aait.dk

📜 Historical scan 2026-08-01 10:02:40 · ← Latest scan

⬇ Zone File 📜 Timeline & History ⚡ Scan Now

aait.dk is a .dk domain served by 2 nameservers (elaine.ns.cloudflare.com, nico.ns.cloudflare.com). It was already in the .dk zone when our tracking began on 16 June 2026. Its website address 104.21.49.249 is hosted by Cloudflare, Inc. (AS13335). Mail is handled by mx1.pub.mailpod11-cph3.one.com, mx2.pub.mailpod11-cph3.one.com and 2 more. The zone is not DNSSEC-signed, publishes a DMARC policy and is reachable over IPv6. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

2 records 67ms

Nameserver	IP addresses	PTR	ASN / ISP
elaine.ns.cloudflare.com	108.162.192.152 172.64.32.152 173.245.58.152 2606:4700:50::adf5:3a98 2803:f800:50::6ca2:c098 2a06:98c1:50::ac40:2098	elaine.ns.cloudflare.com elaine.ns.cloudflare.com elaine.ns.cloudflare.com elaine.ns.cloudflare.com elaine.ns.cloudflare.com elaine.ns.cloudflare.com	AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc.
nico.ns.cloudflare.com	108.162.195.147 162.159.44.147 172.64.35.147 2606:4700:58::a29f:2c93 2803:f800:50::6ca2:c393 2a06:98c1:50::ac40:2393	nico.ns.cloudflare.com nico.ns.cloudflare.com nico.ns.cloudflare.com nico.ns.cloudflare.com nico.ns.cloudflare.com nico.ns.cloudflare.com	AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc.

🌍 A Records#

2 records 64ms

IP	TTL	PTR	ASN	ISP / Org	CIDR	Country	City
104.21.49.249	300s	—	AS13335	Cloudflare, Inc.	104.21.0.0/17	—	—
172.67.154.125	300s	—	AS13335	Cloudflare, Inc.	172.67.128.0/17	—	—

📧 MX Records#

4 records 65ms

Priority	TTL	Mail Server	IP addresses	PTR	ASN
10	300s	mx1.pub.mailpod11-cph3.one.com	104.37.34.230	mx1.pub.mailpod11-cph3.one.com	AS51468 One.com A/S
10	300s	mx2.pub.mailpod11-cph3.one.com	104.37.34.231	mx2.pub.mailpod11-cph3.one.com	AS51468 One.com A/S
10	300s	mx3.pub.mailpod11-cph3.one.com	104.37.34.232	mx3.pub.mailpod11-cph3.one.com	AS51468 One.com A/S
10	300s	mx4.pub.mailpod11-cph3.one.com	104.37.34.233	mx4.pub.mailpod11-cph3.one.com	AS51468 One.com A/S

🔷 AAAA Records (IPv6)#

2 records 67ms

IPv6 Address	TTL	PTR	ASN	ISP / Org	CIDR	Country	City
2606:4700:3034::6815:31f9	300s	—	AS13335	Cloudflare, Inc.	2606:4700:3000:0:0:0:0:0/42	—	—
2606:4700:3037::ac43:9a7d	300s	—	AS13335	Cloudflare, Inc.	2606:4700:3000:0:0:0:0:0/42	—	—

🔐 HTTPS Records#

1 records 60ms

Priority	Target	SvcParams
1 service	.	alpn="h3,h2" ipv4hint=104.21.49.249,172.67.154.125 ech=AEX+DQBBfAAgACAgzdUZsHy0NM6Mbf5FEAtDcPVFzGIGE2L/zRgCeqwwAQAEAAEAAQASY2xvdWRmbGFyZS1lY2guY29tAAA= ipv6hint=2606:4700:3034::6815:31f9,2606:4700:3037::ac43:9a7d

📝 TXT Records#

2 records 265ms

TXT Record
_acme-challenge.aait.dk
v=spf1 +a +mx

✉️ SPF#

Policy	Record (aait.dk)
no all — incomplete SPF	v=spf1 +a +mx

📨 DMARC#

Policy	Record (_dmarc.aait.dk)
p=reject	v=DMARC1; p=reject; pct=100; rua=mailto:tk@nitus.dk; adkim=r; aspf=r; rf=afrf

