965.dk

📜 Historical scan 2026-06-25 04:46:36  ·  ← Latest scan
⬇ Zone File 📜 Timeline & History ⚡ Scan Now

965.dk is a .dk domain served by 5 nameservers (ns0.dnsmadeeasy.com, ns1.dnsmadeeasy.com, ns2.dnsmadeeasy.com and 2 more). It was already in the .dk zone when our tracking began on 16 June 2026. Mail is handled by 965-dk.mail.protection.outlook.com. The zone is not DNSSEC-signed, has no DMARC policy and has no IPv6 address. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

5 records   394ms

🌍 A Records#

🌍
No A records found

📧 MX Records#

1 records   143ms

📧 Autodiscover / Autoconfig#

ServiceCNAME / IP
🔷 Autodiscoverautodiscover.outlook.com → 52.98.178.248
🔶 Autoconfig87.62.62.251

🔷 AAAA Records (IPv6)#

✗ No AAAA records — IPv6 not configured

🔐 HTTPS Records#

✗ No HTTPS RR — no SVCB/HTTPS service binding

🔌 SRV Records#

1 records   721ms
ServicePriorityWeightPortTarget
_sipfederationtls._tcp 1 100 5061 sipfed.online.lync.com

📝 TXT Records#

1 records   566ms
TXT Record
v=spf1 include:spf.itnetworks.dk include:spf.protection.outlook.com a:ah.965.dk -all

✉️ SPF#

PolicyRecord (965.dk)
-all (hard fail) v=spf1 include:spf.itnetworks.dk include:spf.protection.outlook.com a:ah.965.dk -all

📨 DMARC#

✗ No DMARC record — mail spoofing not restricted

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

✗ No CAA records — any CA may issue certificates

🧩 Web & zone#

latest probe, not this scan · checked 2026-10-07 18:27:26
www87.62.62.251 (AS3292) (address records, no CNAME)
www vs bare domainOnly www resolves
965.dk: no address
www.965.dk: 87.62.62.251 (AS3292)
(all like this)
WildcardYes: any name under the zone resolves

✍️ DKIM keys#

2 found
SelectorCNAMEKey
selector1 selector1-965-dk._domainkey.itnetworks365.onmicrosoft.com RSA · ~1024 bit below 2048 bit
selector2 selector2-965-dk._domainkey.itnetworks365.onmicrosoft.com RSA · ~1024 bit below 2048 bit

DKIM selectors can't be listed, so we check the common ones (Microsoft 365, Google, Mailchimp, SendGrid, generic). Keys under other selectors aren't shown.

🔎 SPF check#

zone-wide SPF report

DNS lookups: 3/10 · policy: -all

No problems found

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

290ms
CheckResult
Validation Status🔓 Insecure
AD Flag (resolver validates)✗ Not set
DS Record✗ Not found
DNSKEY Record✗ Not found
Flagsresolution failed: ncache nxrrset

🏷️ SOA#

122ms
FieldValue
Serial2009010117
Primary NS (MNAME)ns10.digicertdns.com
Responsible (RNAME)dns@digicertdns.com
Refresh43200s
Retry3600s
Expire1209600s
Minimum (neg-cache TTL)180s

📋 Registration#

✗ No registration data yet — queued for a WHOIS lookup
📋 WHOIS#

⏱️ Lookup Timing#

NS
394ms
A
144ms
MX
143ms
AAAA
388ms
TXT
566ms
CAA
349ms
HTTPS
145ms
TLSA
142ms
SOA
122ms
MTA-STS
119ms
DNSSEC
290ms
SRV
721ms
Total
2210ms

🕐 Scan History#

Scanned AtDurationRecordsDNSSEC
2026-10-07 18:27:26 1293ms 5 NS 0 A 1 MX 🔓 Insecure
2026-09-30 11:22:53 1167ms 5 NS 0 A 1 MX 🔓 Insecure
2026-09-30 08:03:33 863ms 5 NS 0 A 1 MX 🔓 Insecure
2026-06-25 04:46:36 shown 2210ms 5 NS 0 A 1 MX 🔓 Insecure
2026-06-24 01:01:51 940ms 0 NS 0 A 0 MX ❓ Unknown
2026-06-16 13:15:36 853ms 5 NS 0 A 1 MX 🔓 Insecure
dhd.dk [/] search Domains, Hosts & DNS — .dk zone