aal.dk

📜 Historical scan 2026-06-16 13:16:05  ·  ← Latest scan
⬇ Zone File 📜 Timeline & History ⚡ Scan Now

aal.dk is a .dk domain served by 2 nameservers (ignacio.ns.cloudflare.com, tess.ns.cloudflare.com). It was registered on 21 November 1996 (WHOIS) and was already in the .dk zone when our tracking began on 16 June 2026. Its website address 104.20.46.78 is hosted by Cloudflare, Inc. (AS13335). Mail is handled by mx1.aal.c3s2.iphmx.com, mx2.aal.c3s2.iphmx.com. The zone is DNSSEC-signed and validates, publishes a DMARC policy and is reachable over IPv6. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

2 records   35ms
NameserverIP addressesPTRASN / ISP
ignacio.ns.cloudflare.com — — —
tess.ns.cloudflare.com — — —

🌍 A Records#

2 records   29ms
IPTTLPTRASNISP / OrgCIDRCountryCity
104.20.46.78 — — AS13335 Cloudflare, Inc. 104.20.0.0/18 — —
172.66.145.65 — — AS13335 Cloudflare, Inc. 172.66.128.0/19 — —

📧 MX Records#

2 records   45ms

🔷 AAAA Records (IPv6)#

2 records   32ms

🔐 HTTPS Records#

1 records   43ms
PriorityTargetSvcParams
1 service . alpn="h2" ipv4hint=104.20.46.78,172.66.145.65 ipv6hint=2606:4700:10::6814:2e4e,2606:4700:10::ac42:9141

📝 TXT Records#

6 records   176ms
TXT Record
duo_sso_verification=L4LudD8Vunyd7ugNU0utEhXmrdSht4QOSXJsVq3VSeVpD25rLqfcAftuBn4XyI4l
google-site-verification=W9fneG_vKZy25sQ4JGFgdXo1df6h35s_dUxioDAw19I
mandrill_verify.zhtOxRXV1CtoBco9FM9ynQ
MS=ms24199657
openai-domain-verification=dv-uG5nOPw7TJjHZH2cyWMsDCOw
v=spf1 a mx ip4:68.232.151.114 ip4:68.232.152.96 ip4:193.242.107.229 ip4:194.88.216.203 ip4:167.86.94.251 ip4:89.39.123.8 ip4:168.245.70.104 include:spf.mandrillapp.com a:cpost.timeplan-software.net ip4:144.91.73.106 ip4:89.39.123.16 ip4:89.39.123.5 include:send.heyloyalty.com include:spf.protection.outlook.com -all

✉️ SPF#

PolicyRecord (aal.dk)
-all (hard fail) v=spf1 a mx ip4:68.232.151.114 ip4:68.232.152.96 ip4:193.242.107.229 ip4:194.88.216.203 ip4:167.86.94.251 ip4:89.39.123.8 ip4:168.245.70.104 include:spf.mandrillapp.com a:cpost.timeplan-software.net ip4:144.91.73.106 ip4:89.39.123.16 ip4:89.39.123.5 include:send.heyloyalty.com include:spf.protection.outlook.com -all

📨 DMARC#

PolicyRecord (_dmarc.aal.dk)
p=reject v=DMARC1;p=reject;pct=100;rua=mailto:6762232dd8a94ad285e4d902d54db15a@dmarc-reports.cloudflare.net;ri=86400;aspf=r;adkim=r;fo=1

📬 MTA-STS#

312ms
CheckResult
Status🧪 Testing
TXT record (_mta-sts)✓ Found
HTTPS policy✓ Valid
Modetesting
Policy ID20240108T112806
max_age31449600s
Policy MX—

📈 TLSRPT#

StatusReport address (rua)
✓ Enabled mailto:7b2f73c42e@tls.easydmarc.com

📜 CAA Records#

✗ No CAA records — any CA may issue certificates

🧩 Web & zone#

latest probe, not this scan · checked 2026-10-17 02:00:15
www104.20.46.78 172.66.145.65 2606:4700:10::6814:2e4e 2606:4700:10::ac42:9141 (AS13335) (address records, no CNAME)
www vs bare domainSame network
WildcardNo
Denial of existenceCompact NSEC (RFC 9824, "black lies") not walkable
CDS / CDNSKEYPublished: key rollovers can be automated with the registry (RFC 7344/8078) 1 CDS, 1 CDNSKEY
BIMIv=BIMI1;l=https://aal.dk/Files/Files/IT/BIMI/AAL-BIMI_2022_12.svg;a=

