sec-dns.dk is a .dk domain served by 4 nameservers (ns-cloud-d1.googledomains.com, ns-cloud-d2.googledomains.com, ns-cloud-d3.googledomains.com and 1 more). It was registered on 10 May 2007 (WHOIS) and was already in the .dk zone when our tracking began on 16 June 2026. Its website address 116.203.43.243 is hosted by Hetzner Online GmbH (AS24940) in Germany. The zone is DNSSEC-signed and validates, publishes a DMARC policy and has no IPv6 address. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.
| IP | TTL | PTR | ASN | ISP / Org | CIDR | Country | City |
|---|---|---|---|---|---|---|---|
| 116.203.43.243 | 300s | static.243.43.203.116.clients.your-server.de | AS24940 | Hetzner Online GmbH | 116.202.0.0/15 | 🇩🇪 Germany | Nuremberg |
| TXT Record |
|---|
| v=spf1 -all |
| Policy | Record (sec-dns.dk) |
|---|---|
| -all (hard fail) | v=spf1 -all |
| Policy | Record (_dmarc.sec-dns.dk) |
|---|---|
| p=reject | v=DMARC1; p=reject; rua=mailto:btpv5zey@ag.dmarcian.com; ruf=mailto:btpv5zey@fr.dmarcian.com; |
| www | NXDOMAIN |
| www vs bare domain | www does not resolve (all like this) |
| Wildcard | No |
| Denial of existence | NSEC3 · 1 iteration · 8-byte salt RFC 9276 recommends 0 iterations and no salt |
| CDS / CDNSKEY | Published: key rollovers can be automated with the registry (RFC 7344/8078) 1 CDS, 0 CDNSKEY |
DNS lookups: 0/10 · policy: -all
No problems found| Check | Result |
|---|---|
| Validation Status | 🔒 Secure |
| AD Flag (resolver validates) | ✓ Set |
| DS Record | ✓ Found |
| DNSKEY Record | ✓ Found |
| Flags | fully validated |
| Field | Value |
|---|---|
| Serial | 1 |
| Primary NS (MNAME) | ns-cloud-d1.googledomains.com |
| Responsible (RNAME) | cloud-dns-hostmaster@google.com |
| Refresh | 21600s |
| Retry | 3600s |
| Expire | 259200s |
| Minimum (neg-cache TTL) | 300s |
| Field | Value |
|---|---|
| Registrar | Punktum dk A/S (direct) |
| Registered | 2007-05-10 |
| Expires | 2031-05-31 (1686d) |
Other .dk domains whose WHOIS registrant has the same name and postal address. Matched on a keyed hash: the registrant's details are not stored or shown. Covers only domains whose WHOIS we have fetched (refreshed about monthly).
| Scanned At | Duration | Records | DNSSEC |
|---|---|---|---|
| 2026-09-27 17:14:44 | 666ms | 4 NS 1 A 0 MX | 🔒 Secure |
| 2026-06-26 11:24:42 | 1294ms | 4 NS 1 A 0 MX | 🔒 Secure |
| 2026-06-24 13:09:20 | 1483ms | 4 NS 1 A 0 MX | 🔒 Secure |
| 2026-06-23 13:43:13 | 1166ms | 0 NS 0 A 0 MX | ❓ Unknown |
| 2026-06-20 15:53:56 shown | 793ms | 4 NS 1 A 0 MX | 🔒 Secure |
| 2026-06-17 19:37:26 | 658ms | 4 NS 1 A 0 MX | 🔒 Secure |