krebsscan.dk

📜 Historical scan 2026-09-24 02:28:58  ·  ← Latest scan
⬇ Zone File 📜 Timeline & History ⚡ Scan Now

krebsscan.dk is a .dk domain served by 2 nameservers (lars.ns.cloudflare.com, tani.ns.cloudflare.com). It was registered on 27 April 2023 (WHOIS) and was already in the .dk zone when our tracking began on 16 June 2026. The zone is DNSSEC-signed and validates, publishes a DMARC policy and has no IPv6 address. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

2 records   29ms

🌍 A Records#

🌍
No A records found

📧 MX Records#

📧
No MX records found

🔷 AAAA Records (IPv6)#

✗ No AAAA records — IPv6 not configured

🔐 HTTPS Records#

✗ No HTTPS RR — no SVCB/HTTPS service binding

📝 TXT Records#

1 records   202ms
TXT Record
v=spf1 -all

✉️ SPF#

PolicyRecord (krebsscan.dk)
-all (hard fail) v=spf1 -all

📨 DMARC#

PolicyRecord (_dmarc.krebsscan.dk)
p=none (monitor only) v=DMARC1; p=none; sp=none; rua=mailto:hm_dmarc@hansemerkur.de,mailto:dmarc_agg@vali.email; ruf=mailto:postmaster@hansemerkur.de; fo=1; pct=100; aspf=r; adkim=r; ri=86400;

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

18 records   47ms
FlagsTagValue
0 issue amazon.com
0 issue amazonaws.com
0 issue amazontrust.com
0 issue awstrust.com
0 issue comodoca.com
0 issue digicert.com; cansignhttpexchanges=yes
0 issue letsencrypt.org
0 issue pki.goog; cansignhttpexchanges=yes
0 issue ssl.com
0 issuewild amazon.com
0 issuewild amazonaws.com
0 issuewild amazontrust.com
0 issuewild awstrust.com
0 issuewild comodoca.com
0 issuewild digicert.com; cansignhttpexchanges=yes
0 issuewild letsencrypt.org
0 issuewild pki.goog; cansignhttpexchanges=yes
0 issuewild ssl.com

🧩 Web & zone#

latest probe, not this scan · checked 2026-10-13 05:21:28
wwwExists, no address
www vs bare domainNeither resolves
krebsscan.dk: no address
www.krebsscan.dk: no address
WildcardNo
Denial of existenceCompact NSEC (RFC 9824, "black lies") not walkable
CDS / CDNSKEYPublished: key rollovers can be automated with the registry (RFC 7344/8078) 1 CDS, 1 CDNSKEY

🔎 SPF check#

zone-wide SPF report

DNS lookups: 0/10 · policy: -all

No problems found

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

2059ms
CheckResult
Validation Status🔒 Secure
AD Flag (resolver validates)✓ Set
DS Record✓ Found
DNSKEY Record✓ Found
Flagsresolution failed: ncache nxrrset

🏷️ SOA#

0ms
FieldValue
Serial2415214133
Primary NS (MNAME)lars.ns.cloudflare.com
Responsible (RNAME)dns@cloudflare.com
Refresh10000s
Retry2400s
Expire604800s
Minimum (neg-cache TTL)1800s

📋 Registration#

WHOIS fetched 2026-10-09 22:51:44
FieldValue
RegistrarKey-Systems GmbH
Registered2023-04-27
Expires2027-04-26 (184d)
📋 WHOIS#

⏱️ Lookup Timing#

NS
29ms
A
46ms
MX
46ms
AAAA
40ms
TXT
202ms
CAA
47ms
HTTPS
40ms
TLSA
50ms
SOA
0ms
MTA-STS
65ms
DNSSEC
2059ms
SRV
98ms
Total
2484ms

🕐 Scan History#

Scanned AtDurationRecordsDNSSEC
2026-10-13 05:21:28 2160ms 2 NS 0 A 0 MX 🔒 Secure
2026-09-24 02:28:58 shown 2484ms 2 NS 0 A 0 MX 🔒 Secure
2026-09-21 00:45:34 996ms 2 NS 0 A 0 MX 🔒 Secure
2026-09-06 20:52:15 1646ms 2 NS 0 A 0 MX 🔒 Secure
2026-08-25 16:36:37 611ms 2 NS 0 A 0 MX 🔓 Insecure
2026-08-04 05:06:34 839ms 2 NS 0 A 0 MX 🔓 Insecure
2026-07-25 10:58:27 823ms 2 NS 0 A 0 MX 🔓 Insecure
2026-07-18 15:36:11 8767ms 2 NS 0 A 0 MX 🔓 Insecure
2026-07-08 15:13:34 8757ms 2 NS 0 A 0 MX 🔓 Insecure
2026-06-17 20:52:27 657ms 2 NS 0 A 0 MX 🔓 Insecure
dhd.dk [/] search Domains, Hosts & DNS — .dk zone