nicolaielsberg.dk

📜 Historical scan 2026-08-28 03:29:24 · ← Latest scan

⬇ Zone File 📜 Timeline & History ⚡ Scan Now

nicolaielsberg.dk is a .dk domain served by 2 nameservers (brad.ns.cloudflare.com, penny.ns.cloudflare.com). It was registered on 27 May 2026 (WHOIS) and was already in the .dk zone when our tracking began on 16 June 2026. Mail is handled by route1.mx.cloudflare.net, route3.mx.cloudflare.net and 1 more. The zone is not DNSSEC-signed, publishes a DMARC policy and has no IPv6 address. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

2 records 32ms

Nameserver	IP addresses	PTR	ASN / ISP
brad.ns.cloudflare.com	108.162.193.105 172.64.33.105 173.245.59.105 2606:4700:58::adf5:3b69 2803:f800:50::6ca2:c169 2a06:98c1:50::ac40:2169	brad.ns.cloudflare.com brad.ns.cloudflare.com brad.ns.cloudflare.com brad.ns.cloudflare.com brad.ns.cloudflare.com brad.ns.cloudflare.com	AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc.
penny.ns.cloudflare.com	108.162.194.124 162.159.38.124 172.64.34.124 2606:4700:50::a29f:267c 2803:f800:50::6ca2:c27c 2a06:98c1:50::ac40:227c	penny.ns.cloudflare.com penny.ns.cloudflare.com penny.ns.cloudflare.com penny.ns.cloudflare.com penny.ns.cloudflare.com penny.ns.cloudflare.com	AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc.

🌍 A Records#

🌍

No A records found

📧 MX Records#

3 records 59ms

Priority	TTL	Mail Server	IP addresses	PTR	ASN
27	300s	route1.mx.cloudflare.net	162.159.205.11 162.159.205.12 162.159.205.13 2606:4700:f5::b 2606:4700:f5::c 2606:4700:f5::d	route1.mx.cloudflare.net route1.mx.cloudflare.net route1.mx.cloudflare.net route1.mx.cloudflare.net route1.mx.cloudflare.net route1.mx.cloudflare.net	AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc.
42	300s	route3.mx.cloudflare.net	162.159.205.23 162.159.205.24 162.159.205.25 2606:4700:f5::11 2606:4700:f5::12 2606:4700:f5::13	route3.mx.cloudflare.net route3.mx.cloudflare.net route3.mx.cloudflare.net route3.mx.cloudflare.net route3.mx.cloudflare.net route3.mx.cloudflare.net	AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc.
72	300s	route2.mx.cloudflare.net	162.159.205.17 162.159.205.18 162.159.205.19 2606:4700:f5::10 2606:4700:f5::e 2606:4700:f5::f	route2.mx.cloudflare.net route2.mx.cloudflare.net route2.mx.cloudflare.net route2.mx.cloudflare.net route2.mx.cloudflare.net route2.mx.cloudflare.net	AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc.

🔷 AAAA Records (IPv6)#

✗ No AAAA records — IPv6 not configured

🔐 HTTPS Records#

✗ No HTTPS RR — no SVCB/HTTPS service binding

📝 TXT Records#

2 records 221ms

TXT Record
google-site-verification=V_eQl7wgbszjx2J7QMdzG0AOnw9GlU9iCerFGZX5eBI
v=spf1 include:_spf.mx.cloudflare.net ~all

✉️ SPF#

Policy	Record (nicolaielsberg.dk)
~all (soft fail)	v=spf1 include:_spf.mx.cloudflare.net ~all

📨 DMARC#

Policy	Record (_dmarc.nicolaielsberg.dk)
p=reject	v=DMARC1; p=reject; sp=reject; adkim=s; aspf=s;

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

✗ No CAA records — any CA may issue certificates

🧩 Web & zone#

latest probe, not this scan · checked 2026-10-19 13:14:51

www	104.21.73.206 172.67.192.38 2606:4700:3030::ac43:c026 2606:4700:3031::6815:49ce (AS13335) (address records, no CNAME)
www vs bare domain	Only www resolves nicolaielsberg.dk: no address www.nicolaielsberg.dk: 104.21.73.206 172.67.192.38 2606:4700:3030::ac43:c026 2606:4700:3031::6815:49ce (AS13335) (all like this)
Wildcard	No
Denial of existence	Compact NSEC (RFC 9824, "black lies") not walkable
CDS / CDNSKEY	Delete signal: the zone asks the registry to remove its DS (go insecure) 1 CDS, 1 CDNSKEY

✍️ DKIM keys#

6 found

Selector	CNAME	Key
default	—	Revoked (empty key)
dkim	—	Revoked (empty key)
k1	—	Revoked (empty key)
mail	—	Revoked (empty key)
s1	—	Revoked (empty key)
s2	—	Revoked (empty key)

DKIM selectors can't be listed, so we check the common ones (Microsoft 365, Google, Mailchimp, SendGrid, generic). Keys under other selectors aren't shown.

