shavesafe.dk

📜 Historical scan 2026-08-13 19:15:39 · ← Latest scan

⬇ Zone File 📜 Timeline & History ⚡ Scan Now

shavesafe.dk is a .dk domain served by 2 nameservers (ns01.one.com, ns02.one.com). It was registered on 9 September 2010 (WHOIS) and was already in the .dk zone when our tracking began on 16 June 2026. We saw it become registrar-handled on 20 October 2026, when it moved from direct registration at Punktum to ONE.COM A/S. Its website address 23.227.38.65 is hosted by Cloudflare, Inc. (AS13335) in Canada. Mail is handled by aspmx.l.google.com, alt1.aspmx.l.google.com and 3 more. The zone is DNSSEC-signed and validates, publishes a DMARC policy and has no IPv6 address. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

2 records 305ms

Nameserver	IP addresses	PTR	ASN / ISP
ns01.one.com	195.206.121.10 2001:67c:28cc::10	ns01.one.com ns01.one.com	AS197495 One.com A/S AS197495 One.com A/S
ns02.one.com	185.10.11.10 2001:67c:3c0::10	ns02.one.com ns02.one.com	AS51468 One.com A/S AS51468 One.com A/S

🌍 A Records#

1 records 223ms

IP	TTL	PTR	ASN	ISP / Org	CIDR	Country	City
23.227.38.65	600s	myshopify.com	AS13335	Cloudflare, Inc.	23.227.38.0/23	🇨🇦 Canada	Ottawa

📧 MX Records#

5 records 251ms

Priority	TTL	Mail Server	IP addresses	PTR	ASN
10	43200s	aspmx.l.google.com	142.251.127.27 2a00:1450:400c:c1d::1a	lcfrai-in-f27.1e100.net wh-in-f26.1e100.net	AS15169 Google LLC AS15169 Google LLC
20	43200s	alt1.aspmx.l.google.com	142.250.147.27 2a00:1450:4025:c01::1a	rd-in-f27.1e100.net rd-in-f26.1e100.net	AS15169 Google LLC AS15169 Google LLC
20	43200s	alt2.aspmx.l.google.com	172.253.152.26 2a00:1450:4010:c22::1b	yulpptr-in-f26.1e100.net yulpptr-in-f27.1e100.net	AS15169 Google LLC AS15169 Google LLC
30	43200s	alt3.aspmx.l.google.com	192.178.211.26 2a00:1450:4025:4401::1b	lcbomp-in-f26.1e100.net yuskedq-in-f27.1e100.net	AS15169 Google LLC AS15169 Google LLC
30	43200s	alt4.aspmx.l.google.com	142.250.147.27 2a00:1450:4025:c01::1b	rd-in-f27.1e100.net rd-in-f27.1e100.net	AS15169 Google LLC AS15169 Google LLC

🔷 AAAA Records (IPv6)#

✗ No AAAA records — IPv6 not configured

🔐 HTTPS Records#

✗ No HTTPS RR — no SVCB/HTTPS service binding

📝 TXT Records#

3 records 722ms

TXT Record
facebook-domain-verification=nnlns73euf1g6v4bdgktis87ecbux4
klaviyo-site-verification=VNsGGM
v=spf1 ip4:167.89.0.0/17 ip4:208.117.48.0/20 ip4:50.31.32.0/19 ip4:198.37.144.0/20 ip4:198.21.0.0/21 ip4:192.254.112.0/20 ip4:168.245.0.0/17 ip4:149.72.0.0/16 ip4:159.183.0.0/16 include:ab.sendgrid.net include:_spf.google.com include:shops.shopify.com include:sendgrid.net include:spf.lagersystem.dk include:_custspf.one.com ~all

✉️ SPF#

Policy	Record (shavesafe.dk)
~all (soft fail)	v=spf1 ip4:167.89.0.0/17 ip4:208.117.48.0/20 ip4:50.31.32.0/19 ip4:198.37.144.0/20 ip4:198.21.0.0/21 ip4:192.254.112.0/20 ip4:168.245.0.0/17 ip4:149.72.0.0/16 ip4:159.183.0.0/16 include:ab.sendgrid.net include:_spf.google.com include:shops.shopify.com include:sendgrid.net include:spf.lagersystem.dk include:_custspf.one.com ~all

