bhi.dk

📜 Historical scan 2026-06-19 20:25:30 · ← Latest scan

⬇ Zone File 📜 Timeline & History ⚡ Scan Now

bhi.dk is a .dk domain served by 2 nameservers (ns.wannafind.dk, ns2.wannafind.dk). It was already in the .dk zone when our tracking began on 16 June 2026. Its website address 185.21.40.107 is hosted by team.blue Denmark A/S (AS48854) in Denmark. Mail is handled by bhi-dk.mx1.comendosystems.com, bhi-dk.mx2.comendosystems.net and 1 more. The zone is DNSSEC-signed and validates, publishes a DMARC policy and has no IPv6 address. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

2 records 51ms

Nameserver	IP addresses	PTR	ASN / ISP
ns.wannafind.dk	185.25.141.6 2a02:2339:4006:103:1c:3f6d:daba:dee	ns1.wannafind.dk ns1.wannafind.dk	AS48854 team.blue Denmark A/S AS48854 team.blue Denmark A/S
ns2.wannafind.dk	2a02:2339:1:104::daba:daa 91.197.248.69	ns2.wannafind.dk ns2.wannafind.dk	AS48854 team.blue Denmark A/S AS48854 team.blue Denmark A/S

🌍 A Records#

1 records 42ms

IP	TTL	PTR	ASN	ISP / Org	CIDR	Country	City
185.21.40.107	3600s	vm1057.enterprisecloud.nu	AS48854	team.blue Denmark A/S	185.21.40.0/22	🇩🇰 Denmark	—

📧 MX Records#

3 records 49ms

Priority	TTL	Mail Server	IP addresses	PTR	ASN
10	3600s	bhi-dk.mx1.comendosystems.com	192.162.219.255 2a01:77c0:1619:4102:a81b:80d0:e56c:edc0	mx41.electric.net gw2-1535.security.comendo.com	AS16509 Amazon.com, Inc. AS16509 Amazon.com, Inc.
20	3600s	bhi-dk.mx2.comendosystems.net	192.162.219.155	mx41.electric.net	AS16509 Amazon.com, Inc.
40	3600s	bhi-dk.mail.protection.outlook.com	2a01:111:f403:ca04::1 2a01:111:f403:ca04::9 2a01:111:f403:ca04::d 2a01:111:f403:ca09::3 52.101.68.29 52.101.73.1 52.101.73.11 52.101.73.12	mail-db7pr03cu00401.inbound.protection.outlook.com mail-db7pr03cu00601.inbound.protection.outlook.com mail-db6pr03cu00105.inbound.protection.outlook.com mail-am6pr04cu00303.inbound.protection.outlook.com mail-dbapr03cu00105.inbound.protection.outlook.com mail-am3pr04cu00501.inbound.protection.outlook.com mail-am1pr04cu00103.inbound.protection.outlook.com mail-am4pr0401cu00104.inbound.protection.outlook.com	AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation

📧 Autodiscover / Autoconfig#

Service	CNAME / IP
🔷 Autodiscover	autodiscover.outlook.com → 52.98.151.72
🔶 Autoconfig	185.21.40.107

🔷 AAAA Records (IPv6)#

✗ No AAAA records — IPv6 not configured

🔐 HTTPS Records#

✗ No HTTPS RR — no SVCB/HTTPS service binding

🔌 SRV Records#

1 records 322ms

Service	Priority	Weight	Port	Target
_sipfederationtls._tcp	100	1	5061	sipfed.online.lync.com

📝 TXT Records#

5 records 397ms

TXT Record
adobe-idp-site-verification=40ccce69f1eaf5d3bea5f26f0e1684949e36d43d18f2553ec61dcfa6bffa2dbf
QuoVadis=736af85a-9c8a-4e71-8f6a-3d32cf4e841a
QuoVadis=c5dfc164-16c2-4ba8-a41c-712147073a81
QuoVadis=e8062849-f692-4fb8-b472-3e8ddd41f552
v=spf1 include:17f7eykx8d.powerspf.com -all

✉️ SPF#

Policy	Record (bhi.dk)
-all (hard fail)	v=spf1 include:17f7eykx8d.powerspf.com -all

📨 DMARC#

Policy	Record (_dmarc.bhi.dk)
p=reject	v=DMARC1; p=reject; rua=mailto:bj6k3yrfya@rua.dmarc.bluebyte.dk; ruf=mailto:bj6k3yrfya@ruf.dmarc.bluebyte.dk; fo=0; t=n;

📬 MTA-STS#

472ms

Check	Result
Status	🧪 Testing
TXT record (_mta-sts)	✓ Found
HTTPS policy	✓ Valid
Mode	testing
Policy ID	20240610131055021408
max_age	86400s
Policy MX	bhi-dk.mail.protection.outlook.com, bhi-dk.mx1.comendosystems.com, bhi-dk.mx2.comendosystems.net

📈 TLSRPT#

Status	Report address (rua)
✓ Enabled	mailto:bj6k3yrfya@tls.dmarc.bluebyte.dk

📜 CAA Records#

✗ No CAA records — any CA may issue certificates

🧩 Web & zone#

latest probe, not this scan · checked 2026-10-07 15:45:14

www	185.21.40.107 (AS48854) (address records, no CNAME)
www vs bare domain	Same network bhi.dk: 185.21.40.107 (AS48854) www.bhi.dk: 185.21.40.107 (AS48854)
Wildcard	Yes: any name under the zone resolves
Denial of existence	NSEC3 · 1 iteration · 1-byte salt RFC 9276 recommends 0 iterations and no salt
CDS / CDNSKEY	None 0 CDS, 0 CDNSKEY

✍️ DKIM keys#

1 found

Selector	CNAME	Key
selector1	selector1-bhi-dk._domainkey.bhint.onmicrosoft.com	RSA · ~1024 bit below 2048 bit

DKIM selectors can't be listed, so we check the common ones (Microsoft 365, Google, Mailchimp, SendGrid, generic). Keys under other selectors aren't shown.

🔎 SPF check#

zone-wide SPF report

DNS lookups: 2/10 · policy: -all

No problems found

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

129ms

Check	Result
Validation Status	🔒 Secure
AD Flag (resolver validates)	✓ Set
DS Record	✓ Found
DNSKEY Record	✓ Found
Flags	fully validated

🏷️ SOA#

46ms

Field	Value
Serial	2025032801
Primary NS (MNAME)	ns.wannafind.dk
Responsible (RNAME)	hostmaster@wannafind.dk
Refresh	14400s
Retry	3600s
Expire	1209600s
Minimum (neg-cache TTL)	300s

📋 Registration#

✗ No registration data yet — queued for a WHOIS lookup

📋 WHOIS#

⏱️ Lookup Timing#

51ms

42ms

49ms

AAAA

52ms

TXT

397ms

CAA

49ms

HTTPS

48ms

TLSA

360ms

SOA

46ms

MTA-STS

472ms

DNSSEC

129ms

SRV

322ms

Total

1643ms

🕐 Scan History#

Scanned At	Duration	Records	DNSSEC
2026-10-07 15:45:14	1505ms	2 NS 1 A 3 MX	🔒 Secure
2026-10-03 07:07:12	1274ms	2 NS 1 A 3 MX	🔒 Secure
2026-08-27 16:40:33	1152ms	2 NS 1 A 3 MX	🔒 Secure
2026-06-26 00:56:12	1290ms	2 NS 1 A 3 MX	🔒 Secure
2026-06-19 20:25:30 shown	1643ms	2 NS 1 A 3 MX	🔒 Secure
2026-06-16 14:28:30	995ms	2 NS 1 A 3 MX	🔒 Secure