✍️ DKIM keys#

1 found
SelectorCNAMEKey
s1 — RSA · ~2048 bit

DKIM selectors can't be listed, so we check the common ones (Microsoft 365, Google, Mailchimp, SendGrid, generic). Keys under other selectors aren't shown.

🔎 SPF check#

zone-wide SPF report

DNS lookups: 6/10 · policy: -all

No problems found

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

144ms
CheckResult
Validation Status🔒 Secure
AD Flag (resolver validates)✓ Set
DS Record✓ Found
DNSKEY Record✓ Found
Flagsfully validated

🏷️ SOA#

30ms
FieldValue
Serial2406818964
Primary NS (MNAME)ignacio.ns.cloudflare.com
Responsible (RNAME)dns@cloudflare.com
Refresh10000s
Retry2400s
Expire604800s
Minimum (neg-cache TTL)1800s

📋 Registration#

WHOIS fetched 2026-10-11 18:42:19
FieldValue
RegistrarPunktum dk A/S (direct)
Registered1996-11-21
Expires2035-12-31 (3362d)

🔗 Same registrant#

4 domains

Other .dk domains whose WHOIS registrant has the same name and postal address. Matched on a keyed hash: the registrant's details are not stored or shown. Covers only domains whose WHOIS we have fetched (refreshed about monthly).

DomainRegistrar
aalborg-airport.dkPunktum dk A/S (direct)
aalit.dkPunktum dk A/S (direct)
crewaal.dkPunktum dk A/S (direct)
totalyndlingslufthavn.dkPunktum dk A/S (direct)
📋 WHOIS#

⏱️ Lookup Timing#

NS
35ms
A
29ms
MX
45ms
AAAA
32ms
TXT
176ms
CAA
37ms
HTTPS
43ms
TLSA
112ms
SOA
30ms
MTA-STS
312ms
DNSSEC
144ms
SRV
0ms
Total
1521ms

🕐 Scan History#

Scanned AtDurationRecordsDNSSEC
2026-10-17 02:00:15 1725ms 2 NS 2 A 2 MX 🔒 Secure
2026-10-16 01:06:09 2618ms 2 NS 2 A 2 MX 🔒 Secure
2026-10-11 18:17:35 3151ms 2 NS 2 A 2 MX 🔒 Secure
2026-09-28 01:43:16 1488ms 2 NS 2 A 2 MX 🔒 Secure
2026-09-27 01:27:08 1929ms 2 NS 2 A 2 MX 🔒 Secure
2026-09-25 00:47:31 2597ms 2 NS 2 A 2 MX 🔒 Secure
2026-09-19 03:06:45 1477ms 2 NS 2 A 2 MX 🔒 Secure
2026-09-18 07:25:12 2368ms 2 NS 2 A 2 MX 🔒 Secure
2026-09-12 14:50:54 10115ms 2 NS 2 A 2 MX 🔒 Secure
2026-08-24 13:39:18 10269ms 2 NS 2 A 2 MX 🔒 Secure
2026-08-20 08:50:55 17894ms 2 NS 2 A 2 MX 🔒 Secure
2026-08-19 05:22:53 1614ms 2 NS 2 A 2 MX 🔒 Secure
2026-08-07 17:24:41 2168ms 2 NS 2 A 2 MX 🔒 Secure
2026-07-08 20:43:17 2783ms 2 NS 2 A 2 MX 🔒 Secure
2026-06-21 08:59:13 2016ms 2 NS 2 A 2 MX 🔒 Secure
2026-06-16 13:16:05 shown 1521ms 2 NS 2 A 2 MX 🔒 Secure
dhd.dk [/] search Domains, Hosts & DNS — .dk zone