sandpit.dk

📜 Historical scan 2026-06-23 17:10:26  ·  ← Latest scan
⬇ Zone File 📜 Timeline & History ⚡ Scan Now

sandpit.dk is a .dk domain served by 2 nameservers (ns3.nordicway.dk, ns4.nordicway.dk). It was registered on 5 July 2002 (WHOIS) and was already in the .dk zone when our tracking began on 16 June 2026. Its website address 49.12.171.172 is hosted by Hetzner Online GmbH (AS24940) in Germany. Mail is handled by mail.sandpit.dk. The zone is DNSSEC-signed and validates, publishes a DMARC policy and has no IPv6 address. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

2 records   86ms

🌍 A Records#

1 records   65ms

📧 MX Records#

1 records   69ms
PriorityTTLMail ServerIP addressesPTRASN
0 3600s mail.sandpit.dk 49.12.171.172 cp12.nordicway.dk AS24940 Hetzner Online GmbH

🔷 AAAA Records (IPv6)#

✗ No AAAA records — IPv6 not configured

🔐 HTTPS Records#

✗ No HTTPS RR — no SVCB/HTTPS service binding

📝 TXT Records#

1 records   317ms
TXT Record
v=spf1 +a +mx +ip4:49.12.171.172 include:relay.mailchannels.net ~all

✉️ SPF#

PolicyRecord (sandpit.dk)
~all (soft fail) v=spf1 +a +mx +ip4:49.12.171.172 include:relay.mailchannels.net ~all

📨 DMARC#

PolicyRecord (_dmarc.sandpit.dk)
p=none (monitor only) v=DMARC1;p=none;sp=none;adkim=r;aspf=r;pct=100;fo=0;rf=afrf;ri=86400

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

✗ No CAA records — any CA may issue certificates

🧩 Web & zone#

latest probe, not this scan · checked 2026-10-12 03:50:31
www CNAMEsandpit.dk (all on sandpit.dk)
www vs bare domainSame network
sandpit.dk: 49.12.171.172 (AS24940)
www.sandpit.dk: 49.12.171.172 (AS24940)
WildcardNo
Denial of existenceNSEC3 · 7 iterations · 8-byte salt RFC 9276 recommends 0 iterations and no salt
CDS / CDNSKEYNone 0 CDS, 0 CDNSKEY

✍️ DKIM keys#

1 found
SelectorCNAMEKey
default — RSA · ~2048 bit

DKIM selectors can't be listed, so we check the common ones (Microsoft 365, Google, Mailchimp, SendGrid, generic). Keys under other selectors aren't shown.

🔎 SPF check#

zone-wide SPF report

DNS lookups: 3/10 · policy: ~all

No problems found

🔏 ACME Challenge#

TypeNameValue
TXT _acme-challenge.sandpit.dk fk27cdnHDmmGWqIKhYs4pLnEIMqcXsZblYYbkjBpe0I

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

140ms
CheckResult
Validation Status🔒 Secure
AD Flag (resolver validates)✓ Set
DS Record✓ Found
DNSKEY Record✓ Found
Flagsfully validated

🏷️ SOA#

153ms
FieldValue
Serial2026061101
Primary NS (MNAME)ns3.nordicway.dk
Responsible (RNAME)server@nordicway.dk
Refresh3600s
Retry1800s
Expire1209600s
Minimum (neg-cache TTL)86400s

📋 Registration#

WHOIS fetched 2026-10-12 04:08:55
FieldValue
Registrarnordicway ApS
Registered2002-07-05
Expires2027-09-30 (343d)

🔗 Same registrant#

1 domain

Other .dk domains whose WHOIS registrant has the same name and postal address. Matched on a keyed hash: the registrant's details are not stored or shown. Covers only domains whose WHOIS we have fetched (refreshed about monthly).

DomainRegistrar
gustavleidecker.dkPunktum dk A/S (direct)
📋 WHOIS#

⏱️ Lookup Timing#

NS
86ms
A
65ms
MX
69ms
AAAA
79ms
TXT
317ms
CAA
64ms
HTTPS
114ms
TLSA
94ms
SOA
153ms
MTA-STS
85ms
DNSSEC
140ms
SRV
185ms
Total
735ms

🕐 Scan History#

Scanned AtDurationRecordsDNSSEC
2026-10-12 03:50:31 570ms 2 NS 1 A 1 MX 🔒 Secure
2026-09-30 18:05:35 653ms 2 NS 1 A 1 MX 🔒 Secure
2026-09-29 16:48:44 614ms 2 NS 1 A 1 MX 🔒 Secure
2026-09-02 17:15:53 777ms 2 NS 1 A 1 MX 🔒 Secure
2026-08-28 05:27:24 2874ms 2 NS 1 A 1 MX 🔒 Secure
2026-08-12 03:45:35 888ms 2 NS 1 A 1 MX 🔒 Secure
2026-06-23 17:10:26 shown 735ms 2 NS 1 A 1 MX 🔒 Secure
2026-06-20 18:32:56 1024ms 2 NS 1 A 1 MX 🔒 Secure
2026-06-18 03:51:02 1325ms 2 NS 1 A 1 MX 🔒 Secure
dhd.dk [/] search Domains, Hosts & DNS — .dk zone