well.dk

📜 Historical scan 2026-09-19 14:34:32 · ← Latest scan

⬇ Zone File 📜 Timeline & History ⚡ Scan Now

well.dk is a .dk domain served by 2 nameservers (algin.ns.cloudflare.com, candy.ns.cloudflare.com). It was registered on 1 June 2007 (WHOIS) and was already in the .dk zone when our tracking began on 16 June 2026. Its website address 104.20.18.115 is hosted by Cloudflare, Inc. (AS13335). Mail is handled by aspmx.l.google.com, alt1.aspmx.l.google.com and 3 more. The zone is DNSSEC-signed and validates, publishes a DMARC policy and is reachable over IPv6. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

2 records 149ms

Nameserver	IP addresses	PTR	ASN / ISP
algin.ns.cloudflare.com	108.162.193.61 172.64.33.61 173.245.59.61 2606:4700:58::adf5:3b3d 2803:f800:50::6ca2:c13d 2a06:98c1:50::ac40:213d	algin.ns.cloudflare.com algin.ns.cloudflare.com algin.ns.cloudflare.com algin.ns.cloudflare.com algin.ns.cloudflare.com algin.ns.cloudflare.com	AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc.
candy.ns.cloudflare.com	108.162.192.79 172.64.32.79 173.245.58.79 2606:4700:50::adf5:3a4f 2803:f800:50::6ca2:c04f 2a06:98c1:50::ac40:204f	candy.ns.cloudflare.com candy.ns.cloudflare.com candy.ns.cloudflare.com candy.ns.cloudflare.com candy.ns.cloudflare.com candy.ns.cloudflare.com	AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc.

🌍 A Records#

2 records 146ms

IP	TTL	PTR	ASN	ISP / Org	CIDR	Country	City
104.20.18.115	300s	—	AS13335	Cloudflare, Inc.	104.20.0.0/18	—	—
172.66.146.110	300s	—	AS13335	Cloudflare, Inc.	172.66.128.0/19	—	—

📧 MX Records#

5 records 140ms

Priority	TTL	Mail Server	IP addresses	PTR	ASN
1	300s	aspmx.l.google.com	142.251.9.27 2a00:1450:4025:c01::1b	rc-in-f27.1e100.net rd-in-f27.1e100.net	AS15169 Google LLC AS15169 Google LLC
5	300s	alt1.aspmx.l.google.com	192.178.211.27 2404:6800:4000:1025::1a	lcbomp-in-f27.1e100.net lcbomp-in-f26.1e100.net	AS15169 Google LLC AS15169 Google LLC
5	300s	alt2.aspmx.l.google.com	192.178.158.27 2404:6800:4013:813::1b	lcdels-in-f27.1e100.net lcdels-in-f27.1e100.net	AS15169 Google LLC AS15169 Google LLC
10	300s	alt3.aspmx.l.google.com	173.194.41.26 173.194.41.26 2404:6800:4001:c01::1a	mad01s14-in-f26.1e100.net yukulwh-in-f26.1e100.net yukulwh-in-f26.1e100.net	AS15169 Google LLC AS15169 Google LLC AS15169 Google LLC
10	300s	alt4.aspmx.l.google.com	172.253.158.26 2404:6800:4003:c26::1b	so-in-f26.1e100.net so-in-f27.1e100.net	AS15169 Google LLC AS15169 Google LLC

🔷 AAAA Records (IPv6)#

2 records 111ms

IPv6 Address	TTL	PTR	ASN	ISP / Org	CIDR	Country	City
2606:4700:10::6814:1273	300s	—	AS13335	Cloudflare, Inc.	2606:4700:0:0:0:0:0:0/41	—	—
2606:4700:10::ac42:926e	300s	—	AS13335	Cloudflare, Inc.	2606:4700:0:0:0:0:0:0/41	—	—

🔐 HTTPS Records#

1 records 110ms

Priority	Target	SvcParams
1 service	.	alpn="h3,h2" ipv4hint=104.20.18.115,172.66.146.110 ipv6hint=2606:4700:10::6814:1273,2606:4700:10::ac42:926e

📝 TXT Records#

5 records 232ms

TXT Record
google-site-verification=kEZGbCViWNYdsYAaoOgDS_hFUKonFO1YSeTiOYY5ark
klaviyo-site-verification=NmCkns
spf2.0/pra mx ip4:77.233.245.253 include:klaviyomail.com include:sendgrid.net include:_spf.google.com include:trustpilotservice.com ~all
sw-domain-hash=0f1c0e2eabf042505d73de42c293c84e
v=spf1 mx ip4:77.233.245.253 include:klaviyomail.com include:sendgrid.net include:spf.dixa.io include:_spf.google.com ~all

✉️ SPF#

Policy	Record (well.dk)
~all (soft fail)	v=spf1 mx ip4:77.233.245.253 include:klaviyomail.com include:sendgrid.net include:spf.dixa.io include:_spf.google.com ~all

📨 DMARC#

Policy	Record (_dmarc.well.dk)
p=none (monitor only)	v=DMARC1; p=none; rua=mailto:kontakt@well.dk; ruf=mailto:kontakt@well.dk

