krfo.dk

📜 Historical scan 2026-09-25 21:05:44  ·  ← Latest scan
⬇ Zone File 📜 Timeline & History ⚡ Scan Now

krfo.dk is a .dk domain served by 2 nameservers (ns.scannet2.dk, ns2.scannet2.dk). It was registered on 20 October 2017 (WHOIS) and was already in the .dk zone when our tracking began on 16 June 2026. Mail is handled by mailscan1.kriminalforsorgen.dk, mailscan2.kriminalforsorgen.dk. The zone is DNSSEC-signed and validates, publishes a DMARC policy and has no IPv6 address. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

2 records   41ms
NameserverIP addressesPTRASN / ISP
ns.scannet2.dk 185.25.141.9
2a02:2339:4006:10d::4171:4171		 ns1.scannet.dk
ns1.scannet.dk		 AS48854 team.blue Denmark A/S
AS48854 team.blue Denmark A/S
ns2.scannet2.dk 2a02:2339:1:112:0:5:1:b11
91.197.248.72		 ns2.scannet.dk
ns2.scannet.dk		 AS48854 team.blue Denmark A/S
AS48854 team.blue Denmark A/S

🌍 A Records#

🌍
No A records found

📧 MX Records#

2 records   25ms
PriorityTTLMail ServerIP addressesPTRASN
10 3600s mailscan1.kriminalforsorgen.dk 185.49.252.35 mailscan1.kriminalforsorgen.dk AS58282 Statens IT
10 3600s mailscan2.kriminalforsorgen.dk 185.49.252.36 mailscan2.kriminalforsorgen.dk AS58282 Statens IT

📧 Autodiscover / Autoconfig#

ServiceCNAME / IP
🔷 Autodiscover185.49.252.22

🔷 AAAA Records (IPv6)#

✗ No AAAA records — IPv6 not configured

🔐 HTTPS Records#

✗ No HTTPS RR — no SVCB/HTTPS service binding

🔌 SRV Records#

1 records   55ms
ServicePriorityWeightPortTarget
_sipfederationtls._tcp 0 0 5061 sip.krfo.dk

📝 TXT Records#

27 records   129ms
TXT Record
_as9qdfbzu84vwob0eqvdun20nhfdsvm
_globalsign-domain-verification=1HFFV6EeZ2dnZAsfOQuwkdYKlolzLuRl3QxMMzjTg5
_globalsign-domain-verification=DMC7pAxQzUC9zdchx1eG7QQYOUbiy8gYAbc0Ec3wS7
_globalsign-domain-verification=h7KkCHT7XXgwEDWrozwTmjNJJ7eJ1zeqDHfs5FfUP4
_globalsign-domain-verification=kaea1b8MFReG9vgzN5IGwTmVmZECzZimDdh6SSfJWD
_globalsign-domain-verification=KX0i--DGR4F8i7fX8F1B4yfEymMnzWn8h2KSKrbhKp
_globalsign-domain-verification=mWJqucHC6Qdn8Tzr29f1pxvNAOIizgoWN7b5lNjLr-
_globalsign-domain-verification=OJJaG8TdewMs3nTUummSxX-6ymnT776iGLy7BRkKw3
_globalsign-domain-verification=q1JKFJR8ZRon3tE-8rdqDqZyXqRIQvFtaa74NsKQLk
_globalsign-domain-verification=Rg4ugW00IdoBfnZ-R7FFrS7beYiarU36t0KnZ9iV5h
_globalsign-domain-verification=TJImsaTnBnN47GXwpATtA3eUji1etp-azncSxjBmOi
_globalsign-domain-verification=UdXuDigJJ2zvL7qZ5S_ce5Y9rEQQ7yufRSizpPXRNI
_globalsign-domain-verification=UVoS6RHGC55BTkcfqB7VWi4I14_oEFiyGCB108T1Vh
_globalsign-domain-verification=ww87TMNF7Q4k4u1EI1qBZSxPdx_IZWLX2YUlthRIFV
_globalsign-domain-verification=XnLf1N04VexZda4NFjHqbsr2YOuNPDrE83wy19oqUY
_globalsign-domain-verification=xNsKzfO0ezq1CFcfF4P-pvxFgsRl4rjF_gybDMMyrz
_globalsign-domain-verification=zpXfF0pLfRw0865siyxEUZbMHrL_-FO5MgJpMIi651
_rmfgd4ta2at4ilbk5rrk79c42malt6z
58z6jj8jk2sq0zcwf9jk05bjqnfdzv0s
adobe-idp-site-verification=2ffa6c141e27c71a7459d125cad6b2da6d502ab25382f144eceb61637677ea6b
apple-domain-verification=KxqzYTCycgMfLOHk
globalsign-domain-verification=jSlHpszLhuK1ptI7OK7zOfS9b1NJyVolMxUoWGkPpG
globalsign-domain-verification=PCUraxgTu5j2XOSWq_2EEUY9n8pArAfgbVuaLPvYUk
globalsign-domain-verification=ts2bNX3zAvzHEOeuJ_qSY3oNwTitxAA7PqnlmjuLmO
SXgAhMtpzAulcDwXqBwxnKuz/1Hb4fQnupAruDllwpxlFornCQ8UIofq3u83fDMp5pPSY7DxXqet/WqC7SO0KA==
v=spf1 ip4:185.49.252.35 ip4:185.49.252.36 include:network.mynewsdesk.com include:spf.gecko.dk -all
z6Y+EAm/Cx4iQofeGxMpiEt/2uK39NAN5l1TnC6VriQ=