📨 DMARC#

Policy	Record (_dmarc.shavesafe.dk)
p=reject	v=DMARC1; p=reject; rua=mailto:dmarc@n4uecdqr.uriports.com; pct=100; adkim=s; aspf=r

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

✗ No CAA records — any CA may issue certificates

🧩 Web & zone#

latest probe, not this scan · checked 2026-10-20 23:11:05

www CNAME	shops.myshopify.com (all on myshopify.com) → 23.227.38.74 2620:127:f00f:e:: (AS13335)
www vs bare domain	Same network shavesafe.dk: 23.227.38.65 (AS13335) www.shavesafe.dk: 23.227.38.74 2620:127:f00f:e:: (AS13335)
Wildcard	No
Denial of existence	NSEC3 · 0 iterations · no salt RFC 9276 ✓
CDS / CDNSKEY	None 0 CDS, 0 CDNSKEY

✍️ DKIM keys#

1 found

Selector	CNAME	Key
google	—	RSA · ~2048 bit

DKIM selectors can't be listed, so we check the common ones (Microsoft 365, Google, Mailchimp, SendGrid, generic). Keys under other selectors aren't shown.

🔎 SPF check#

zone-wide SPF report

DNS lookups: 7/10 · policy: ~all

No problems found

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

559ms

Check	Result
Validation Status	🔒 Secure
AD Flag (resolver validates)	✓ Set
DS Record	✓ Found
DNSKEY Record	✓ Found
Flags	fully validated

🏷️ SOA#

0ms

Field	Value
Serial	2026081203
Primary NS (MNAME)	ns01.one.com
Responsible (RNAME)	hostmaster@one.com
Refresh	14400s
Retry	3600s
Expire	1209600s
Minimum (neg-cache TTL)	600s

📋 Registration#

WHOIS fetched 2026-10-20 23:37:21

Field	Value
Registrar	ONE.COM A/S
Registered	2010-09-09
Expires	2027-09-30 (342d)

🔗 Same registrant#

0 domains

Other .dk domains whose WHOIS registrant has the same name and postal address. Matched on a keyed hash: the registrant's details are not stored or shown. Covers only domains whose WHOIS we have fetched (refreshed about monthly).

No other domain with this registrant in our WHOIS data yet

📋 WHOIS#

⏱️ Lookup Timing#

305ms

223ms

251ms

AAAA

248ms

TXT

722ms

CAA

259ms

HTTPS

235ms

TLSA

368ms

SOA

0ms

MTA-STS

466ms

DNSSEC

559ms

SRV

303ms

Total

4984ms

🕐 Scan History#

Scanned At	Duration	Records	DNSSEC
2026-10-20 23:11:05	670ms	2 NS 1 A 5 MX	🔒 Secure
2026-10-10 05:24:33	2044ms	2 NS 1 A 5 MX	🔒 Secure
2026-10-08 00:29:08	461ms	2 NS 1 A 5 MX	🔒 Secure
2026-09-30 14:28:57	541ms	2 NS 1 A 5 MX	🔒 Secure
2026-09-09 00:20:38	2788ms	2 NS 1 A 5 MX	🔒 Secure
2026-09-06 18:47:40	798ms	2 NS 1 A 5 MX	🔒 Secure
2026-08-23 12:41:59	5644ms	2 NS 1 A 5 MX	🔒 Secure
2026-08-22 11:30:13	33736ms	2 NS 1 A 5 MX	🔒 Secure
2026-08-16 02:15:03	5682ms	2 NS 1 A 5 MX	🔒 Secure
2026-08-13 19:15:39 shown	4984ms	2 NS 1 A 5 MX	🔒 Secure
2026-08-10 16:07:39	4773ms	2 NS 1 A 5 MX	🔒 Secure
2026-07-11 04:59:26	1473ms	2 NS 1 A 5 MX	🔒 Secure
2026-06-19 13:04:47	801ms	2 NS 1 A 5 MX	🔒 Secure
2026-06-17 12:54:50	1683ms	2 NS 1 A 5 MX	🔒 Secure