pencig.dk

📜 Historical scan 2026-09-05 06:30:52  ·  ← Latest scan
⬇ Zone File 📜 Timeline & History ⚡ Scan Now

pencig.dk is a .dk domain served by 2 nameservers (elliott.ns.cloudflare.com, rosalie.ns.cloudflare.com). It was registered on 1 September 2026 (WHOIS) and first appeared in the .dk zone on 2 September 2026. Its website address 104.21.17.16 is hosted by Cloudflare, Inc. (AS13335). The zone is not DNSSEC-signed, has no DMARC policy and is reachable over IPv6. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

2 records   39ms

🌍 A Records#

2 records   38ms
IPTTLPTRASNISP / OrgCIDRCountryCity
104.21.17.16 300s — AS13335 Cloudflare, Inc. 104.21.0.0/17 — —
172.67.219.142 300s — AS13335 Cloudflare, Inc. 172.67.128.0/17 — —

📧 MX Records#

📧
No MX records found

📧 Autodiscover / Autoconfig#

ServiceCNAME / IP
🔷 Autodiscover104.21.17.16
🔶 Autoconfig172.67.219.142

🔷 AAAA Records (IPv6)#

2 records   36ms

🔐 HTTPS Records#

1 records   41ms
PriorityTargetSvcParams
1 service . alpn="h3,h2" ipv4hint=104.21.17.16,172.67.219.142 ech=AEX+DQBBrAAgACABrUkvY0mOxpuygIJOrQR9aDSXUj0h5xB3FARQII2ZDQAEAAEAAQASY2xvdWRmbGFyZS1lY2guY29tAAA= ipv6hint=2606:4700:3032::6815:1110,2606:4700:3035::ac43:db8e

📝 TXT Records#

📝
No TXT records found

✉️ SPF#

✗ No SPF record — mail spoofing not restricted

📨 DMARC#

✗ No DMARC record — mail spoofing not restricted

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

✗ No CAA records — any CA may issue certificates

🧩 Web & zone#

latest probe, not this scan · checked 2026-10-08 15:10:17
www104.21.17.16 172.67.219.142 2a06:98c1:3120::1 2a06:98c1:3121::1 (AS13335) (address records, no CNAME)
www vs bare domainSame network
WildcardYes: any name under the zone resolves

✍️ DKIM keys#

2 found
SelectorCNAMEKey
k1 — RSA Invalid key data — receivers can't verify signatures
s2 — RSA Invalid key data — receivers can't verify signatures

DKIM selectors can't be listed, so we check the common ones (Microsoft 365, Google, Mailchimp, SendGrid, generic). Keys under other selectors aren't shown.

🔏 ACME Challenge#

TypeNameValue
TXT _acme-challenge.pencig.dk 4-OdJVN8Ab0Zwzz3bOzf2z9F6mVQf1juOo3jsOgyASA
TXT _acme-challenge.pencig.dk cIMA2N75ndZ1D5heOgeTItBNQoItNM8g5GS-H2kTmLs

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

112ms
CheckResult
Validation Status🔓 Insecure
AD Flag (resolver validates)✗ Not set
DS Record✗ Not found
DNSKEY Record✗ Not found
Flagsunsigned answer

🏷️ SOA#

0ms
FieldValue
Serial2413945742
Primary NS (MNAME)elliott.ns.cloudflare.com
Responsible (RNAME)dns@cloudflare.com
Refresh10000s
Retry2400s
Expire604800s
Minimum (neg-cache TTL)1800s

📋 Registration#

WHOIS fetched 2026-10-05 14:58:42
FieldValue
RegistrarDynadot LLC
Registered2026-09-01
Expires2027-08-31 (315d)
📋 WHOIS#

⏱️ Lookup Timing#

NS
39ms
A
38ms
MX
47ms
AAAA
36ms
TXT
151ms
CAA
35ms
HTTPS
41ms
TLSA
53ms
SOA
0ms
MTA-STS
57ms
DNSSEC
112ms
SRV
57ms
Total
519ms

🕐 Scan History#

Scanned AtDurationRecordsDNSSEC
2026-09-08 02:44:15 1169ms 2 NS 2 A 1 MX 🔓 Insecure
2026-09-05 06:30:52 shown 519ms 2 NS 2 A 0 MX 🔓 Insecure
2026-09-02 08:41:58 4095ms 2 NS 3 A 0 MX 🔓 Insecure
dhd.dk [/] search Domains, Hosts & DNS — .dk zone