✉️ SPF#

PolicyRecord (krfo.dk)
-all (hard fail) v=spf1 ip4:185.49.252.35 ip4:185.49.252.36 include:network.mynewsdesk.com include:spf.gecko.dk -all

📨 DMARC#

PolicyRecord (_dmarc.krfo.dk)
p=reject v=DMARC1; p=reject; rua=mailto:rvq3rsi4@ag.eu.dmarcadvisor.com; ruf=mailto:rvq3rsi4@fr.eu.dmarcadvisor.com

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

✗ No CAA records — any CA may issue certificates

🧩 Web & zone#

latest probe, not this scan · checked 2026-10-15 22:16:31
wwwNXDOMAIN
www vs bare domainNeither resolves
krfo.dk: no address
www.krfo.dk: no address
WildcardNo
Denial of existenceNSEC3 · 1 iteration · 1-byte salt RFC 9276 recommends 0 iterations and no salt
CDS / CDNSKEYNone 0 CDS, 0 CDNSKEY

🔎 SPF check#

zone-wide SPF report

DNS lookups: 3/10 · policy: -all

No problems found

🔗 TLSA / DANE#

2 records   84ms
Service / OwnerTypeCert association
SMTP _25._tcp.mailscan1.kriminalforsorgen.dk DANE-EE · SPKI · SHA-256 18C6A733C4910434D99D667303D57FBD…
SMTP _25._tcp.mailscan2.kriminalforsorgen.dk DANE-EE · SPKI · SHA-256 18C6A733C4910434D99D667303D57FBD…

🔐 DNSSEC#

73ms
CheckResult
Validation Status🔒 Secure
AD Flag (resolver validates)✓ Set
DS Record✓ Found
DNSKEY Record✓ Found
Flagsresolution failed: ncache nxrrset

🏷️ SOA#

0ms
FieldValue
Serial2026061501
Primary NS (MNAME)ns.scannet2.dk
Responsible (RNAME)hostmaster@scannet.dk
Refresh14400s
Retry3600s
Expire1209600s
Minimum (neg-cache TTL)300s

📋 Registration#

WHOIS fetched 2026-10-15 22:35:38
FieldValue
RegistrarPunktum dk A/S (direct)
Registered2017-10-20
Expires2027-10-31 (376d)

🔗 Same registrant#

4 domains

Other .dk domains whose WHOIS registrant has the same name and postal address. Matched on a keyed hash: the registrant's details are not stored or shown. Covers only domains whose WHOIS we have fetched (refreshed about monthly).

DomainRegistrar
blivfængselsbetjent.dkPunktum dk A/S (direct)
blivtransportbetjent.dkPunktum dk A/S (direct)
dkf.dkPunktum dk A/S (direct)
jmres.dkPunktum dk A/S (direct)
📋 WHOIS#

⏱️ Lookup Timing#

NS
41ms
A
35ms
MX
25ms
AAAA
55ms
TXT
129ms
CAA
30ms
HTTPS
31ms
TLSA
84ms
SOA
0ms
MTA-STS
58ms
DNSSEC
73ms
SRV
55ms
Total
640ms

🕐 Scan History#

Scanned AtDurationRecordsDNSSEC
2026-10-15 22:16:31 1882ms 2 NS 0 A 2 MX 🔒 Secure
2026-09-25 21:05:44 shown 640ms 2 NS 0 A 2 MX 🔒 Secure
2026-09-12 01:29:01 772ms 2 NS 0 A 2 MX 🔒 Secure
2026-06-17 15:34:57 2456ms 2 NS 0 A 2 MX 🔒 Secure
dhd.dk [/] search Domains, Hosts & DNS — .dk zone