rootkit.dk

📜 Historical scan 2026-08-13 19:39:42  ·  ← Latest scan
⬇ Zone File 📜 Timeline & History ⚡ Scan Now

rootkit.dk is a .dk domain served by 2 nameservers (diva.ns.cloudflare.com, frank.ns.cloudflare.com). It was already in the .dk zone when our tracking began on 16 June 2026. Its website address 104.21.62.148 is hosted by Cloudflare, Inc. (AS13335). Mail is handled by aspmx.l.google.com, alt1.aspmx.l.google.com and 3 more. The zone is DNSSEC-signed and validates, publishes a DMARC policy and is reachable over IPv6. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

2 records   206ms
NameserverIP addressesPTRASN / ISP
diva.ns.cloudflare.com 108.162.192.97
172.64.32.97
173.245.58.97
2606:4700:50::adf5:3a61
2803:f800:50::6ca2:c061
2a06:98c1:50::ac40:2061		 diva.ns.cloudflare.com
diva.ns.cloudflare.com
diva.ns.cloudflare.com
diva.ns.cloudflare.com
diva.ns.cloudflare.com
diva.ns.cloudflare.com		 AS13335 Cloudflare, Inc.
AS13335 Cloudflare, Inc.
AS13335 Cloudflare, Inc.
AS13335 Cloudflare, Inc.
AS13335 Cloudflare, Inc.
AS13335 Cloudflare, Inc.
frank.ns.cloudflare.com 108.162.193.166
172.64.33.166
173.245.59.166
2606:4700:58::adf5:3ba6
2803:f800:50::6ca2:c1a6
2a06:98c1:50::ac40:21a6		 frank.ns.cloudflare.com
frank.ns.cloudflare.com
frank.ns.cloudflare.com
frank.ns.cloudflare.com
frank.ns.cloudflare.com
frank.ns.cloudflare.com		 AS13335 Cloudflare, Inc.
AS13335 Cloudflare, Inc.
AS13335 Cloudflare, Inc.
AS13335 Cloudflare, Inc.
AS13335 Cloudflare, Inc.
AS13335 Cloudflare, Inc.

🌍 A Records#

2 records   270ms
IPTTLPTRASNISP / OrgCIDRCountryCity
104.21.62.148 300s — AS13335 Cloudflare, Inc. 104.21.0.0/17 — —
172.67.136.180 300s — AS13335 Cloudflare, Inc. 172.67.128.0/17 — —

📧 MX Records#

5 records   298ms
PriorityTTLMail ServerIP addressesPTRASN
1 300s aspmx.l.google.com 108.177.15.27
2a00:1450:4001:c21::1b		 wr-in-f27.1e100.net
lcfrai-in-f27.1e100.net		 AS15169 Google LLC
AS15169 Google LLC
5 300s alt1.aspmx.l.google.com 192.178.213.26
2a00:1450:4025:c01::1a		 yugrqzs-in-f26.1e100.net
rd-in-f26.1e100.net		 AS15169 Google LLC
AS15169 Google LLC
5 300s alt2.aspmx.l.google.com 172.253.152.27
2a00:1450:4010:c22::1a		 yulpptr-in-f27.1e100.net
yulpptr-in-f26.1e100.net		 AS15169 Google LLC
AS15169 Google LLC
10 300s aspmx2.googlemail.com 142.250.147.26
2a00:1450:4025:c01::1b		 rd-in-f26.1e100.net
rd-in-f27.1e100.net		 AS15169 Google LLC
AS15169 Google LLC
10 300s aspmx3.googlemail.com 172.253.152.27
2a00:1450:4010:c22::1b		 yulpptr-in-f27.1e100.net
yulpptr-in-f27.1e100.net		 AS15169 Google LLC
AS15169 Google LLC

🔷 AAAA Records (IPv6)#

2 records   331ms
IPv6 AddressTTLPTRASNISP / OrgCIDRCountryCity
2606:4700:3031::6815:3e94 300s — AS13335 Cloudflare, Inc. 2606:4700:3000:0:0:0:0:0/42 — —
2606:4700:3031::ac43:88b4 300s — AS13335 Cloudflare, Inc. 2606:4700:3000:0:0:0:0:0/42 — —

