riot-tool.dk is a .dk domain served by 2 nameservers (ns.dandomain.dk, ns2.dandomain.dk). It was registered on 23 October 2025 (WHOIS) and was already in the .dk zone when our tracking began on 16 June 2026. Mail is handled by mx1.forwardemail.net, mx2.forwardemail.net. The zone is DNSSEC-signed and validates, publishes a DMARC policy and has no IPv6 address. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.
| TXT Record |
|---|
| forward-email=martinbartin@protonmail.ch |
| google-site-verification=HLSkSg8hQNCghsI3tsJHGbstvlPf3ZWOwsIjouTzpQk |
| google-site-verification=XKIZm_okBopvaFK4xHaqJ5sJCZmv6khJ1brvGepevu4 |
| Policy | Record (_dmarc.riot-tool.dk) |
|---|---|
| p=none (monitor only) | v=DMARC1; p=none; |
| www CNAME | 6wqgk8ws.up.railway.app (all on railway.app) → 69.46.46.73 (AS400940) |
| www vs bare domain | Only www resolves (all like this) |
| Wildcard | No |
| Denial of existence | Compact NSEC (RFC 9824, "black lies") not walkable |
| CDS / CDNSKEY | Published: key rollovers can be automated with the registry (RFC 7344/8078) 1 CDS, 1 CDNSKEY |
| Service / Owner | Type | Cert association |
|---|---|---|
| SMTP _25._tcp.mx1.forwardemail.net | DANE-EE · SPKI · SHA-256 | 5E81DA1AF16DF20B13E667AD6D9C2B65… |
| SMTP _25._tcp.mx2.forwardemail.net | DANE-EE · SPKI · SHA-256 | 5E81DA1AF16DF20B13E667AD6D9C2B65… |
| Check | Result |
|---|---|
| Validation Status | 🔒 Secure |
| AD Flag (resolver validates) | ✓ Set |
| DS Record | ✓ Found |
| DNSKEY Record | ✓ Found |
| Flags | resolution failed: ncache nxrrset |
| Field | Value |
|---|---|
| Serial | 2026051902 |
| Primary NS (MNAME) | ns.dandomain.dk |
| Responsible (RNAME) | hostmaster@dandomain.dk |
| Refresh | 14400s |
| Retry | 3600s |
| Expire | 1209600s |
| Minimum (neg-cache TTL) | 300s |
| Field | Value |
|---|---|
| Registrar | DANDOMAIN A/S |
| Registered | 2025-10-23 |
| Expires | 2026-10-22 (expired) |
Other .dk domains whose WHOIS registrant has the same name and postal address. Matched on a keyed hash: the registrant's details are not stored or shown. Covers only domains whose WHOIS we have fetched (refreshed about monthly).
No other domain with this registrant in our WHOIS data yet| Scanned At | Duration | Records | DNSSEC |
|---|---|---|---|
| 2026-10-17 00:32:51 | 681ms | 2 NS 0 A 1 MX | 🔓 Insecure |
| 2026-10-09 14:24:40 | 868ms | 2 NS 0 A 1 MX | 🔓 Insecure |
| 2026-09-30 07:11:21 | 493ms | 2 NS 0 A 1 MX | 🔓 Insecure |
| 2026-09-24 20:34:21 | 697ms | 2 NS 0 A 1 MX | 🔓 Insecure |
| 2026-09-23 19:26:43 | 745ms | 2 NS 0 A 1 MX | 🔓 Insecure |
| 2026-07-02 12:18:01 | 1623ms | 2 NS 0 A 2 MX | 🔒 Secure |
| 2026-06-26 05:27:09 shown | 934ms | 2 NS 0 A 2 MX | 🔒 Secure |
| 2026-06-23 23:36:22 | 621ms | 2 NS 0 A 2 MX | 🔒 Secure |
| 2026-06-17 13:12:56 | 3656ms | 2 NS 0 A 2 MX | 🔒 Secure |