bag.dk

📜 Historical scan 2026-06-16 14:01:13  ·  ← Latest scan
⬇ Zone File 📜 Timeline & History ⚡ Scan Now

bag.dk is a .dk domain served by 2 nameservers (elsa.ns.cloudflare.com, roan.ns.cloudflare.com). It was registered on 16 April 1999 (WHOIS) and was already in the .dk zone when our tracking began on 16 June 2026. Its website address 104.26.12.249 is hosted by Cloudflare, Inc. (AS13335). Mail is handled by bag-dk.mail.protection.outlook.com. The zone is not DNSSEC-signed, publishes a DMARC policy and is reachable over IPv6. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

2 records   30ms
NameserverIP addressesPTRASN / ISP
elsa.ns.cloudflare.com — — —
roan.ns.cloudflare.com — — —

🌍 A Records#

3 records   34ms
IPTTLPTRASNISP / OrgCIDRCountryCity
104.26.12.249 — — AS13335 Cloudflare, Inc. 104.26.0.0/20 — —
104.26.13.249 — — AS13335 Cloudflare, Inc. 104.26.0.0/20 — —
172.67.68.22 — — AS13335 Cloudflare, Inc. 172.67.64.0/18 — —

📧 MX Records#

1 records   39ms
PriorityTTLMail ServerIP addressesPTRASN
10 — bag-dk.mail.protection.outlook.com 52.101.68.8
52.101.73.11
52.101.73.19
52.101.73.26		 mail-du0pr03cu00100.inbound.protection.outlook.com
mail-am1pr04cu00103.inbound.protection.outlook.com
mail-as8pr04cu00803.inbound.protection.outlook.com
mail-as9pr05cu01302.inbound.protection.outlook.com		 AS8075 Microsoft Corporation
AS8075 Microsoft Corporation
AS8075 Microsoft Corporation
AS8075 Microsoft Corporation

🔷 AAAA Records (IPv6)#

3 records   72ms
IPv6 AddressTTLPTRASNISP / OrgCIDRCountryCity
2606:4700:20::681a:cf9 — — AS13335 Cloudflare, Inc. 2606:4700:20:0:0:0:0:0/44 — —
2606:4700:20::681a:df9 — — AS13335 Cloudflare, Inc. 2606:4700:20:0:0:0:0:0/44 — —
2606:4700:20::ac43:4416 — — AS13335 Cloudflare, Inc. 2606:4700:20:0:0:0:0:0/44 — —

🔐 HTTPS Records#

1 records   31ms
PriorityTargetSvcParams
1 service . alpn="h3,h2" ipv4hint=104.26.12.249,104.26.13.249,172.67.68.22 ipv6hint=2606:4700:20::681a:cf9,2606:4700:20::681a:df9,2606:4700:20::ac43:4416

📝 TXT Records#

8 records   2131ms
TXT Record
5Fq8asJC71tx0javjCZT8mtOrXMFkAqrqsxMBRU5HoQSN1rHOyhmUuxbA64qbhz/iWiCFz3K38RoAgQjhN5Gjw==
cisco-ci-domain-verification=595e6ef3a13314f4936ca2bdde4ea679ceb37e327ffcc76083489bd197c4cd1d
facebook-domain-verification=wotaiclkienoj3u2pfifdvf1grrv79
google-site-verification=MqBmSuoj9TrOq-lArRbm3rCM6XqswPjTeWSr3bHzsBQ
MS=ms21099432
OT8sLj0GATuij30x8vQHFXaA483T+IqlMGI3zWoKqQqKTWgVm+n0oEbDdSpyoXxUTn2iHAxMTVQT5jC06kjxQw==
URL/URL path to exclude:bag.dk and all subdomains) time period of domain ownership:1999-04-16 and on going time period to exclude: 2016-03-03 to 2022-03-03
v=spf1 include:spf.zitcom.dk include:musvc.com include:customerspf.sitecore.net include:spf.protection.outlook.com ip4:194.255.39.34 include:amazonses.com -all

✉️ SPF#

PolicyRecord (bag.dk)
-all (hard fail) v=spf1 include:spf.zitcom.dk include:musvc.com include:customerspf.sitecore.net include:spf.protection.outlook.com ip4:194.255.39.34 include:amazonses.com -all

