aal.dk

Records from scan: 2026-10-17 02:00:15  ·  1725ms total
⬇ Zone File 📜 Timeline & History ⚡ Scan Now

aal.dk is a .dk domain served by 2 nameservers (ignacio.ns.cloudflare.com, tess.ns.cloudflare.com). It was registered on 21 November 1996 (WHOIS) and was already in the .dk zone when our tracking began on 16 June 2026. Its website address 104.20.46.78 is hosted by Cloudflare, Inc. (AS13335). Mail is handled by mx1.aal.c3s2.iphmx.com, mx2.aal.c3s2.iphmx.com. The zone is DNSSEC-signed and validates, publishes a DMARC policy and is reachable over IPv6. Below are all of its DNS records from our latest scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

2 records   35ms
NameserverIP addressesPTRASN / ISP
ignacio.ns.cloudflare.com 108.162.195.82
162.159.44.82
172.64.35.82
2606:4700:58::a29f:2c52
2803:f800:50::6ca2:c352
2a06:98c1:50::ac40:2352		 ignacio.ns.cloudflare.com
ignacio.ns.cloudflare.com
ignacio.ns.cloudflare.com
ignacio.ns.cloudflare.com
ignacio.ns.cloudflare.com
ignacio.ns.cloudflare.com		 AS13335 Cloudflare, Inc.
AS13335 Cloudflare, Inc.
AS13335 Cloudflare, Inc.
AS13335 Cloudflare, Inc.
AS13335 Cloudflare, Inc.
AS13335 Cloudflare, Inc.
tess.ns.cloudflare.com 108.162.192.227
172.64.32.227
173.245.58.227
2606:4700:50::adf5:3ae3
2803:f800:50::6ca2:c0e3
2a06:98c1:50::ac40:20e3		 tess.ns.cloudflare.com
tess.ns.cloudflare.com
tess.ns.cloudflare.com
tess.ns.cloudflare.com
tess.ns.cloudflare.com
tess.ns.cloudflare.com		 AS13335 Cloudflare, Inc.
AS13335 Cloudflare, Inc.
AS13335 Cloudflare, Inc.
AS13335 Cloudflare, Inc.
AS13335 Cloudflare, Inc.
AS13335 Cloudflare, Inc.

🌍 A Records#

2 records   40ms
IPTTLPTRASNISP / OrgCIDRCountryCity
104.20.46.78 300s — AS13335 Cloudflare, Inc. 104.20.0.0/18 — —
172.66.145.65 300s — AS13335 Cloudflare, Inc. 172.66.128.0/19 — —

📧 MX Records#

2 records   35ms
PriorityTTLMail ServerIP addressesPTRASN
10 300s mx1.aal.c3s2.iphmx.com 68.232.151.114
68.232.152.96		 esa2.aal.c3s2.iphmx.com
esa1.aal.c3s2.iphmx.com		 AS30238 Cisco Systems Ironport Division
AS30238 Cisco Systems Ironport Division
20 300s mx2.aal.c3s2.iphmx.com 68.232.151.114
68.232.152.96		 esa2.aal.c3s2.iphmx.com
esa1.aal.c3s2.iphmx.com		 AS30238 Cisco Systems Ironport Division
AS30238 Cisco Systems Ironport Division

📧 Autodiscover / Autoconfig#

ServiceCNAME / IP
🔷 Autodiscover89.39.123.8

🔷 AAAA Records (IPv6)#

2 records   39ms
IPv6 AddressTTLPTRASNISP / OrgCIDRCountryCity
2606:4700:10::6814:2e4e 300s — AS13335 Cloudflare, Inc. 2606:4700:0:0:0:0:0:0/43 — —
2606:4700:10::ac42:9141 300s — AS13335 Cloudflare, Inc. 2606:4700:0:0:0:0:0:0/43 — —

🔐 HTTPS Records#

1 records   54ms
PriorityTargetSvcParams
1 service . alpn="h2" ipv4hint=104.20.46.78,172.66.145.65 ipv6hint=2606:4700:10::6814:2e4e,2606:4700:10::ac42:9141

🔌 SRV Records#

1 records   64ms
ServicePriorityWeightPortTarget
_sipfederationtls._tcp 100 1 5061 sipfed.online.lync.com

📝 TXT Records#

6 records   270ms
TXT Record
duo_sso_verification=L4LudD8Vunyd7ugNU0utEhXmrdSht4QOSXJsVq3VSeVpD25rLqfcAftuBn4XyI4l
google-site-verification=W9fneG_vKZy25sQ4JGFgdXo1df6h35s_dUxioDAw19I
mandrill_verify.zhtOxRXV1CtoBco9FM9ynQ
MS=ms24199657
openai-domain-verification=dv-uG5nOPw7TJjHZH2cyWMsDCOw
v=spf1 a mx ip4:68.232.151.114 ip4:68.232.152.96 ip4:193.242.107.229 ip4:194.88.216.203 ip4:167.86.94.251 ip4:89.39.123.8 ip4:168.245.70.104 include:spf.mandrillapp.com a:cpost.timeplan-software.net ip4:144.91.73.106 ip4:89.39.123.16 ip4:89.39.123.5 include:send.heyloyalty.com include:spf.protection.outlook.com -all

✉️ SPF#

PolicyRecord (aal.dk)
-all (hard fail) v=spf1 a mx ip4:68.232.151.114 ip4:68.232.152.96 ip4:193.242.107.229 ip4:194.88.216.203 ip4:167.86.94.251 ip4:89.39.123.8 ip4:168.245.70.104 include:spf.mandrillapp.com a:cpost.timeplan-software.net ip4:144.91.73.106 ip4:89.39.123.16 ip4:89.39.123.5 include:send.heyloyalty.com include:spf.protection.outlook.com -all

