aal.dk

📜 Historical scan 2026-08-20 08:50:55 · ← Latest scan

⬇ Zone File 📜 Timeline & History ⚡ Scan Now

aal.dk is a .dk domain served by 2 nameservers (ignacio.ns.cloudflare.com, tess.ns.cloudflare.com). It was registered on 21 November 1996 (WHOIS) and was already in the .dk zone when our tracking began on 16 June 2026. Its website address 104.20.46.78 is hosted by Cloudflare, Inc. (AS13335). Mail is handled by mx1.aal.c3s2.iphmx.com, mx2.aal.c3s2.iphmx.com. The zone is DNSSEC-signed and validates, publishes a DMARC policy and is reachable over IPv6. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

2 records 69ms

Nameserver	IP addresses	PTR	ASN / ISP
ignacio.ns.cloudflare.com	108.162.195.82 162.159.44.82 172.64.35.82 2606:4700:58::a29f:2c52 2803:f800:50::6ca2:c352 2a06:98c1:50::ac40:2352	ignacio.ns.cloudflare.com ignacio.ns.cloudflare.com ignacio.ns.cloudflare.com ignacio.ns.cloudflare.com ignacio.ns.cloudflare.com ignacio.ns.cloudflare.com	AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc.
tess.ns.cloudflare.com	108.162.192.227 172.64.32.227 173.245.58.227 2606:4700:50::adf5:3ae3 2803:f800:50::6ca2:c0e3 2a06:98c1:50::ac40:20e3	tess.ns.cloudflare.com tess.ns.cloudflare.com tess.ns.cloudflare.com tess.ns.cloudflare.com tess.ns.cloudflare.com tess.ns.cloudflare.com	AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc.

🌍 A Records#

2 records 49ms

IP	TTL	PTR	ASN	ISP / Org	CIDR	Country	City
104.20.46.78	300s	—	AS13335	Cloudflare, Inc.	104.20.0.0/18	—	—
172.66.145.65	300s	—	AS13335	Cloudflare, Inc.	172.66.128.0/19	—	—

📧 MX Records#

2 records 52ms

Priority	TTL	Mail Server	IP addresses	PTR	ASN
10	300s	mx1.aal.c3s2.iphmx.com	68.232.151.114 68.232.151.114 68.232.152.96 68.232.152.96	114.151.232.68.in-addr.arpa.c3s2.iphmx.com esa2.aal.c3s2.iphmx.com 96.152.232.68.in-addr.arpa.c3s2.iphmx.com esa1.aal.c3s2.iphmx.com	AS30238 Cisco Systems Ironport Division AS30238 Cisco Systems Ironport Division AS30238 Cisco Systems Ironport Division AS30238 Cisco Systems Ironport Division
20	300s	mx2.aal.c3s2.iphmx.com	68.232.151.114 68.232.151.114 68.232.152.96 68.232.152.96	114.151.232.68.in-addr.arpa.c3s2.iphmx.com esa2.aal.c3s2.iphmx.com 96.152.232.68.in-addr.arpa.c3s2.iphmx.com esa1.aal.c3s2.iphmx.com	AS30238 Cisco Systems Ironport Division AS30238 Cisco Systems Ironport Division AS30238 Cisco Systems Ironport Division AS30238 Cisco Systems Ironport Division

📧 Autodiscover / Autoconfig#

Service	CNAME / IP
🔷 Autodiscover	89.39.123.8

🔷 AAAA Records (IPv6)#

2 records 71ms

IPv6 Address	TTL	PTR	ASN	ISP / Org	CIDR	Country	City
2606:4700:10::6814:2e4e	300s	—	AS13335	Cloudflare, Inc.	2606:4700:0:0:0:0:0:0/41	—	—
2606:4700:10::ac42:9141	300s	—	AS13335	Cloudflare, Inc.	2606:4700:0:0:0:0:0:0/41	—	—

🔐 HTTPS Records#

1 records 67ms

Priority	Target	SvcParams
1 service	.	alpn="h2" ipv4hint=104.20.46.78,172.66.145.65 ipv6hint=2606:4700:10::6814:2e4e,2606:4700:10::ac42:9141

🔌 SRV Records#

1 records 145ms

Service	Priority	Weight	Port	Target
_sipfederationtls._tcp	100	1	5061	sipfed.online.lync.com

📝 TXT Records#

6 records 279ms

TXT Record
duo_sso_verification=L4LudD8Vunyd7ugNU0utEhXmrdSht4QOSXJsVq3VSeVpD25rLqfcAftuBn4XyI4l
google-site-verification=W9fneG_vKZy25sQ4JGFgdXo1df6h35s_dUxioDAw19I
mandrill_verify.zhtOxRXV1CtoBco9FM9ynQ
MS=ms24199657
openai-domain-verification=dv-uG5nOPw7TJjHZH2cyWMsDCOw
v=spf1 a mx ip4:68.232.151.114 ip4:68.232.152.96 ip4:193.242.107.229 ip4:194.88.216.203 ip4:167.86.94.251 ip4:89.39.123.8 ip4:168.245.70.104 include:spf.mandrillapp.com a:cpost.timeplan-software.net ip4:144.91.73.106 ip4:89.39.123.16 ip4:89.39.123.5 include:send.heyloyalty.com include:spf.protection.outlook.com -all

✉️ SPF#

Policy	Record (aal.dk)
-all (hard fail)	v=spf1 a mx ip4:68.232.151.114 ip4:68.232.152.96 ip4:193.242.107.229 ip4:194.88.216.203 ip4:167.86.94.251 ip4:89.39.123.8 ip4:168.245.70.104 include:spf.mandrillapp.com a:cpost.timeplan-software.net ip4:144.91.73.106 ip4:89.39.123.16 ip4:89.39.123.5 include:send.heyloyalty.com include:spf.protection.outlook.com -all