🔎 SPF check#

zone-wide SPF report

DNS lookups: 1/10 · policy: ~all

No problems found

🔗 TLSA / DANE#

9 records 61ms

Service / Owner	Type	Cert association
SMTP _25._tcp.route1.mx.cloudflare.net	DANE-EE · SPKI · SHA-256	9BE5B7D47F9EFF930C11EB04D27CAE6B…
SMTP _25._tcp.route1.mx.cloudflare.net	DANE-TA · SPKI · SHA-256	59E738E674221702AF1EDB87C5200C1A…
SMTP _25._tcp.route1.mx.cloudflare.net	DANE-EE · SPKI · SHA-256	0F0C6C164A36F97E7B4C5A5B69D6F4F2…
SMTP _25._tcp.route2.mx.cloudflare.net	DANE-TA · SPKI · SHA-256	59E738E674221702AF1EDB87C5200C1A…
SMTP _25._tcp.route2.mx.cloudflare.net	DANE-EE · SPKI · SHA-256	0F0C6C164A36F97E7B4C5A5B69D6F4F2…
SMTP _25._tcp.route2.mx.cloudflare.net	DANE-EE · SPKI · SHA-256	9BE5B7D47F9EFF930C11EB04D27CAE6B…
SMTP _25._tcp.route3.mx.cloudflare.net	DANE-EE · SPKI · SHA-256	9BE5B7D47F9EFF930C11EB04D27CAE6B…
SMTP _25._tcp.route3.mx.cloudflare.net	DANE-TA · SPKI · SHA-256	59E738E674221702AF1EDB87C5200C1A…
SMTP _25._tcp.route3.mx.cloudflare.net	DANE-EE · SPKI · SHA-256	0F0C6C164A36F97E7B4C5A5B69D6F4F2…

🔐 DNSSEC#

106ms

Check	Result
Validation Status	🔓 Insecure
AD Flag (resolver validates)	✗ Not set
DS Record	✗ Not found
DNSKEY Record	✓ Found
Flags	resolution failed: ncache nxrrset

🏷️ SOA#

0ms

Field	Value
Serial	2411588539
Primary NS (MNAME)	brad.ns.cloudflare.com
Responsible (RNAME)	dns@cloudflare.com
Refresh	10000s
Retry	2400s
Expire	604800s
Minimum (neg-cache TTL)	1800s

📋 Registration#

WHOIS fetched 2026-10-05 08:02:31

Field	Value
Registrar	ONE.COM A/S
Registered	2026-05-27
Expires	2027-05-26 (211d)

📋 WHOIS#

⏱️ Lookup Timing#

32ms

49ms

59ms

AAAA

72ms

TXT

221ms

CAA

37ms

HTTPS

47ms

TLSA

61ms

SOA

0ms

MTA-STS

74ms

DNSSEC

106ms

SRV

94ms

Total

1137ms

🕐 Scan History#

Scanned At	Duration	Records	DNSSEC
2026-10-19 13:14:51	924ms	2 NS 0 A 3 MX	🔓 Insecure
2026-10-05 07:27:17	1242ms	2 NS 0 A 3 MX	🔓 Insecure
2026-10-01 07:06:25	745ms	2 NS 0 A 3 MX	🔓 Insecure
2026-09-30 02:29:56	1024ms	2 NS 0 A 3 MX	🔓 Insecure
2026-09-28 02:28:18	9640ms	2 NS 0 A 3 MX	🔓 Insecure
2026-09-25 10:35:23	1074ms	2 NS 0 A 3 MX	🔓 Insecure
2026-09-23 10:26:07	1168ms	2 NS 0 A 3 MX	🔓 Insecure
2026-09-04 02:44:55	1245ms	2 NS 0 A 3 MX	🔓 Insecure
2026-08-28 03:29:24 shown	1137ms	2 NS 0 A 3 MX	🔓 Insecure
2026-08-26 01:01:47	2029ms	2 NS 0 A 3 MX	🔓 Insecure
2026-08-08 22:17:28	1967ms	2 NS 0 A 3 MX	🔓 Insecure
2026-08-04 14:42:03	4057ms	2 NS 0 A 3 MX	🔓 Insecure
2026-07-25 14:28:51	3541ms	2 NS 0 A 3 MX	🔓 Insecure
2026-07-17 18:57:06	1578ms	2 NS 0 A 3 MX	🔓 Insecure
2026-06-27 03:41:20	9642ms	2 NS 0 A 3 MX	🔓 Insecure
2026-06-22 17:24:07	969ms	0 NS 0 A 0 MX	❓ Unknown
2026-06-17 13:36:39	4121ms	2 NS 0 A 3 MX	🔓 Insecure