bag.dk

📜 Historical scan 2026-08-27 18:36:58 · ← Latest scan

⬇ Zone File 📜 Timeline & History ⚡ Scan Now

bag.dk is a .dk domain served by 2 nameservers (elsa.ns.cloudflare.com, roan.ns.cloudflare.com). It was registered on 16 April 1999 (WHOIS) and was already in the .dk zone when our tracking began on 16 June 2026. Its website address 104.26.12.249 is hosted by Cloudflare, Inc. (AS13335). Mail is handled by bag-dk.mail.protection.outlook.com. The zone is not DNSSEC-signed, publishes a DMARC policy and is reachable over IPv6. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

2 records 67ms

Nameserver	IP addresses	PTR	ASN / ISP
elsa.ns.cloudflare.com	108.162.192.111 172.64.32.111 173.245.58.111 2606:4700:50::adf5:3a6f 2803:f800:50::6ca2:c06f 2a06:98c1:50::ac40:206f	elsa.ns.cloudflare.com elsa.ns.cloudflare.com elsa.ns.cloudflare.com elsa.ns.cloudflare.com elsa.ns.cloudflare.com elsa.ns.cloudflare.com	AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc.
roan.ns.cloudflare.com	108.162.193.226 172.64.33.226 173.245.59.226 2606:4700:58::adf5:3be2 2803:f800:50::6ca2:c1e2 2a06:98c1:50::ac40:21e2	roan.ns.cloudflare.com roan.ns.cloudflare.com roan.ns.cloudflare.com roan.ns.cloudflare.com roan.ns.cloudflare.com roan.ns.cloudflare.com	AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc.

🌍 A Records#

3 records 51ms

IP	TTL	PTR	ASN	ISP / Org	CIDR	Country	City
104.26.12.249	300s	—	AS13335	Cloudflare, Inc.	104.26.0.0/20	—	—
104.26.13.249	300s	—	AS13335	Cloudflare, Inc.	104.26.0.0/20	—	—
172.67.68.22	300s	—	AS13335	Cloudflare, Inc.	172.67.64.0/18	—	—

📧 MX Records#

1 records 76ms

Priority	TTL	Mail Server	IP addresses	PTR	ASN
10	300s	bag-dk.mail.protection.outlook.com	2a01:111:f403:ca04::b 2a01:111:f403:ca09::4 2a01:111:f403:ca09::a 2a01:111:f403:ca48::c 52.101.68.5 52.101.68.8 52.101.73.126 52.101.73.30	mail-dbbpr03cu00103.inbound.protection.outlook.com mail-am0pr04cu00504.inbound.protection.outlook.com mail-am7pr02cu00202.inbound.protection.outlook.com mail-miypr03cu00104.inbound.protection.outlook.com mail-du2pr03cu00105.inbound.protection.outlook.com mail-du0pr03cu00100.inbound.protection.outlook.com mail-am8pr83cu00106.inbound.protection.outlook.com mail-am7pr05cu00306.inbound.protection.outlook.com	AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation

📧 Autodiscover / Autoconfig#

Service	CNAME / IP
🔷 Autodiscover	autodiscover.outlook.com → 40.104.116.56

🔷 AAAA Records (IPv6)#

3 records 57ms

IPv6 Address	TTL	PTR	ASN	ISP / Org	CIDR	Country	City
2606:4700:20::681a:cf9	300s	—	AS13335	Cloudflare, Inc.	2606:4700:0:0:0:0:0:0/41	—	—
2606:4700:20::681a:df9	300s	—	AS13335	Cloudflare, Inc.	2606:4700:0:0:0:0:0:0/41	—	—
2606:4700:20::ac43:4416	300s	—	AS13335	Cloudflare, Inc.	2606:4700:0:0:0:0:0:0/41	—	—

🔐 HTTPS Records#

1 records 37ms

Priority	Target	SvcParams
1 service	.	alpn="h3,h2" ipv4hint=104.26.12.249,104.26.13.249,172.67.68.22 ipv6hint=2606:4700:20::681a:cf9,2606:4700:20::681a:df9,2606:4700:20::ac43:4416

📝 TXT Records#

8 records 200ms

TXT Record
5Fq8asJC71tx0javjCZT8mtOrXMFkAqrqsxMBRU5HoQSN1rHOyhmUuxbA64qbhz/iWiCFz3K38RoAgQjhN5Gjw==
cisco-ci-domain-verification=595e6ef3a13314f4936ca2bdde4ea679ceb37e327ffcc76083489bd197c4cd1d
facebook-domain-verification=wotaiclkienoj3u2pfifdvf1grrv79
google-site-verification=MqBmSuoj9TrOq-lArRbm3rCM6XqswPjTeWSr3bHzsBQ
MS=ms21099432
OT8sLj0GATuij30x8vQHFXaA483T+IqlMGI3zWoKqQqKTWgVm+n0oEbDdSpyoXxUTn2iHAxMTVQT5jC06kjxQw==
URL/URL path to exclude:bag.dk and all subdomains) time period of domain ownership:1999-04-16 and on going time period to exclude: 2016-03-03 to 2022-03-03
v=spf1 include:spf.zitcom.dk include:musvc.com include:customerspf.sitecore.net include:spf.protection.outlook.com ip4:194.255.39.34 include:amazonses.com -all