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

✗ No CAA records — any CA may issue certificates

🧩 Web & zone#

latest probe, not this scan · checked 2026-10-08 13:03:11

www	104.21.49.249 172.67.154.125 2606:4700:3034::6815:31f9 2606:4700:3037::ac43:9a7d (AS13335) (address records, no CNAME)
www vs bare domain	Same network aait.dk: 104.21.49.249 172.67.154.125 2606:4700:3034::6815:31f9 2606:4700:3037::ac43:9a7d (AS13335) www.aait.dk: 104.21.49.249 172.67.154.125 2606:4700:3034::6815:31f9 2606:4700:3037::ac43:9a7d (AS13335)
Wildcard	No

✍️ DKIM keys#

1 found

Selector	CNAME	Key
mail	—	RSA · ~2048 bit

DKIM selectors can't be listed, so we check the common ones (Microsoft 365, Google, Mailchimp, SendGrid, generic). Keys under other selectors aren't shown.

🔎 SPF check#

zone-wide SPF report

DNS lookups: 2/10 · policy: none

warn No "all" and no redirect: mail from unlisted servers gets a neutral result

🔗 TLSA / DANE#

4 records 8053ms

Service / Owner	Type	Cert association
SMTP _25._tcp.mx1.pub.mailpod11-cph3.one.com	DANE-EE · SPKI · SHA-256	068A81EDC98C58D5D494EDF2924D5F50…
SMTP _25._tcp.mx2.pub.mailpod11-cph3.one.com	DANE-EE · SPKI · SHA-256	068A81EDC98C58D5D494EDF2924D5F50…
SMTP _25._tcp.mx3.pub.mailpod11-cph3.one.com	DANE-EE · SPKI · SHA-256	068A81EDC98C58D5D494EDF2924D5F50…
SMTP _25._tcp.mx4.pub.mailpod11-cph3.one.com	DANE-EE · SPKI · SHA-256	068A81EDC98C58D5D494EDF2924D5F50…

🔐 DNSSEC#

167ms

Check	Result
Validation Status	🔓 Insecure
AD Flag (resolver validates)	✗ Not set
DS Record	✗ Not found
DNSKEY Record	✗ Not found
Flags	unsigned answer

🏷️ SOA#

0ms

Field	Value
Serial	2410995089
Primary NS (MNAME)	elaine.ns.cloudflare.com
Responsible (RNAME)	dns@cloudflare.com
Refresh	10000s
Retry	2400s
Expire	604800s
Minimum (neg-cache TTL)	1800s

📋 Registration#

✗ No registration data yet — queued for a WHOIS lookup

📋 WHOIS#

⏱️ Lookup Timing#

67ms

64ms

65ms

AAAA

67ms

TXT

265ms

CAA

66ms

HTTPS

60ms

TLSA

8053ms

SOA

0ms

MTA-STS

879ms

DNSSEC

167ms

SRV

86ms

Total

9938ms

🕐 Scan History#

Scanned At	Duration	Records	DNSSEC
2026-10-08 13:03:11	1030ms	2 NS 2 A 1 MX	🔓 Insecure
2026-10-02 21:57:07	567ms	2 NS 2 A 1 MX	🔓 Insecure
2026-09-30 21:52:42	804ms	2 NS 2 A 1 MX	🔓 Insecure
2026-09-18 13:26:54	2098ms	2 NS 2 A 1 MX	🔓 Insecure
2026-09-15 11:14:35	2281ms	2 NS 2 A 1 MX	🔓 Insecure
2026-08-27 09:50:03	786ms	2 NS 2 A 1 MX	🔓 Insecure
2026-08-26 09:48:40	1119ms	2 NS 2 A 1 MX	🔓 Insecure
2026-08-17 08:09:16	1023ms	2 NS 2 A 1 MX	🔓 Insecure
2026-08-07 16:44:04	3219ms	2 NS 2 A 4 MX	🔓 Insecure
2026-08-01 10:02:40 shown	9938ms	2 NS 2 A 4 MX	🔓 Insecure
2026-07-17 01:13:28	1359ms	2 NS 2 A 4 MX	🔓 Insecure
2026-06-16 12:48:23	827ms	2 NS 2 A 4 MX	🔓 Insecure