📨 DMARC#

Policy	Record (_dmarc.aal.dk)
p=reject	v=DMARC1;p=reject;pct=100;rua=mailto:6762232dd8a94ad285e4d902d54db15a@dmarc-reports.cloudflare.net;ri=86400;aspf=r;adkim=r;fo=1

📬 MTA-STS#

354ms

Check	Result
Status	🧪 Testing
TXT record (_mta-sts)	✓ Found
HTTPS policy	✓ Valid
Mode	testing
Policy ID	20240108T112806
max_age	31449600s
Policy MX	mx1.aal.c3s2.iphmx.com, mx2.aal.c3s2.iphmx.com

📈 TLSRPT#

Status	Report address (rua)
✓ Enabled	mailto:7b2f73c42e@tls.easydmarc.com

📜 CAA Records#

✗ No CAA records — any CA may issue certificates

🧩 Web & zone#

latest probe, not this scan · checked 2026-10-16 01:06:09

www	104.20.46.78 172.66.145.65 2606:4700:10::6814:2e4e 2606:4700:10::ac42:9141 (AS13335) (address records, no CNAME)
www vs bare domain	Same network aal.dk: 104.20.46.78 172.66.145.65 2606:4700:10::6814:2e4e 2606:4700:10::ac42:9141 (AS13335) www.aal.dk: 104.20.46.78 172.66.145.65 2606:4700:10::6814:2e4e 2606:4700:10::ac42:9141 (AS13335)
Wildcard	No
Denial of existence	Compact NSEC (RFC 9824, "black lies") not walkable
CDS / CDNSKEY	Published: key rollovers can be automated with the registry (RFC 7344/8078) 1 CDS, 1 CDNSKEY
BIMI	v=BIMI1;l=https://aal.dk/Files/Files/IT/BIMI/AAL-BIMI_2022_12.svg;a=

✍️ DKIM keys#

1 found

Selector	CNAME	Key
s1	—	RSA · ~2048 bit

DKIM selectors can't be listed, so we check the common ones (Microsoft 365, Google, Mailchimp, SendGrid, generic). Keys under other selectors aren't shown.

🔎 SPF check#

zone-wide SPF report

DNS lookups: 6/10 · policy: -all

No problems found

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

159ms

Check	Result
Validation Status	🔒 Secure
AD Flag (resolver validates)	✓ Set
DS Record	✓ Found
DNSKEY Record	✓ Found
Flags	fully validated

🏷️ SOA#

63ms

Field	Value
Serial	2412459258
Primary NS (MNAME)	ignacio.ns.cloudflare.com
Responsible (RNAME)	dns@cloudflare.com
Refresh	10000s
Retry	2400s
Expire	604800s
Minimum (neg-cache TTL)	1800s

📋 Registration#

WHOIS fetched 2026-10-11 18:42:19

Field	Value
Registrar	Punktum dk A/S (direct)
Registered	1996-11-21
Expires	2035-12-31 (3362d)

🔗 Same registrant#

4 domains

Other .dk domains whose WHOIS registrant has the same name and postal address. Matched on a keyed hash: the registrant's details are not stored or shown. Covers only domains whose WHOIS we have fetched (refreshed about monthly).

Domain	Registrar
aalborg-airport.dk	Punktum dk A/S (direct)
aalit.dk	Punktum dk A/S (direct)
crewaal.dk	Punktum dk A/S (direct)
totalyndlingslufthavn.dk	Punktum dk A/S (direct)

📋 WHOIS#

⏱️ Lookup Timing#

69ms

49ms

52ms

AAAA

71ms

TXT

279ms

CAA

67ms

HTTPS

67ms

TLSA

111ms

SOA

63ms

MTA-STS

354ms

DNSSEC

159ms

SRV

145ms

Total

17894ms

🕐 Scan History#

Scanned At	Duration	Records	DNSSEC
2026-10-16 01:06:09	2618ms	2 NS 2 A 2 MX	🔒 Secure
2026-10-11 18:17:35	3151ms	2 NS 2 A 2 MX	🔒 Secure
2026-09-28 01:43:16	1488ms	2 NS 2 A 2 MX	🔒 Secure
2026-09-27 01:27:08	1929ms	2 NS 2 A 2 MX	🔒 Secure
2026-09-25 00:47:31	2597ms	2 NS 2 A 2 MX	🔒 Secure
2026-09-19 03:06:45	1477ms	2 NS 2 A 2 MX	🔒 Secure
2026-09-18 07:25:12	2368ms	2 NS 2 A 2 MX	🔒 Secure
2026-09-12 14:50:54	10115ms	2 NS 2 A 2 MX	🔒 Secure
2026-08-24 13:39:18	10269ms	2 NS 2 A 2 MX	🔒 Secure
2026-08-20 08:50:55 shown	17894ms	2 NS 2 A 2 MX	🔒 Secure
2026-08-19 05:22:53	1614ms	2 NS 2 A 2 MX	🔒 Secure
2026-08-07 17:24:41	2168ms	2 NS 2 A 2 MX	🔒 Secure
2026-07-08 20:43:17	2783ms	2 NS 2 A 2 MX	🔒 Secure
2026-06-21 08:59:13	2016ms	2 NS 2 A 2 MX	🔒 Secure
2026-06-16 13:16:05	1521ms	2 NS 2 A 2 MX	🔒 Secure