thefluffyduck.dk

📜 Historical scan 2026-06-17 20:53:41  ·  ← Latest scan
⬇ Zone File 📜 Timeline & History ⚡ Scan Now

thefluffyduck.dk is a .dk domain served by 2 nameservers (ns.dandomain.dk, ns2.dandomain.dk). It was already in the .dk zone when our tracking began on 16 June 2026. Mail is handled by aspmx.l.google.com, alt1.aspmx.l.google.com and 3 more. The zone is DNSSEC-signed and validates, publishes a DMARC policy and has no IPv6 address. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

2 records   89ms

🌍 A Records#

1 records   102ms
IPTTLPTRASNISP / OrgCIDRCountryCity
5.161.30.49 — static.49.30.161.5.clients.your-server.de AS213230 — — — —

📧 MX Records#

5 records   120ms

🔷 AAAA Records (IPv6)#

✗ No AAAA records — IPv6 not configured

🔐 HTTPS Records#

✗ No HTTPS RR — no SVCB/HTTPS service binding

📝 TXT Records#

3 records   176ms
TXT Record
google-site-verification=-ufU_dAXKJZFmOk_lqruxz2E6ZBF8FdJRXW9azRIXrI
lovable_verify=2268ffdb597716b16cbcf653d7017089431967184895ab47ef5693b6e6c1d80b
v=spf1 include:_spf.google.com include:mailgun.org include:spf.leadconnectorhq.com ~all

✉️ SPF#

PolicyRecord (thefluffyduck.dk)
~all (soft fail) v=spf1 include:_spf.google.com include:mailgun.org include:spf.leadconnectorhq.com ~all

📨 DMARC#

PolicyRecord (_dmarc.thefluffyduck.dk)
p=quarantine v=DMARC1; p=quarantine; rua=mailto:dmarc@thefluffyduck.dk; fo=1

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

✗ No CAA records — any CA may issue certificates

🧩 Web & zone#

latest probe, not this scan · checked 2026-10-21 13:51:58
www185.158.133.1 (AS13335) (address records, no CNAME)
www vs bare domainSame network
thefluffyduck.dk: 185.158.133.1 (AS13335)
www.thefluffyduck.dk: 185.158.133.1 (AS13335)
WildcardNo
Denial of existenceNSEC3 · 1 iteration · 1-byte salt RFC 9276 recommends 0 iterations and no salt
CDS / CDNSKEYNone 0 CDS, 0 CDNSKEY

✍️ DKIM keys#

1 found
SelectorCNAMEKey
google — RSA · ~2048 bit

DKIM selectors can't be listed, so we check the common ones (Microsoft 365, Google, Mailchimp, SendGrid, generic). Keys under other selectors aren't shown.

🔎 SPF check#

zone-wide SPF report

DNS lookups: 7/10 · policy: ~all

No problems found

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

154ms
CheckResult
Validation Status🔒 Secure
AD Flag (resolver validates)✓ Set
DS Record✓ Found
DNSKEY Record✓ Found
Flagsfully validated

🏷️ SOA#

90ms
FieldValue
Serial2026051107
Primary NS (MNAME)ns.dandomain.dk
Responsible (RNAME)hostmaster@dandomain.dk
Refresh14400s
Retry3600s
Expire1209600s
Minimum (neg-cache TTL)300s

📋 Registration#

✗ No registration data yet — queued for a WHOIS lookup
📋 WHOIS#

⏱️ Lookup Timing#

NS
89ms
A
102ms
MX
120ms
AAAA
124ms
TXT
176ms
CAA
82ms
HTTPS
93ms
TLSA
219ms
SOA
90ms
MTA-STS
86ms
DNSSEC
154ms
SRV
0ms
Total
970ms

🕐 Scan History#

Scanned AtDurationRecordsDNSSEC
2026-10-21 13:51:58 627ms 2 NS 1 A 5 MX 🔒 Secure
2026-10-02 23:34:25 464ms 2 NS 1 A 5 MX 🔒 Secure
2026-09-30 12:10:28 512ms 2 NS 1 A 5 MX 🔒 Secure
2026-09-26 11:37:17 616ms 2 NS 1 A 5 MX 🔒 Secure
2026-07-16 15:42:04 3582ms 2 NS 1 A 5 MX 🔒 Secure
2026-06-28 10:26:52 733ms 2 NS 1 A 5 MX 🔒 Secure
2026-06-17 20:53:41 shown 970ms 2 NS 1 A 5 MX 🔒 Secure
dhd.dk [/] search Domains, Hosts & DNS — .dk zone