toftdigital.dk

📜 Historical scan 2026-06-18 02:34:53 · ← Latest scan

⬇ Zone File 📜 Timeline & History ⚡ Scan Now

toftdigital.dk is a .dk domain served by 2 nameservers (kareem.ns.cloudflare.com, sureena.ns.cloudflare.com). It was already in the .dk zone when our tracking began on 16 June 2026. Mail is handled by smtp.google.com. The zone is not DNSSEC-signed, publishes a DMARC policy and is reachable over IPv6. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

2 records 149ms

Nameserver	IP addresses	PTR	ASN / ISP
kareem.ns.cloudflare.com	108.162.195.22 162.159.44.22 172.64.35.22 2606:4700:58::a29f:2c16 2803:f800:50::6ca2:c316 2a06:98c1:50::ac40:2316	kareem.ns.cloudflare.com kareem.ns.cloudflare.com kareem.ns.cloudflare.com kareem.ns.cloudflare.com kareem.ns.cloudflare.com kareem.ns.cloudflare.com	AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc.
sureena.ns.cloudflare.com	108.162.194.126 162.159.38.126 172.64.34.126 2606:4700:50::a29f:267e 2803:f800:50::6ca2:c27e 2a06:98c1:50::ac40:227e	sureena.ns.cloudflare.com sureena.ns.cloudflare.com sureena.ns.cloudflare.com sureena.ns.cloudflare.com sureena.ns.cloudflare.com sureena.ns.cloudflare.com	AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc.

🌍 A Records#

2 records 147ms

IP	TTL	PTR	ASN	ISP / Org	CIDR	Country	City
104.21.92.176	—	—	AS13335	—	—	—	—
172.67.196.214	—	—	AS13335	—	—	—	—

📧 MX Records#

1 records 145ms

Priority	TTL	Mail Server	IP addresses	PTR	ASN
1	—	smtp.google.com	142.250.147.26 142.250.147.27 142.251.9.26 142.251.9.27 2a00:1450:4025:c01::1a 2a00:1450:4025:c01::1b 2a00:1450:4025:c03::1a 2a00:1450:4025:c03::1b	rd-in-f26.1e100.net rd-in-f27.1e100.net rc-in-f26.1e100.net rc-in-f27.1e100.net rd-in-f26.1e100.net rd-in-f27.1e100.net rc-in-f26.1e100.net rc-in-f27.1e100.net	AS15169 Google LLC AS15169 Google LLC AS15169 Google LLC AS15169 Google LLC AS15169 Google LLC AS15169 Google LLC AS15169 Google LLC AS15169 Google LLC

📧 Autodiscover / Autoconfig#

Service	CNAME / IP
🔷 Autodiscover	104.21.92.176
🔶 Autoconfig	104.21.92.176

🔷 AAAA Records (IPv6)#

2 records 147ms

IPv6 Address	TTL	PTR	ASN	ISP / Org	CIDR	Country	City
2606:4700:3030::6815:5cb0	—	—	AS13335	—	—	—	—
2606:4700:3030::ac43:c4d6	—	—	AS13335	—	—	—	—

🔐 HTTPS Records#

1 records 115ms

Priority	Target	SvcParams
1 service	.	alpn="h3,h2" ipv4hint=104.21.92.176,172.67.196.214 ech=AEX+DQBBUgAgACBikhzZAr7Rk2pMlFm723zwb2k97MV6NY84MH+YnyTnJgAEAAEAAQASY2xvdWRmbGFyZS1lY2guY29tAAA= ipv6hint=2606:4700:3030::6815:5cb0,2606:4700:3030::ac43:c4d6

📝 TXT Records#

2 records 750ms

TXT Record
google-site-verification=KL2UWEYeYEDU8_4pupmNW_Rwlm0JxFRrZ6i0C6dDmkM
v=spf1 +a +mx +include:spf-record.net ~all

✉️ SPF#

Policy	Record (toftdigital.dk)
~all (soft fail)	v=spf1 +a +mx +include:spf-record.net ~all

📨 DMARC#

Policy	Record (_dmarc.toftdigital.dk)
p=none (monitor only)	v=DMARC1;p=none;sp=none;adkim=r;aspf=r;pct=100;fo=0;rf=afrf;ri=86400;rua=mailto:dmarc-reports@toftdigital.dk

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

✗ No CAA records — any CA may issue certificates

🧩 Web & zone#

latest probe, not this scan · checked 2026-10-08 09:39:45

www	104.21.92.176 172.67.196.214 2606:4700:3035::ac43:c4d6 2606:4700:3036::6815:5cb0 (AS13335) (address records, no CNAME)
www vs bare domain	Same network toftdigital.dk: 104.21.92.176 172.67.196.214 2606:4700:3035::ac43:c4d6 2606:4700:3036::6815:5cb0 (AS13335) www.toftdigital.dk: 104.21.92.176 172.67.196.214 2606:4700:3035::ac43:c4d6 2606:4700:3036::6815:5cb0 (AS13335)
Wildcard	Yes: any name under the zone resolves

✍️ DKIM keys#

2 found

Selector	CNAME	Key
default	—	RSA · ~1024 bit below 2048 bit
google	—	RSA · ~1024 bit below 2048 bit

DKIM selectors can't be listed, so we check the common ones (Microsoft 365, Google, Mailchimp, SendGrid, generic). Keys under other selectors aren't shown.

🔎 SPF check#

zone-wide SPF report

DNS lookups: 4/10 · policy: ~all

No problems found

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

198ms

Check	Result
Validation Status	🔓 Insecure
AD Flag (resolver validates)	✗ Not set
DS Record	✗ Not found
DNSKEY Record	✗ Not found
Flags	unsigned answer

🏷️ SOA#

133ms

Field	Value
Serial	2406143205
Primary NS (MNAME)	kareem.ns.cloudflare.com
Responsible (RNAME)	dns@cloudflare.com
Refresh	10000s
Retry	2400s
Expire	604800s
Minimum (neg-cache TTL)	1800s

📋 Registration#

✗ No registration data yet — queued for a WHOIS lookup

📋 WHOIS#

⏱️ Lookup Timing#

149ms

147ms

145ms

AAAA

147ms

TXT

750ms

CAA

142ms

HTTPS

115ms

TLSA

190ms

SOA

133ms

MTA-STS

126ms

DNSSEC

198ms

SRV

137ms

Total

1900ms

🕐 Scan History#

Scanned At	Duration	Records	DNSSEC
2026-10-02 04:26:56	960ms	2 NS 2 A 1 MX	🔓 Insecure
2026-09-28 03:45:34	724ms	2 NS 2 A 1 MX	🔓 Insecure
2026-09-18 20:59:27	1586ms	2 NS 2 A 1 MX	🔓 Insecure
2026-08-25 03:46:55	9648ms	2 NS 2 A 1 MX	🔓 Insecure
2026-08-04 13:33:56	3163ms	2 NS 2 A 1 MX	🔓 Insecure
2026-07-16 16:34:51	9940ms	2 NS 2 A 1 MX	🔓 Insecure
2026-06-25 10:09:29	969ms	2 NS 2 A 1 MX	🔓 Insecure
2026-06-20 21:34:30	622ms	2 NS 2 A 1 MX	🔓 Insecure
2026-06-20 17:44:15	896ms	2 NS 2 A 1 MX	🔓 Insecure
2026-06-20 09:24:38	772ms	2 NS 2 A 1 MX	🔓 Insecure
2026-06-19 13:17:16	6276ms	2 NS 2 A 1 MX	🔓 Insecure
2026-06-18 02:34:53 shown	1900ms	2 NS 2 A 1 MX	🔓 Insecure