retzef.dk

Records from scan: 2026-10-03 08:15:16  ·  985ms total  ·  last checked 2026-10-18 06:08 (unchanged)
⬇ Zone File 📜 Timeline & History ⚡ Scan Now

retzef.dk is a .dk domain served by 2 nameservers (pearl.ns.cloudflare.com, sid.ns.cloudflare.com). It was registered on 11 July 2019 (WHOIS) and was already in the .dk zone when our tracking began on 16 June 2026. Its website address 104.21.26.77 is hosted by Cloudflare, Inc. (AS13335). Mail is handled by gw.retzef.dk. The zone is not DNSSEC-signed, publishes a DMARC policy and is reachable over IPv6. Below are all of its DNS records from our latest scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

2 records   39ms
NameserverIP addressesPTRASN / ISP
pearl.ns.cloudflare.com 108.162.194.140
162.159.38.140
172.64.34.140
2606:4700:50::a29f:268c
2803:f800:50::6ca2:c28c
2a06:98c1:50::ac40:228c		 pearl.ns.cloudflare.com
pearl.ns.cloudflare.com
pearl.ns.cloudflare.com
pearl.ns.cloudflare.com
pearl.ns.cloudflare.com
pearl.ns.cloudflare.com		 AS13335 Cloudflare, Inc.
AS13335 Cloudflare, Inc.
AS13335 Cloudflare, Inc.
AS13335 Cloudflare, Inc.
AS13335 Cloudflare, Inc.
AS13335 Cloudflare, Inc.
sid.ns.cloudflare.com 108.162.193.143
172.64.33.143
173.245.59.143
2606:4700:58::adf5:3b8f
2803:f800:50::6ca2:c18f
2a06:98c1:50::ac40:218f		 sid.ns.cloudflare.com
sid.ns.cloudflare.com
sid.ns.cloudflare.com
sid.ns.cloudflare.com
sid.ns.cloudflare.com
sid.ns.cloudflare.com		 AS13335 Cloudflare, Inc.
AS13335 Cloudflare, Inc.
AS13335 Cloudflare, Inc.
AS13335 Cloudflare, Inc.
AS13335 Cloudflare, Inc.
AS13335 Cloudflare, Inc.

🌍 A Records#

2 records   43ms
IPTTLPTRASNISP / OrgCIDRCountryCity
104.21.26.77 300s — AS13335 Cloudflare, Inc. 104.21.0.0/17 — —
172.67.135.160 300s — AS13335 Cloudflare, Inc. 172.67.128.0/17 — —

📧 MX Records#

1 records   49ms
PriorityTTLMail ServerIP addressesPTRASN
10 3600s gw.retzef.dk 136.144.183.154
2a01:7c8:aac7::1		 gw.swat.dk
gw.ams05.transip.net		 AS20857 Signet B.V.
AS20857 Signet B.V.

📧 Autodiscover / Autoconfig#

ServiceCNAME / IP
🔷 Autodiscovermail.retzef.dk → 95.170.85.79
🔶 Autoconfig104.21.26.77

🔷 AAAA Records (IPv6)#

2 records   31ms
IPv6 AddressTTLPTRASNISP / OrgCIDRCountryCity
2606:4700:3035::6815:1a4d 300s — AS13335 Cloudflare, Inc. 2606:4700:3000:0:0:0:0:0/42 — —
2606:4700:3037::ac43:87a0 300s — AS13335 Cloudflare, Inc. 2606:4700:3000:0:0:0:0:0/42 — —

🔐 HTTPS Records#

1 records   38ms
PriorityTargetSvcParams
1 service . alpn="h3,h2" ipv4hint=104.21.26.77,172.67.135.160 ech=AEX+DQBBrgAgACCbYZLF5tZq6y0AYwDst7V0zRYJiyOie+26Te4ltI1yGwAEAAEAAQASY2xvdWRmbGFyZS1lY2guY29tAAA= ipv6hint=2606:4700:3035::6815:1a4d,2606:4700:3037::ac43:87a0

📝 TXT Records#

1 records   206ms
TXT Record
v=spf1 include:spf.swat.dk -all

✉️ SPF#

PolicyRecord (retzef.dk)
-all (hard fail) v=spf1 include:spf.swat.dk -all

📨 DMARC#

PolicyRecord (_dmarc.retzef.dk)
p=reject v=DMARC1; p=reject; pct=100; rua=mailto:dmarc@retzef.dk

