privaty.dk is a .dk domain served by 2 nameservers (burt.ns.cloudflare.com, nina.ns.cloudflare.com). It was already in the .dk zone when our tracking began on 16 June 2026. Mail is handled by mail.protonmail.ch, mailsec.protonmail.ch. The zone is not DNSSEC-signed, publishes a DMARC policy and has no IPv6 address. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.
| TXT Record |
|---|
| protonmail-verification=dbd7cdca50b7e91e91682f220e6b7de33f73fbd4 |
| v=spf1 include:_spf.protonmail.ch mx ~all |
| Policy | Record (privaty.dk) |
|---|---|
| ~all (soft fail) | v=spf1 include:_spf.protonmail.ch mx ~all |
| Policy | Record (_dmarc.privaty.dk) |
|---|---|
| p=quarantine | v=DMARC1; p=quarantine; rua=mailto:0b458f9b926049f1b5c91ad38ad05024@dmarc-reports.cloudflare.net |
| Flags | Tag | Value |
|---|---|---|
| 0 | issue | comodoca.com |
| 0 | issue | digicert.com; cansignhttpexchanges=yes |
| 0 | issue | letsencrypt.org |
| 0 | issue | pki.goog; cansignhttpexchanges=yes |
| 0 | issue | ssl.com |
| 0 | issuewild | comodoca.com |
| 0 | issuewild | digicert.com; cansignhttpexchanges=yes |
| 0 | issuewild | letsencrypt.org |
| 0 | issuewild | pki.goog; cansignhttpexchanges=yes |
| 0 | issuewild | ssl.com |
| www | Exists, no address |
| www vs bare domain | Neither resolves privaty.dk: no address www.privaty.dk: no address |
| Wildcard | No |
| Denial of existence | Compact NSEC (RFC 9824, "black lies") not walkable |
| CDS / CDNSKEY | Published: key rollovers can be automated with the registry (RFC 7344/8078) 1 CDS, 1 CDNSKEY |
| Selector | CNAME | Key |
|---|---|---|
| dkim | — | RSA Invalid key data — receivers can't verify signatures |
| k1 | — | RSA Invalid key data — receivers can't verify signatures |
| s2 | — | RSA Invalid key data — receivers can't verify signatures |
DKIM selectors can't be listed, so we check the common ones (Microsoft 365, Google, Mailchimp, SendGrid, generic). Keys under other selectors aren't shown.
DNS lookups: 3/10 · policy: ~all
No problems found| Service / Owner | Type | Cert association |
|---|---|---|
| SMTP _25._tcp.mail.protonmail.ch | DANE-EE · SPKI · SHA-256 | 6111A5698D23C89E09C36FF833C1487E… |
| SMTP _25._tcp.mail.protonmail.ch | DANE-EE · SPKI · SHA-256 | 76BB66711DA416433CA890A5B2E5A053… |
| SMTP _25._tcp.mailsec.protonmail.ch | DANE-EE · SPKI · SHA-256 | 76BB66711DA416433CA890A5B2E5A053… |
| SMTP _25._tcp.mailsec.protonmail.ch | DANE-EE · SPKI · SHA-256 | 6111A5698D23C89E09C36FF833C1487E… |
| Check | Result |
|---|---|
| Validation Status | 🔓 Insecure |
| AD Flag (resolver validates) | ✗ Not set |
| DS Record | ✗ Not found |
| DNSKEY Record | ✓ Found |
| Flags | resolution failed: ncache nxrrset |
| Field | Value |
|---|---|
| Serial | 2415137923 |
| Primary NS (MNAME) | burt.ns.cloudflare.com |
| Responsible (RNAME) | dns@cloudflare.com |
| Refresh | 10000s |
| Retry | 2400s |
| Expire | 604800s |
| Minimum (neg-cache TTL) | 1800s |
| Scanned At | Duration | Records | DNSSEC |
|---|---|---|---|
| 2026-10-12 11:25:30 | 1321ms | 2 NS 0 A 2 MX | 🔓 Insecure |
| 2026-09-27 01:53:30 shown | 921ms | 2 NS 0 A 2 MX | 🔓 Insecure |
| 2026-09-20 09:27:30 | 916ms | 2 NS 0 A 2 MX | 🔓 Insecure |
| 2026-09-07 08:54:38 | 1416ms | 2 NS 0 A 2 MX | 🔓 Insecure |
| 2026-08-24 20:35:27 | 3233ms | 2 NS 0 A 2 MX | 🔓 Insecure |
| 2026-08-03 22:19:14 | 1230ms | 2 NS 0 A 2 MX | 🔓 Insecure |
| 2026-07-21 01:33:10 | 1268ms | 2 NS 0 A 2 MX | 🔓 Insecure |
| 2026-07-09 05:43:54 | 1738ms | 2 NS 0 A 2 MX | 🔓 Insecure |
| 2026-07-07 04:19:27 | 10369ms | 2 NS 0 A 2 MX | 🔓 Insecure |
| 2026-07-04 12:14:17 | 20316ms | 2 NS 0 A 2 MX | 🔓 Insecure |
| 2026-06-22 13:46:05 | 1017ms | 2 NS 0 A 2 MX | ⚠️ Bogus |
| 2026-06-17 14:19:32 | 7077ms | 2 NS 0 A 2 MX | 🔒 Secure |