onepot.dk

📜 Historical scan 2026-09-14 18:54:01 · ← Latest scan

⬇ Zone File 📜 Timeline & History ⚡ Scan Now

onepot.dk is a .dk domain served by 2 nameservers (anahi.ns.cloudflare.com, rex.ns.cloudflare.com). It first appeared in the .dk zone on 21 July 2026. Its website address 104.21.39.76 is hosted by Cloudflare, Inc. (AS13335). The zone is not DNSSEC-signed, publishes a DMARC policy and is reachable over IPv6. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

2 records 42ms

Nameserver	IP addresses	PTR	ASN / ISP
anahi.ns.cloudflare.com	108.162.194.24 162.159.38.24 172.64.34.24 2606:4700:50::a29f:2618 2803:f800:50::6ca2:c218 2a06:98c1:50::ac40:2218	anahi.ns.cloudflare.com anahi.ns.cloudflare.com anahi.ns.cloudflare.com anahi.ns.cloudflare.com anahi.ns.cloudflare.com anahi.ns.cloudflare.com	AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc.
rex.ns.cloudflare.com	108.162.195.13 162.159.44.13 172.64.35.13 2606:4700:58::a29f:2c0d 2803:f800:50::6ca2:c30d 2a06:98c1:50::ac40:230d	rex.ns.cloudflare.com rex.ns.cloudflare.com rex.ns.cloudflare.com rex.ns.cloudflare.com rex.ns.cloudflare.com rex.ns.cloudflare.com	AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc.

🌍 A Records#

2 records 60ms

IP	TTL	PTR	ASN	ISP / Org	CIDR	Country	City
104.21.39.76	300s	—	AS13335	Cloudflare, Inc.	104.21.0.0/17	—	—
172.67.143.199	300s	—	AS13335	Cloudflare, Inc.	172.67.128.0/17	—	—

📧 MX Records#

📧

No MX records found

🔷 AAAA Records (IPv6)#

2 records 61ms

IPv6 Address	TTL	PTR	ASN	ISP / Org	CIDR	Country	City
2606:4700:3035::6815:274c	300s	—	AS13335	Cloudflare, Inc.	2606:4700:3000:0:0:0:0:0/42	—	—
2606:4700:3036::ac43:8fc7	300s	—	AS13335	Cloudflare, Inc.	2606:4700:3000:0:0:0:0:0/42	—	—

🔐 HTTPS Records#

1 records 72ms

Priority	Target	SvcParams
1 service	.	alpn="h3,h2" ipv4hint=104.21.39.76,172.67.143.199 ech=AEX+DQBBcwAgACDC+eASx2aWGFx+iBjE08odIv4g6s91arVJg4BPw07hBwAEAAEAAQASY2xvdWRmbGFyZS1lY2guY29tAAA= ipv6hint=2606:4700:3035::6815:274c,2606:4700:3036::ac43:8fc7

📝 TXT Records#

3 records 340ms

TXT Record
google-site-verification=oTYYmIbssLETafmndfUotQ0uwHDgXcRNmG8TLvXkelk
v=spf1 -all
v=spf1 ~all

✉️ SPF#

⚠ Multiple SPF records — RFC 7208 §4.5 violation (receivers must treat this as permerror)

Policy	Record (onepot.dk)
-all (hard fail)	v=spf1 -all
~all (soft fail)	v=spf1 ~all

📨 DMARC#

Policy	Record (_dmarc.onepot.dk)
p=reject	v=DMARC1; p=reject; sp=reject; adkim=s; aspf=s;

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

✗ No CAA records — any CA may issue certificates

🧩 Web & zone#

latest probe, not this scan · checked 2026-10-12 12:27:21

www	104.21.39.76 172.67.143.199 2606:4700:3035::6815:274c 2606:4700:3036::ac43:8fc7 (AS13335) (address records, no CNAME)
www vs bare domain	Same network onepot.dk: 104.21.39.76 172.67.143.199 2606:4700:3035::6815:274c 2606:4700:3036::ac43:8fc7 (AS13335) www.onepot.dk: 104.21.39.76 172.67.143.199 2606:4700:3035::6815:274c 2606:4700:3036::ac43:8fc7 (AS13335)
Wildcard	No
Denial of existence	Compact NSEC (RFC 9824, "black lies") not walkable
CDS / CDNSKEY	Published: key rollovers can be automated with the registry (RFC 7344/8078) 1 CDS, 1 CDNSKEY

🔎 SPF check#

zone-wide SPF report

DNS lookups: 0/10 · policy: -all

error 2 SPF records: receivers must treat that as a permanent error (RFC 7208 §4.5)

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

9082ms

Check	Result
Validation Status	🔓 Insecure
AD Flag (resolver validates)	✗ Not set
DS Record	✗ Not found
DNSKEY Record	✓ Found
Flags	unsigned answer

🏷️ SOA#

0ms

Field	Value
Serial	2414130434
Primary NS (MNAME)	anahi.ns.cloudflare.com
Responsible (RNAME)	dns@cloudflare.com
Refresh	10000s
Retry	2400s
Expire	604800s
Minimum (neg-cache TTL)	1800s

📋 Registration#

✗ No registration data yet — queued for a WHOIS lookup

📋 WHOIS#

⏱️ Lookup Timing#

42ms

60ms

50ms

AAAA

61ms

TXT

340ms

CAA

37ms

HTTPS

72ms

TLSA

118ms

SOA

0ms

MTA-STS

59ms

DNSSEC

9082ms

SRV

104ms

Total

10035ms

🕐 Scan History#

Scanned At	Duration	Records	DNSSEC
2026-09-30 01:24:53	689ms	2 NS 2 A 0 MX	🔓 Insecure
2026-09-27 00:44:22	9439ms	2 NS 2 A 0 MX	🔓 Insecure
2026-09-20 23:31:28	1231ms	2 NS 2 A 0 MX	🔓 Insecure
2026-09-14 18:54:01 shown	10035ms	2 NS 2 A 0 MX	🔓 Insecure
2026-09-08 14:00:22	1693ms	2 NS 2 A 0 MX	🔓 Insecure
2026-09-01 19:18:15	1121ms	2 NS 2 A 0 MX	🔓 Insecure
2026-08-27 08:17:11	541ms	2 NS 2 A 0 MX	🔓 Insecure
2026-08-13 01:59:21	24771ms	2 NS 2 A 0 MX	🔓 Insecure
2026-07-21 08:33:46	2353ms	2 NS 2 A 0 MX	🔓 Insecure