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

10 records 125ms

Flags	Tag	Value
0	issue	comodoca.com
0	issue	digicert.com; cansignhttpexchanges=yes
0	issue	letsencrypt.org
0	issue	pki.goog; cansignhttpexchanges=yes
0	issue	ssl.com
0	issuewild	comodoca.com
0	issuewild	digicert.com; cansignhttpexchanges=yes
0	issuewild	letsencrypt.org
0	issuewild	pki.goog; cansignhttpexchanges=yes
0	issuewild	ssl.com

🧩 Web & zone#

latest probe, not this scan · checked 2026-10-11 10:44:29

www	104.20.18.115 172.66.146.110 2606:4700:10::6814:1273 2606:4700:10::ac42:926e (AS13335) (address records, no CNAME)
www vs bare domain	Same network well.dk: 104.20.18.115 172.66.146.110 2606:4700:10::6814:1273 2606:4700:10::ac42:926e (AS13335) www.well.dk: 104.20.18.115 172.66.146.110 2606:4700:10::6814:1273 2606:4700:10::ac42:926e (AS13335)
Wildcard	No
Denial of existence	Compact NSEC (RFC 9824, "black lies") not walkable
CDS / CDNSKEY	Published: key rollovers can be automated with the registry (RFC 7344/8078) 1 CDS, 1 CDNSKEY

✍️ DKIM keys#

3 found

Selector	CNAME	Key
google	—	RSA · ~1024 bit below 2048 bit
s1	s1.domainkey.u8042587.wl088.sendgrid.net	RSA · ~2048 bit
s2	s2.domainkey.u8042587.wl088.sendgrid.net	RSA · ~1024 bit below 2048 bit

DKIM selectors can't be listed, so we check the common ones (Microsoft 365, Google, Mailchimp, SendGrid, generic). Keys under other selectors aren't shown.

🔎 SPF check#

zone-wide SPF report

DNS lookups: 9/10 · policy: ~all

warn 9 of the 10 allowed DNS lookups used: one more include can break SPF

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

181ms

Check	Result
Validation Status	🔒 Secure
AD Flag (resolver validates)	✓ Set
DS Record	✓ Found
DNSKEY Record	✓ Found
Flags	fully validated

🏷️ SOA#

0ms

Field	Value
Serial	2415081346
Primary NS (MNAME)	algin.ns.cloudflare.com
Responsible (RNAME)	dns@cloudflare.com
Refresh	10000s
Retry	2400s
Expire	604800s
Minimum (neg-cache TTL)	1800s

📋 Registration#

WHOIS fetched 2026-09-07 02:22:19

Field	Value
Registrar	Abion AB
Registered	2007-06-01
Expires	2027-06-30 (254d)

📋 WHOIS#

⏱️ Lookup Timing#

149ms

146ms

140ms

AAAA

111ms

TXT

232ms

CAA

125ms

HTTPS

110ms

TLSA

339ms

SOA

0ms

MTA-STS

131ms

DNSSEC

181ms

SRV

149ms

Total

1421ms

🕐 Scan History#

Scanned At	Duration	Records	DNSSEC
2026-10-11 10:44:29	1780ms	2 NS 2 A 5 MX	🔒 Secure
2026-09-30 05:06:47	845ms	2 NS 2 A 5 MX	🔒 Secure
2026-09-20 18:14:51	1455ms	2 NS 2 A 5 MX	🔒 Secure
2026-09-19 14:34:32 shown	1421ms	2 NS 2 A 5 MX	🔒 Secure
2026-09-12 12:24:30	1008ms	2 NS 2 A 5 MX	🔒 Secure
2026-09-09 03:45:13	2427ms	2 NS 2 A 5 MX	🔒 Secure
2026-09-07 02:21:42	1043ms	2 NS 2 A 5 MX	🔒 Secure
2026-08-25 12:27:39	3519ms	2 NS 1 A 5 MX	🔒 Secure
2026-08-23 21:43:47	5298ms	2 NS 1 A 5 MX	🔒 Secure
2026-08-06 21:16:38	2044ms	2 NS 1 A 5 MX	🔒 Secure
2026-07-30 14:51:00	1680ms	2 NS 1 A 5 MX	🔒 Secure
2026-07-28 00:37:34	17972ms	2 NS 1 A 5 MX	🔒 Secure
2026-07-20 03:31:03	1476ms	2 NS 1 A 5 MX	🔒 Secure
2026-07-17 23:48:02	4232ms	2 NS 1 A 5 MX	🔒 Secure
2026-07-06 21:49:37	25172ms	2 NS 0 A 5 MX	🔒 Secure
2026-07-03 20:40:22	3618ms	2 NS 1 A 5 MX	🔒 Secure
2026-06-27 11:13:11	1228ms	2 NS 1 A 5 MX	🔒 Secure
2026-06-26 20:01:24	1233ms	2 NS 1 A 5 MX	🔒 Secure
2026-06-23 00:43:02	2912ms	2 NS 1 A 5 MX	🔒 Secure
2026-06-22 18:35:58	1180ms	0 NS 0 A 0 MX	❓ Unknown
2026-06-21 00:21:53	2000ms	2 NS 1 A 5 MX	🔒 Secure
2026-06-17 15:21:21	3642ms	2 NS 1 A 5 MX	🔒 Secure