bestilvin.dk

📜 Historical scan 2026-06-16 14:24:07 · ← Latest scan

⬇ Zone File 📜 Timeline & History ⚡ Scan Now

bestilvin.dk is a .dk domain served by 2 nameservers (ns01.one.com, ns02.one.com). It was registered on 2 November 2004 (WHOIS) and was already in the .dk zone when our tracking began on 16 June 2026. Its website address 35.214.247.43 is hosted by Google Ireland Limited (AS43515) in The Netherlands. Mail is handled by smtp18.msoutlookonline.net. The zone is DNSSEC-signed and validates, has no DMARC policy and has no IPv6 address. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

2 records 48ms

Nameserver	IP addresses	PTR	ASN / ISP
ns01.one.com	—	—	—
ns02.one.com	—	—	—

🌍 A Records#

1 records 53ms

IP	TTL	PTR	ASN	ISP / Org	CIDR	Country	City
35.214.247.43	—	43.247.214.35.bc.googleusercontent.com	AS43515	Google Ireland Limited	35.214.128.0/17	🇳🇱 The Netherlands	—

📧 MX Records#

1 records 51ms

Priority	TTL	Mail Server	IP addresses	PTR	ASN
10	—	smtp18.msoutlookonline.net	162.216.194.250 64.78.32.76	east.smtp.exch084.serverdata.net west.smtp.mx.exch084.serverdata.net	AS16406 Intermedia.net, Inc. AS16406 Intermedia.net, Inc.

🔷 AAAA Records (IPv6)#

✗ No AAAA records — IPv6 not configured

🔐 HTTPS Records#

✗ No HTTPS RR — no SVCB/HTTPS service binding

📝 TXT Records#

1 records 2163ms

TXT Record
v=spf1 mx ?all

✉️ SPF#

Policy	Record (bestilvin.dk)
?all (neutral)	v=spf1 mx ?all

📨 DMARC#

✗ No DMARC record — mail spoofing not restricted

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

✗ No CAA records — any CA may issue certificates

🧩 Web & zone#

latest probe, not this scan · checked 2026-10-04 20:08:46

www CNAME	bestilvin.dk (all on bestilvin.dk)
Wildcard	Yes: any name under the zone resolves
CDS / CDNSKEY	None 0 CDS, 0 CDNSKEY

🔎 SPF check#

zone-wide SPF report

DNS lookups: 1/10 · policy: ?all

warn "?all" is neutral: it gives receivers no guidance, much like having no SPF

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

141ms

Check	Result
Validation Status	🔒 Secure
AD Flag (resolver validates)	✓ Set
DS Record	✓ Found
DNSKEY Record	✓ Found
Flags	fully validated

🏷️ SOA#

48ms

Field	Value
Serial	2026032501
Primary NS (MNAME)	ns01.one.com
Responsible (RNAME)	hostmaster@one.com
Refresh	14400s
Retry	3600s
Expire	1209600s
Minimum (neg-cache TTL)	600s

📋 Registration#

WHOIS fetched 2026-10-04 20:45:19

Field	Value
Registrar	Punktum dk A/S (direct)
Registered	2004-11-02
Expires	2026-11-30 (44d)

📋 WHOIS#

⏱️ Lookup Timing#

48ms

53ms

51ms

AAAA

48ms

TXT

2163ms

CAA

52ms

HTTPS

44ms

TLSA

60ms

SOA

48ms

MTA-STS

92ms

DNSSEC

141ms

SRV

0ms

Total

2504ms

🕐 Scan History#

Scanned At	Duration	Records	DNSSEC
2026-10-04 20:08:46	2637ms	2 NS 1 A 1 MX	🔒 Secure
2026-09-29 19:44:21	1317ms	2 NS 1 A 1 MX	🔒 Secure
2026-09-28 20:24:07	2057ms	2 NS 1 A 1 MX	🔒 Secure
2026-09-22 05:46:54	1665ms	2 NS 1 A 1 MX	🔒 Secure
2026-09-10 18:31:55	5774ms	2 NS 1 A 1 MX	🔒 Secure
2026-07-02 00:19:51	1342ms	2 NS 1 A 1 MX	🔒 Secure
2026-06-16 14:24:07 shown	2504ms	2 NS 1 A 1 MX	🔒 Secure