📬 MTA-STS#

172ms
CheckResult
Status⚠️ Invalid
TXT record (_mta-sts)✓ Found
HTTPS policy✗ Missing / invalid
Policy ID2026082101
Policy MX—

📈 TLSRPT#

StatusReport address (rua)
✓ Enabled mailto:tlsrpt@retzef.dk

📜 CAA Records#

11 records   56ms
FlagsTagValue
0 issue comodoca.com
0 issue digicert.com; cansignhttpexchanges=yes
0 issue letsencrypt.org
0 issue pki.goog; cansignhttpexchanges=yes
0 issue ssl.com
0 issuewild ;
0 issuewild comodoca.com
0 issuewild digicert.com; cansignhttpexchanges=yes
0 issuewild letsencrypt.org
0 issuewild pki.goog; cansignhttpexchanges=yes
0 issuewild ssl.com

🧩 Web & zone#

checked 2026-10-14 00:13:20
www104.21.26.77 172.67.135.160 2606:4700:3035::6815:1a4d 2606:4700:3037::ac43:87a0 (AS13335) (address records, no CNAME)
www vs bare domainSame network
WildcardYes: any name under the zone resolves

✍️ DKIM keys#

1 found
SelectorCNAMEKey
default — RSA · ~2048 bit

DKIM selectors can't be listed, so we check the common ones (Microsoft 365, Google, Mailchimp, SendGrid, generic). Keys under other selectors aren't shown.

🔎 SPF check#

zone-wide SPF report

DNS lookups: 3/10 · policy: -all

No problems found

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

69ms
CheckResult
Validation Status🔓 Insecure
AD Flag (resolver validates)✗ Not set
DS Record✗ Not found
DNSKEY Record✗ Not found
Flagsunsigned answer

🏷️ SOA#

49ms
FieldValue
Serial2416470269
Primary NS (MNAME)pearl.ns.cloudflare.com
Responsible (RNAME)dns@cloudflare.com
Refresh10000s
Retry2400s
Expire604800s
Minimum (neg-cache TTL)1800s

📋 Registration#

WHOIS fetched 2026-10-13 19:00:25
FieldValue
RegistrarPunktum dk A/S (direct)
Registered2019-07-11
Expires2027-07-31 (286d)

🔗 Same registrant#

10 domains

Other .dk domains whose WHOIS registrant has the same name and postal address. Matched on a keyed hash: the registrant's details are not stored or shown. Covers only domains whose WHOIS we have fetched (refreshed about monthly).

DomainRegistrar
highperformer.dkPunktum dk A/S (direct)
kravmagaacademy.dkPunktum dk A/S (direct)
kravmagaroskilde.dkPunktum dk A/S (direct)
mycrm.dkPunktum dk A/S (direct)
mywiki.dkPunktum dk A/S (direct)
parawings.dkPunktum dk A/S (direct)
pmox.dkPunktum dk A/S (direct)
pmoxadm.dkPunktum dk A/S (direct)
retzev.dkPunktum dk A/S (direct)
swat.dkPunktum dk A/S (direct)
📋 WHOIS#

⏱️ Lookup Timing#

NS
39ms
A
43ms
MX
49ms
AAAA
31ms
TXT
206ms
CAA
56ms
HTTPS
38ms
TLSA
89ms
SOA
49ms
MTA-STS
172ms
DNSSEC
69ms
SRV
69ms
Total
985ms

🕐 Scan History#

Scanned AtDurationRecordsDNSSEC
2026-10-03 08:15:16 shown 985ms 2 NS 2 A 1 MX 🔓 Insecure
2026-10-01 08:10:33 799ms 2 NS 2 A 1 MX 🔓 Insecure
2026-09-22 20:30:37 925ms 2 NS 2 A 1 MX 🔓 Insecure
2026-09-12 19:51:59 1873ms 2 NS 2 A 1 MX 🔓 Insecure
2026-08-27 12:52:53 9819ms 2 NS 2 A 1 MX 🔓 Insecure
2026-08-18 17:13:55 3195ms 2 NS 2 A 1 MX 🔓 Insecure
2026-08-08 07:29:37 1033ms 2 NS 2 A 1 MX 🔓 Insecure
2026-07-11 11:13:41 1305ms 2 NS 2 A 1 MX 🔓 Insecure
2026-06-25 19:05:41 4015ms 2 NS 2 A 1 MX 🔓 Insecure
2026-06-17 11:36:22 1136ms 2 NS 2 A 1 MX 🔓 Insecure
dhd.dk [/] search Domains, Hosts & DNS — .dk zone