agn.dk

Records from scan: 2026-09-30 04:51:47  ·  1115ms total  ·  last checked 2026-10-15 22:44 (unchanged)
⬇ Zone File 📜 Timeline & History ⚡ Scan Now

agn.dk is a .dk domain served by 4 nameservers (ns1-33.azure-dns.com, ns2-33.azure-dns.net, ns3-33.azure-dns.org and 1 more). It was already in the .dk zone when our tracking began on 16 June 2026. Its website address 134.122.71.223 is hosted by DigitalOcean, LLC (AS14061) in Germany. Mail is handled by agn-dk.mail.protection.outlook.com. The zone is not DNSSEC-signed, publishes a DMARC policy and has no IPv6 address. Below are all of its DNS records from our latest scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

4 records   40ms

🌍 A Records#

1 records   40ms

📧 MX Records#

1 records   42ms

📧 Autodiscover / Autoconfig#

ServiceCNAME / IP
🔷 Autodiscoverautodiscover.outlook.com → 52.98.149.136
🔶 Autoconfig134.122.71.223

🔷 AAAA Records (IPv6)#

✗ No AAAA records — IPv6 not configured

🔐 HTTPS Records#

✗ No HTTPS RR — no SVCB/HTTPS service binding

📝 TXT Records#

2 records   183ms
TXT Record
MS=ms67299311
v=spf1 a ip4:195.249.218.0/24 ip4:20.107.82.163/32 include:spf.protection.outlook.com include:cust-spf.exacttarget.com include:_spf.salesforce.com include:mail.zendesk.com include:dedicated.mysmtp.com ~all

✉️ SPF#

PolicyRecord (agn.dk)
~all (soft fail) v=spf1 a ip4:195.249.218.0/24 ip4:20.107.82.163/32 include:spf.protection.outlook.com include:cust-spf.exacttarget.com include:_spf.salesforce.com include:mail.zendesk.com include:dedicated.mysmtp.com ~all

📨 DMARC#

PolicyRecord (_dmarc.agn.dk)
p=quarantine v=DMARC1; p=quarantine; rua=mailto:tepx02da@ag.eu.dmarcadvisor.com; ruf=mailto:tepx02da@fr.eu.dmarcadvisor.com

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

✗ No CAA records — any CA may issue certificates

🧩 Web & zone#

checked 2026-10-11 11:03:23
www134.122.71.223 (AS14061) (address records, no CNAME)
www vs bare domainSame network
WildcardYes: any name under the zone resolves

✍️ DKIM keys#

3 found
SelectorCNAMEKey
s1 s1.domainkey.u33880552.wl053.sendgrid.net RSA · ~2048 bit
s2 s2.domainkey.u33880552.wl053.sendgrid.net RSA · ~2048 bit
selector1 selector1-agn-dk._domainkey.semler.onmicrosoft.com RSA · ~2048 bit

DKIM selectors can't be listed, so we check the common ones (Microsoft 365, Google, Mailchimp, SendGrid, generic). Keys under other selectors aren't shown.

🔎 SPF check#

zone-wide SPF report

DNS lookups: 10/10 · policy: ~all

  • warn 10 of the 10 allowed DNS lookups used: one more include can break SPF

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

64ms
CheckResult
Validation Status🔓 Insecure
AD Flag (resolver validates)✗ Not set
DS Record✗ Not found
DNSKEY Record✗ Not found
Flagsunsigned answer

🏷️ SOA#

0ms
FieldValue
Serial1
Primary NS (MNAME)ns1-33.azure-dns.com
Responsible (RNAME)azuredns-hostmaster@microsoft.com
Refresh3600s
Retry300s
Expire2419200s
Minimum (neg-cache TTL)300s

📋 Registration#

✗ No registration data yet — queued for a WHOIS lookup
📋 WHOIS#

⏱️ Lookup Timing#

NS
40ms
A
40ms
MX
42ms
AAAA
36ms
TXT
183ms
CAA
54ms
HTTPS
29ms
TLSA
611ms
SOA
0ms
MTA-STS
51ms
DNSSEC
64ms
SRV
73ms
Total
1115ms

🕐 Scan History#

Scanned AtDurationRecordsDNSSEC
2026-09-30 04:51:47 shown 1115ms 4 NS 1 A 1 MX 🔓 Insecure
2026-09-04 14:45:28 841ms 4 NS 1 A 1 MX 🔓 Insecure
2026-08-26 22:00:48 1090ms 4 NS 1 A 1 MX 🔓 Insecure
2026-08-16 19:59:13 2424ms 4 NS 1 A 1 MX 🔓 Insecure
2026-06-27 14:11:17 2313ms 4 NS 1 A 1 MX 🔓 Insecure
2026-06-26 13:00:15 6285ms 4 NS 1 A 1 MX 🔓 Insecure
2026-06-23 16:27:41 1180ms 0 NS 0 A 0 MX ❓ Unknown
2026-06-16 12:39:26 1049ms 4 NS 1 A 1 MX 🔓 Insecure
dhd.dk [/] search Domains, Hosts & DNS — .dk zone