krebsscan.dk

📜 Historical scan 2026-08-04 05:06:34  ·  ← Latest scan
⬇ Zone File 📜 Timeline & History ⚡ Scan Now

krebsscan.dk is a .dk domain served by 2 nameservers (lars.ns.cloudflare.com, tani.ns.cloudflare.com). It was registered on 27 April 2023 (WHOIS) and was already in the .dk zone when our tracking began on 16 June 2026. The zone is not DNSSEC-signed, publishes a DMARC policy and has no IPv6 address. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

2 records   44ms

🌍 A Records#

🌍
No A records found

📧 MX Records#

📧
No MX records found

🔷 AAAA Records (IPv6)#

✗ No AAAA records — IPv6 not configured

🔐 HTTPS Records#

✗ No HTTPS RR — no SVCB/HTTPS service binding

📝 TXT Records#

1 records   192ms
TXT Record
v=spf1 -all

✉️ SPF#

PolicyRecord (krebsscan.dk)
-all (hard fail) v=spf1 -all

📨 DMARC#

PolicyRecord (_dmarc.krebsscan.dk)
p=none (monitor only) v=DMARC1; p=none; sp=none; rua=mailto:hm_dmarc@hansemerkur.de,mailto:dmarc_agg@vali.email; ruf=mailto:postmaster@hansemerkur.de; fo=1; pct=100; aspf=r; adkim=r; ri=86400;

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

18 records   42ms
FlagsTagValue
0 issue amazon.com
0 issue amazonaws.com
0 issue amazontrust.com
0 issue awstrust.com
0 issue comodoca.com
0 issue digicert.com; cansignhttpexchanges=yes
0 issue letsencrypt.org
0 issue pki.goog; cansignhttpexchanges=yes
0 issue ssl.com
0 issuewild amazon.com
0 issuewild amazonaws.com
0 issuewild amazontrust.com
0 issuewild awstrust.com
0 issuewild comodoca.com
0 issuewild digicert.com; cansignhttpexchanges=yes
0 issuewild letsencrypt.org
0 issuewild pki.goog; cansignhttpexchanges=yes
0 issuewild ssl.com

🧩 Web & zone#

latest probe, not this scan · checked 2026-10-13 05:21:28
wwwExists, no address
www vs bare domainNeither resolves
krebsscan.dk: no address
www.krebsscan.dk: no address
WildcardNo
Denial of existenceCompact NSEC (RFC 9824, "black lies") not walkable
CDS / CDNSKEYPublished: key rollovers can be automated with the registry (RFC 7344/8078) 1 CDS, 1 CDNSKEY

🔎 SPF check#

zone-wide SPF report

DNS lookups: 0/10 · policy: -all

No problems found

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

125ms
CheckResult
Validation Status🔓 Insecure
AD Flag (resolver validates)✗ Not set
DS Record✗ Not found
DNSKEY Record✓ Found
Flagsresolution failed: ncache nxrrset

🏷️ SOA#

0ms
FieldValue
Serial2411066925
Primary NS (MNAME)lars.ns.cloudflare.com
Responsible (RNAME)dns@cloudflare.com
Refresh10000s
Retry2400s
Expire604800s
Minimum (neg-cache TTL)1800s

📋 Registration#

WHOIS fetched 2026-10-09 22:51:44
FieldValue
RegistrarKey-Systems GmbH
Registered2023-04-27
Expires2027-04-26 (184d)
📋 WHOIS#

⏱️ Lookup Timing#

NS
44ms
A
42ms
MX
37ms
AAAA
42ms
TXT
192ms
CAA
42ms
HTTPS
42ms
TLSA
67ms
SOA
0ms
MTA-STS
115ms
DNSSEC
125ms
SRV
98ms
Total
839ms

🕐 Scan History#

Scanned AtDurationRecordsDNSSEC
2026-10-13 05:21:28 2160ms 2 NS 0 A 0 MX 🔒 Secure
2026-09-24 02:28:58 2484ms 2 NS 0 A 0 MX 🔒 Secure
2026-09-21 00:45:34 996ms 2 NS 0 A 0 MX 🔒 Secure
2026-09-06 20:52:15 1646ms 2 NS 0 A 0 MX 🔒 Secure
2026-08-25 16:36:37 611ms 2 NS 0 A 0 MX 🔓 Insecure
2026-08-04 05:06:34 shown 839ms 2 NS 0 A 0 MX 🔓 Insecure
2026-07-25 10:58:27 823ms 2 NS 0 A 0 MX 🔓 Insecure
2026-07-18 15:36:11 8767ms 2 NS 0 A 0 MX 🔓 Insecure
2026-07-08 15:13:34 8757ms 2 NS 0 A 0 MX 🔓 Insecure
2026-06-17 20:52:27 657ms 2 NS 0 A 0 MX 🔓 Insecure
dhd.dk [/] search Domains, Hosts & DNS — .dk zone