onepot.dk

Records from scan: 2026-09-30 01:24:53  ·  689ms total  ·  last checked 2026-10-18 20:37 (unchanged)
⬇ Zone File 📜 Timeline & History ⚡ Scan Now

onepot.dk is a .dk domain served by 2 nameservers (anahi.ns.cloudflare.com, rex.ns.cloudflare.com). It first appeared in the .dk zone on 21 July 2026. Its website address 104.21.39.76 is hosted by Cloudflare, Inc. (AS13335). The zone is not DNSSEC-signed, publishes a DMARC policy and is reachable over IPv6. Below are all of its DNS records from our latest scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

2 records   57ms

🌍 A Records#

2 records   35ms
IPTTLPTRASNISP / OrgCIDRCountryCity
104.21.39.76 300s — AS13335 Cloudflare, Inc. 104.21.0.0/17 — —
172.67.143.199 300s — AS13335 Cloudflare, Inc. 172.67.128.0/17 — —

📧 MX Records#

📧
No MX records found

🔷 AAAA Records (IPv6)#

2 records   36ms

🔐 HTTPS Records#

1 records   34ms
PriorityTargetSvcParams
1 service . alpn="h3,h2" ipv4hint=104.21.39.76,172.67.143.199 ech=AEX+DQBBpwAgACBsvQhfm0PVNll0uU+f1Ai35w4RxTaBfgUQz7v4a8AKSgAEAAEAAQASY2xvdWRmbGFyZS1lY2guY29tAAA= ipv6hint=2606:4700:3035::6815:274c,2606:4700:3036::ac43:8fc7

📝 TXT Records#

3 records   175ms
TXT Record
google-site-verification=oTYYmIbssLETafmndfUotQ0uwHDgXcRNmG8TLvXkelk
v=spf1 -all
v=spf1 ~all

✉️ SPF#

⚠ Multiple SPF records — RFC 7208 §4.5 violation (receivers must treat this as permerror)
PolicyRecord (onepot.dk)
-all (hard fail) v=spf1 -all
~all (soft fail) v=spf1 ~all

📨 DMARC#

PolicyRecord (_dmarc.onepot.dk)
p=reject v=DMARC1; p=reject; sp=reject; adkim=s; aspf=s;

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

✗ No CAA records — any CA may issue certificates

🧩 Web & zone#

checked 2026-10-12 12:27:21
www104.21.39.76 172.67.143.199 2606:4700:3035::6815:274c 2606:4700:3036::ac43:8fc7 (AS13335) (address records, no CNAME)
www vs bare domainSame network
WildcardNo
Denial of existenceCompact NSEC (RFC 9824, "black lies") not walkable
CDS / CDNSKEYPublished: key rollovers can be automated with the registry (RFC 7344/8078) 1 CDS, 1 CDNSKEY

🔎 SPF check#

zone-wide SPF report

DNS lookups: 0/10 · policy: -all

  • error 2 SPF records: receivers must treat that as a permanent error (RFC 7208 §4.5)

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

117ms
CheckResult
Validation Status🔓 Insecure
AD Flag (resolver validates)✗ Not set
DS Record✗ Not found
DNSKEY Record✓ Found
Flagsunsigned answer

🏷️ SOA#

29ms
FieldValue
Serial2416204037
Primary NS (MNAME)anahi.ns.cloudflare.com
Responsible (RNAME)dns@cloudflare.com
Refresh10000s
Retry2400s
Expire604800s
Minimum (neg-cache TTL)1800s

📋 Registration#

✗ No registration data yet — queued for a WHOIS lookup
📋 WHOIS#

⏱️ Lookup Timing#

NS
57ms
A
35ms
MX
31ms
AAAA
36ms
TXT
175ms
CAA
35ms
HTTPS
34ms
TLSA
109ms
SOA
29ms
MTA-STS
63ms
DNSSEC
117ms
SRV
61ms
Total
689ms

🕐 Scan History#

Scanned AtDurationRecordsDNSSEC
2026-09-30 01:24:53 shown 689ms 2 NS 2 A 0 MX 🔓 Insecure
2026-09-27 00:44:22 9439ms 2 NS 2 A 0 MX 🔓 Insecure
2026-09-20 23:31:28 1231ms 2 NS 2 A 0 MX 🔓 Insecure
2026-09-14 18:54:01 10035ms 2 NS 2 A 0 MX 🔓 Insecure
2026-09-08 14:00:22 1693ms 2 NS 2 A 0 MX 🔓 Insecure
2026-09-01 19:18:15 1121ms 2 NS 2 A 0 MX 🔓 Insecure
2026-08-27 08:17:11 541ms 2 NS 2 A 0 MX 🔓 Insecure
2026-08-13 01:59:21 24771ms 2 NS 2 A 0 MX 🔓 Insecure
2026-07-21 08:33:46 2353ms 2 NS 2 A 0 MX 🔓 Insecure
dhd.dk [/] search Domains, Hosts & DNS — .dk zone