolution failed: ncache nxrrset

🏷️ SOA#

0ms
FieldValue
Serial2413140529
Primary NS (MNAME)lars.ns.cloudflare.com
Responsible (RNAME)dns@cloudflare.com
Refresh10000s
Retry2400s
Expire604800s
Minimum (neg-cache TTL)1800s

📋 Registration#

WHOIS fetched 2026-10-09 22:51:44
FieldValue
RegistrarKey-Systems GmbH
Registered2023-04-27
Expires2027-04-26 (184d)
📋 WHOIS#

⏱️ Lookup Timing#

NS
30ms
A
22ms
MX
22ms
AAAA
25ms
TXT
152ms
CAA
30ms
HTTPS
30ms
TLSA
39ms
SOA
0ms
MTA-STS
47ms
DNSSEC
106ms
SRV
50ms
Total
611ms

🕐 Scan History#

Scanned AtDurationRecordsDNSSEC
2026-10-13 05:21:28 2160ms 2 NS 0 A 0 MX 🔒 Secure
2026-09-24 02:28:58 2484ms 2 NS 0 A 0 MX 🔒 Secure
2026-09-21 00:45:34 996ms 2 NS 0 A 0 MX 🔒 Secure
2026-09-06 20:52:15 1646ms 2 NS 0 A 0 MX 🔒 Secure
2026-08-25 16:36:37 shown 611ms 2 NS 0 A 0 MX 🔓 Insecure
2026-08-04 05:06:34 839ms 2 NS 0 A 0 MX 🔓 Insecure
2026-07-25 10:58:27 823ms 2 NS 0 A 0 MX 🔓 Insecure
2026-07-18 15:36:11 8767ms 2 NS 0 A 0 MX 🔓 Insecure
2026-07-08 15:13:34 8757ms 2 NS 0 A 0 MX 🔓 Insecure
2026-06-17 20:52:27 657ms 2 NS 0 A 0 MX 🔓 Insecure
dhd.dk [/] search Domains, Hosts & DNS — .dk zone