📨 DMARC#

PolicyRecord (_dmarc.bag.dk)
p=none (monitor only) v=DMARC1; p=none; rua=mailto:633c00dc7e5f7@dmarc.centerasecurity.com; ruf=mailto:dmarcforensics@nc.dk; fo=1;

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

14 records   28ms
FlagsTagValue
0 issue amazon.com
0 issue amazonca.com
0 issue comodoca.com
0 issue digicert.com; cansignhttpexchanges=yes
0 issue letsencrypt.org
0 issue pki.goog; cansignhttpexchanges=yes
0 issue ssl.com
0 issuewild amazon.com
0 issuewild amazonca.com
0 issuewild comodoca.com
0 issuewild digicert.com; cansignhttpexchanges=yes
0 issuewild letsencrypt.org
0 issuewild pki.goog; cansignhttpexchanges=yes
0 issuewild ssl.com

🧩 Web & zone#

latest probe, not this scan · checked 2026-10-08 10:53:00
www104.26.12.249 104.26.13.249 172.67.68.22 2606:4700:20::681a:cf9 2606:4700:20::681a:df9 2606:4700:20::ac43:4416 (AS13335) (address records, no CNAME)
www vs bare domainSame network
WildcardNo

✍️ DKIM keys#

1 found
SelectorCNAMEKey
selector1 selector1-bag-dk._domainkey.ncgdk.onmicrosoft.com RSA · ~1024 bit below 2048 bit

DKIM selectors can't be listed, so we check the common ones (Microsoft 365, Google, Mailchimp, SendGrid, generic). Keys under other selectors aren't shown.

🔎 SPF check#

zone-wide SPF report

DNS lookups: 8/10 · policy: -all

  • warn 8 of the 10 allowed DNS lookups used: one more include can break SPF

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

108ms
CheckResult
Validation Status🔓 Insecure
AD Flag (resolver validates)✗ Not set
DS Record✗ Not found
DNSKEY Record✗ Not found
Flagsunsigned answer

🏷️ SOA#

30ms
FieldValue
Serial2406643686
Primary NS (MNAME)elsa.ns.cloudflare.com
Responsible (RNAME)dns@cloudflare.com
Refresh10000s
Retry2400s
Expire604800s
Minimum (neg-cache TTL)1800s

📋 Registration#

WHOIS fetched 2026-09-04 22:21:53
FieldValue
RegistrarEurodns S.A
Registered1999-04-16
Expires2027-06-30 (256d)
📋 WHOIS#

⏱️ Lookup Timing#

NS
30ms
A
34ms
MX
39ms
AAAA
72ms
TXT
2131ms
CAA
28ms
HTTPS
31ms
TLSA
1135ms
SOA
30ms
MTA-STS
79ms
DNSSEC
108ms
SRV
0ms
Total
4510ms

🕐 Scan History#

Scanned AtDurationRecordsDNSSEC
2026-10-02 07:06:26 1205ms 2 NS 3 A 1 MX 🔓 Insecure
2026-09-27 06:12:16 1369ms 2 NS 3 A 1 MX 🔓 Insecure
2026-09-09 03:21:29 2312ms 2 NS 3 A 1 MX 🔓 Insecure
2026-09-04 22:21:02 1938ms 2 NS 3 A 1 MX 🔓 Insecure
2026-08-27 18:36:58 1133ms 2 NS 3 A 1 MX 🔓 Insecure
2026-08-07 19:29:09 4040ms 2 NS 3 A 1 MX 🔓 Insecure
2026-07-23 21:17:59 9473ms 2 NS 3 A 1 MX 🔓 Insecure
2026-07-13 13:08:05 4152ms 2 NS 3 A 1 MX 🔓 Insecure
2026-07-08 23:52:01 1748ms 2 NS 3 A 1 MX 🔓 Insecure
2026-06-25 19:05:29 960ms 2 NS 3 A 1 MX 🔓 Insecure
2026-06-24 20:24:04 3073ms 2 NS 3 A 1 MX 🔓 Insecure
2026-06-16 14:01:13 shown 4510ms 2 NS 3 A 1 MX 🔓 Insecure
dhd.dk [/] search Domains, Hosts & DNS — .dk zone