✉️ SPF#

Policy	Record (bag.dk)
-all (hard fail)	v=spf1 include:spf.zitcom.dk include:musvc.com include:customerspf.sitecore.net include:spf.protection.outlook.com ip4:194.255.39.34 include:amazonses.com -all

📨 DMARC#

Policy	Record (_dmarc.bag.dk)
p=none (monitor only)	v=DMARC1; p=none; rua=mailto:633c00dc7e5f7@dmarc.centerasecurity.com; ruf=mailto:dmarcforensics@nc.dk; fo=1;

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

14 records 59ms

Flags	Tag	Value
0	issue	amazon.com
0	issue	amazonca.com
0	issue	comodoca.com
0	issue	digicert.com; cansignhttpexchanges=yes
0	issue	letsencrypt.org
0	issue	pki.goog; cansignhttpexchanges=yes
0	issue	ssl.com
0	issuewild	amazon.com
0	issuewild	amazonca.com
0	issuewild	comodoca.com
0	issuewild	digicert.com; cansignhttpexchanges=yes
0	issuewild	letsencrypt.org
0	issuewild	pki.goog; cansignhttpexchanges=yes
0	issuewild	ssl.com

🧩 Web & zone#

latest probe, not this scan · checked 2026-10-08 10:53:00

www	104.26.12.249 104.26.13.249 172.67.68.22 2606:4700:20::681a:cf9 2606:4700:20::681a:df9 2606:4700:20::ac43:4416 (AS13335) (address records, no CNAME)
www vs bare domain	Same network bag.dk: 104.26.12.249 104.26.13.249 172.67.68.22 2606:4700:20::681a:cf9 (AS13335) www.bag.dk: 104.26.12.249 104.26.13.249 172.67.68.22 2606:4700:20::681a:cf9 (AS13335)
Wildcard	No

✍️ DKIM keys#

1 found

Selector	CNAME	Key
selector1	selector1-bag-dk._domainkey.ncgdk.onmicrosoft.com	RSA · ~1024 bit below 2048 bit

DKIM selectors can't be listed, so we check the common ones (Microsoft 365, Google, Mailchimp, SendGrid, generic). Keys under other selectors aren't shown.

🔎 SPF check#

zone-wide SPF report

DNS lookups: 8/10 · policy: -all

warn 8 of the 10 allowed DNS lookups used: one more include can break SPF

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

91ms

Check	Result
Validation Status	🔓 Insecure
AD Flag (resolver validates)	✗ Not set
DS Record	✗ Not found
DNSKEY Record	✗ Not found
Flags	unsigned answer

🏷️ SOA#

0ms

Field	Value
Serial	2411181225
Primary NS (MNAME)	elsa.ns.cloudflare.com
Responsible (RNAME)	dns@cloudflare.com
Refresh	10000s
Retry	2400s
Expire	604800s
Minimum (neg-cache TTL)	1800s

📋 Registration#

WHOIS fetched 2026-09-04 22:21:53

Field	Value
Registrar	Eurodns S.A
Registered	1999-04-16
Expires	2027-06-30 (256d)

📋 WHOIS#

⏱️ Lookup Timing#

67ms

51ms

76ms

AAAA

57ms

TXT

200ms

CAA

59ms

HTTPS

37ms

TLSA

194ms

SOA

0ms

MTA-STS

80ms

DNSSEC

91ms

SRV

91ms

Total

1133ms

🕐 Scan History#

Scanned At	Duration	Records	DNSSEC
2026-10-02 07:06:26	1205ms	2 NS 3 A 1 MX	🔓 Insecure
2026-09-27 06:12:16	1369ms	2 NS 3 A 1 MX	🔓 Insecure
2026-09-09 03:21:29	2312ms	2 NS 3 A 1 MX	🔓 Insecure
2026-09-04 22:21:02	1938ms	2 NS 3 A 1 MX	🔓 Insecure
2026-08-27 18:36:58 shown	1133ms	2 NS 3 A 1 MX	🔓 Insecure
2026-08-07 19:29:09	4040ms	2 NS 3 A 1 MX	🔓 Insecure
2026-07-23 21:17:59	9473ms	2 NS 3 A 1 MX	🔓 Insecure
2026-07-13 13:08:05	4152ms	2 NS 3 A 1 MX	🔓 Insecure
2026-07-08 23:52:01	1748ms	2 NS 3 A 1 MX	🔓 Insecure
2026-06-25 19:05:29	960ms	2 NS 3 A 1 MX	🔓 Insecure
2026-06-24 20:24:04	3073ms	2 NS 3 A 1 MX	🔓 Insecure
2026-06-16 14:01:13	4510ms	2 NS 3 A 1 MX	🔓 Insecure