🔐 HTTPS Records#

1 records   315ms
PriorityTargetSvcParams
1 service . alpn="h3,h2" ipv4hint=104.21.62.148,172.67.136.180 ech=AEX+DQBB5wAgACBKC9LgE47IDtMgwi/5S/wQDb1stVYq6xxBs7MVqXYIZgAEAAEAAQASY2xvdWRmbGFyZS1lY2guY29tAAA= ipv6hint=2606:4700:3031::6815:3e94,2606:4700:3031::ac43:88b4

📝 TXT Records#

3 records   729ms
TXT Record
ahrefs-site-verification_4e7b3a9f1235a840167f5a962297eed0ce7c02662a0e0e5ab72c1a0fae2ec7b8
google-site-verification=r6j4u-_aVAd2LVerJERyIa-2-AQjTAzcw8KmWDcQF6c
v=spf1 include:_spf.google.com ~all

✉️ SPF#

PolicyRecord (rootkit.dk)
~all (soft fail) v=spf1 include:_spf.google.com ~all

📨 DMARC#

PolicyRecord (_dmarc.rootkit.dk)
p=reject v=DMARC1; p=reject; rua=mailto:postmaster@rootkit.dk

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

✗ No CAA records — any CA may issue certificates

🧩 Web & zone#

latest probe, not this scan · checked 2026-10-16 17:40:43
www104.21.62.148 172.67.136.180 2606:4700:3031::6815:3e94 2606:4700:3031::ac43:88b4 (AS13335) (address records, no CNAME)
www vs bare domainSame network
WildcardNo
Denial of existenceCompact NSEC (RFC 9824, "black lies") not walkable
CDS / CDNSKEYDelete signal: the zone asks the registry to remove its DS (go insecure) 1 CDS, 1 CDNSKEY

✍️ DKIM keys#

1 found
SelectorCNAMEKey
default — RSA · ~1024 bit below 2048 bit

DKIM selectors can't be listed, so we check the common ones (Microsoft 365, Google, Mailchimp, SendGrid, generic). Keys under other selectors aren't shown.

🔎 SPF check#

zone-wide SPF report

DNS lookups: 1/10 · policy: ~all

No problems found

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

574ms
CheckResult
Validation Status🔒 Secure
AD Flag (resolver validates)✓ Set
DS Record✓ Found
DNSKEY Record✓ Found
Flagsfully validated

🏷️ SOA#

0ms
FieldValue
Serial2412103342
Primary NS (MNAME)diva.ns.cloudflare.com
Responsible (RNAME)dns@cloudflare.com
Refresh10000s
Retry2400s
Expire604800s
Minimum (neg-cache TTL)1800s

📋 Registration#

✗ No registration data yet — queued for a WHOIS lookup
📋 WHOIS#

⏱️ Lookup Timing#

NS
206ms
A
270ms
MX
298ms
AAAA
331ms
TXT
729ms
CAA
297ms
HTTPS
315ms
TLSA
372ms
SOA
0ms
MTA-STS
482ms
DNSSEC
574ms
SRV
439ms
Total
4795ms

🕐 Scan History#

Scanned AtDurationRecordsDNSSEC
2026-10-16 17:40:43 720ms 2 NS 2 A 5 MX 🔒 Secure
2026-10-12 05:13:58 898ms 2 NS 2 A 5 MX 🔒 Secure
2026-09-30 19:49:55 667ms 2 NS 2 A 5 MX 🔒 Secure
2026-09-27 12:24:10 826ms 2 NS 2 A 5 MX 🔒 Secure
2026-09-23 20:04:13 869ms 2 NS 2 A 5 MX 🔒 Secure
2026-09-03 15:58:33 699ms 2 NS 2 A 5 MX 🔒 Secure
2026-08-29 21:37:17 2156ms 2 NS 2 A 5 MX 🔒 Secure
2026-08-13 19:39:42 shown 4795ms 2 NS 2 A 5 MX 🔒 Secure
2026-08-06 01:06:16 1706ms 2 NS 2 A 5 MX 🔒 Secure
2026-07-12 07:38:55 10257ms 2 NS 2 A 5 MX 🔒 Secure
2026-06-25 03:22:09 2862ms 2 NS 2 A 5 MX 🔒 Secure
2026-06-23 17:31:56 946ms 2 NS 2 A 5 MX 🔒 Secure
2026-06-19 13:38:43 4796ms 2 NS 2 A 5 MX 🔒 Secure
2026-06-18 03:55:20 1196ms 2 NS 2 A 5 MX 🔒 Secure
dhd.dk [/] search Domains, Hosts & DNS — .dk zone