ondand.dk

📜 Historical scan 2026-06-17 14:27:07  ·  ← Latest scan
⬇ Zone File 📜 Timeline & History ⚡ Scan Now

ondand.dk is a .dk domain served by 2 nameservers (sasha.ns.cloudflare.com, yew.ns.cloudflare.com). It was registered on 28 July 2012 (WHOIS) and was already in the .dk zone when our tracking began on 16 June 2026. Its website address 104.21.93.246 is hosted by Cloudflare, Inc. (AS13335). Mail is handled by mx1.gigahost.dk, mx2.gigahost.dk and 2 more. The zone is not DNSSEC-signed, publishes a DMARC policy and is reachable over IPv6. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

2 records   97ms

🌍 A Records#

2 records   73ms
IPTTLPTRASNISP / OrgCIDRCountryCity
104.21.93.246 — — AS13335 Cloudflare, Inc. 104.21.0.0/17 — —
172.67.216.228 — — AS13335 Cloudflare, Inc. 172.67.128.0/17 — —

📧 MX Records#

4 records   63ms

🔷 AAAA Records (IPv6)#

2 records   58ms

🔐 HTTPS Records#

1 records   92ms
PriorityTargetSvcParams
1 service . alpn="h3,h2" ipv4hint=104.21.93.246,172.67.216.228 ech=AEX+DQBBOwAgACAG1eGjqSgaba5UXmh5eE84iX3ffsXq/5DpIUhEmpCbbQAEAAEAAQASY2xvdWRmbGFyZS1lY2guY29tAAA= ipv6hint=2606:4700:3031::ac43:d8e4,2606:4700:3037::6815:5df6

📝 TXT Records#

3 records   185ms
TXT Record
spf2.0/pra
v=spf1 ip4:46.183.139.199 ~all
v=spf1 mx include:spf.gigahost.dk -all

✉️ SPF#

⚠ Multiple SPF records — RFC 7208 §4.5 violation (receivers must treat this as permerror)
PolicyRecord (ondand.dk)
~all (soft fail) v=spf1 ip4:46.183.139.199 ~all
-all (hard fail) v=spf1 mx include:spf.gigahost.dk -all

📨 DMARC#

PolicyRecord (_dmarc.ondand.dk)
p=reject v=DMARC1; p=reject;

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

✗ No CAA records — any CA may issue certificates

🧩 Web & zone#

latest probe, not this scan · checked 2026-10-16 13:10:47

🔎 SPF check#

zone-wide SPF report

DNS lookups: 0/10 · policy: ~all

  • error 2 SPF records: receivers must treat that as a permanent error (RFC 7208 §4.5)

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

184ms
CheckResult
Validation Status🔓 Insecure
AD Flag (resolver validates)✗ Not set
DS Record✗ Not found
DNSKEY Record✗ Not found
Flagsunsigned answer

🏷️ SOA#

88ms
FieldValue
Serial2406444772
Primary NS (MNAME)sasha.ns.cloudflare.com
Responsible (RNAME)dns@cloudflare.com
Refresh10000s
Retry2400s
Expire604800s
Minimum (neg-cache TTL)1800s

📋 Registration#

WHOIS fetched 2026-10-05 17:12:30
FieldValue
RegistrarPunktum dk A/S (direct)
Registered2012-07-28
Expires2027-07-31 (285d)
📋 WHOIS#

⏱️ Lookup Timing#

NS
97ms
A
73ms
MX
63ms
AAAA
58ms
TXT
185ms
CAA
73ms
HTTPS
92ms
TLSA
244ms
SOA
88ms
MTA-STS
122ms
DNSSEC
184ms
SRV
0ms
Total
3924ms

🕐 Scan History#

Scanned AtDurationRecordsDNSSEC
2026-10-05 17:00:29 1137ms 2 NS 2 A 4 MX 🔓 Insecure
2026-09-23 14:52:18 9615ms 2 NS 2 A 4 MX 🔓 Insecure
2026-09-15 17:17:20 2539ms 2 NS 2 A 4 MX 🔓 Insecure
2026-09-08 19:35:15 2470ms 2 NS 2 A 4 MX 🔓 Insecure
2026-08-27 20:22:44 3852ms 2 NS 2 A 4 MX 🔓 Insecure
2026-08-08 11:12:12 1243ms 2 NS 2 A 4 MX 🔓 Insecure
2026-07-02 19:02:30 945ms 2 NS 2 A 4 MX 🔓 Insecure
2026-06-17 14:27:07 shown 3924ms 2 NS 2 A 4 MX 🔓 Insecure
dhd.dk [/] search Domains, Hosts & DNS — .dk zone