📨 DMARC#

PolicyRecord (_dmarc.aal.dk)
p=reject v=DMARC1;p=reject;pct=100;rua=mailto:6762232dd8a94ad285e4d902d54db15a@dmarc-reports.cloudflare.net;ri=86400;aspf=r;adkim=r;fo=1

📬 MTA-STS#

299ms
CheckResult
Status🧪 Testing
TXT record (_mta-sts)✓ Found
HTTPS policy✓ Valid
Modetesting
Policy ID20240108T112806
max_age31449600s
Policy MXmx1.aal.c3s2.iphmx.com, mx2.aal.c3s2.iphmx.com

📈 TLSRPT#

StatusReport address (rua)
✓ Enabled mailto:7b2f73c42e@tls.easydmarc.com

📜 CAA Records#

✗ No CAA records — any CA may issue certificates

🧩 Web & zone#

checked 2026-10-17 02:00:15
www104.20.46.78 172.66.145.65 2606:4700:10::6814:2e4e 2606:4700:10::ac42:9141 (AS13335) (address records, no CNAME)
www vs bare domainSame network
WildcardNo
Denial of existenceCompact NSEC (RFC 9824, "black lies") not walkable
CDS / CDNSKEYPublished: key rollovers can be automated with the registry (RFC 7344/8078) 1 CDS, 1 CDNSKEY
BIMIv=BIMI1;l=https://aal.dk/Files/Files/IT/BIMI/AAL-BIMI_2022_12.svg;a=

✍️ DKIM keys#

1 found
SelectorCNAMEKey
s1 — RSA · ~2048 bit

DKIM selectors can't be listed, so we check the common ones (Microsoft 365, Google, Mailchimp, SendGrid, generic). Keys under other selectors aren't shown.

🔎 SPF check#

zone-wide SPF report

DNS lookups: 6/10 · policy: -all

No problems found

🔏 ACME Challenge#

TypeNameValue
CNAME _acme-challenge.aal.dk bf3842ec-30c3-4f5c-b0c4-a1d2264197a7.acme.leanfids.com
TXT bf3842ec-30c3-4f5c-b0c4-a1d2264197a7.acme.leanfids.com Nfq8sNaapvdEKm1Eo6jgG8FGTbPLNFXzQxHJKpNU2rA
TXT bf3842ec-30c3-4f5c-b0c4-a1d2264197a7.acme.leanfids.com g7fBT8dWCsaOtES-rkdFUZepTGRPCbJI2t0KDj_AW-k

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

111ms
CheckResult
Validation Status🔒 Secure
AD Flag (resolver validates)✓ Set
DS Record✓ Found
DNSKEY Record✓ Found
Flagsfully validated

🏷️ SOA#

40ms
FieldValue
Serial2417641898
Primary NS (MNAME)ignacio.ns.cloudflare.com
Responsible (RNAME)dns@cloudflare.com
Refresh10000s
Retry2400s
Expire604800s
Minimum (neg-cache TTL)1800s

📋 Registration#

WHOIS fetched 2026-10-11 18:42:19
FieldValue
RegistrarPunktum dk A/S (direct)
Registered1996-11-21
Expires2035-12-31 (3362d)

🔗 Same registrant#

4 domains

Other .dk domains whose WHOIS registrant has the same name and postal address. Matched on a keyed hash: the registrant's details are not stored or shown. Covers only domains whose WHOIS we have fetched (refreshed about monthly).

DomainRegistrar
aalborg-airport.dkPunktum dk A/S (direct)
aalit.dkPunktum dk A/S (direct)
crewaal.dkPunktum dk A/S (direct)
totalyndlingslufthavn.dkPunktum dk A/S (direct)
📋 WHOIS#

⏱️ Lookup Timing#

NS
35ms
A
40ms
MX
35ms
AAAA
39ms
TXT
270ms
CAA
37ms
HTTPS
54ms
TLSA
137ms
SOA
40ms
MTA-STS
299ms
DNSSEC
111ms
SRV
64ms
Total
1725ms

🕐 Scan History#

Scanned AtDurationRecordsDNSSEC
2026-10-17 02:00:15 shown 1725ms 2 NS 2 A 2 MX 🔒 Secure
2026-10-16 01:06:09 2618ms 2 NS 2 A 2 MX 🔒 Secure
2026-10-11 18:17:35 3151ms 2 NS 2 A 2 MX 🔒 Secure
2026-09-28 01:43:16 1488ms 2 NS 2 A 2 MX 🔒 Secure
2026-09-27 01:27:08 1929ms 2 NS 2 A 2 MX 🔒 Secure
2026-09-25 00:47:31 2597ms 2 NS 2 A 2 MX 🔒 Secure
2026-09-19 03:06:45 1477ms 2 NS 2 A 2 MX 🔒 Secure
2026-09-18 07:25:12 2368ms 2 NS 2 A 2 MX 🔒 Secure
2026-09-12 14:50:54 10115ms 2 NS 2 A 2 MX 🔒 Secure
2026-08-24 13:39:18 10269ms 2 NS 2 A 2 MX 🔒 Secure
2026-08-20 08:50:55 17894ms 2 NS 2 A 2 MX 🔒 Secure
2026-08-19 05:22:53 1614ms 2 NS 2 A 2 MX 🔒 Secure
2026-08-07 17:24:41 2168ms 2 NS 2 A 2 MX 🔒 Secure
2026-07-08 20:43:17 2783ms 2 NS 2 A 2 MX 🔒 Secure
2026-06-21 08:59:13 2016ms 2 NS 2 A 2 MX 🔒 Secure
2026-06-16 13:16:05 1521ms 2 NS 2 A 2 MX 🔒 Secure
dhd.dk [/] search Domains, Hosts & DNS — .dk zone