cag.dk

📜 Historical scan 2026-08-27 23:11:03 · ← Latest scan

cag.dk is a .dk domain served by 4 nameservers (ns1.simply.com, ns2.simply.com, ns3.simply.com and 1 more). Mail is handled by mx.simply.com. The zone is DNSSEC-signed and validates, has no DMARC policy and has no IPv6 address. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers

4 records 50ms

Nameserver	IP addresses	PTR	ASN / ISP
ns1.simply.com	2a02:2339:1:15c::4562:4562 91.197.248.78	ns1.simply.com ns1.simply.com	AS48854 team.blue Denmark A/S AS48854 team.blue Denmark A/S
ns2.simply.com	185.25.141.15 2a02:2339:4006:101::4562:4562	ns2.simply.com ns2.simply.com	AS48854 team.blue Denmark A/S AS48854 team.blue Denmark A/S
ns3.simply.com	91.197.248.79	ns3.simply.com	AS48854 team.blue Denmark A/S
ns4.simply.com	91.197.248.80	ns4.simply.com	AS48854 team.blue Denmark A/S

🌍 A Records

🌍

No A records found

📧 MX Records

1 records 35ms

Priority	TTL	Mail Server	IP addresses	PTR	ASN
10	3600s	mx.simply.com	94.231.106.20	mx.simply.com	AS48854 team.blue Denmark A/S

📧 Autodiscover / Autoconfig

Service	CNAME / IP
🔷 Autodiscover	185.20.205.57
🔶 Autoconfig	maildiscover.simply.com → 94.231.108.222

🔷 AAAA Records (IPv6)

✗ No AAAA records — IPv6 not configured

🔐 HTTPS Records

✗ No HTTPS RR — no SVCB/HTTPS service binding

🔌 SRV Records

1 records 63ms

Service	Priority	Weight	Port	Target
_autodiscover._tcp	10	10	443	maildiscover.simply.com

📝 TXT Records

1 records 152ms

TXT Record
v=spf1 include:spf.simply.com ?all

✉️ SPF

Policy	Record (cag.dk)
?all (neutral)	v=spf1 include:spf.simply.com ?all

📨 DMARC

✗ No DMARC record — mail spoofing not restricted

📬 MTA-STS

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records

✗ No CAA records — any CA may issue certificates

🧩 Web & zone

latest probe, not this scan · checked 2026-09-29 18:23:53

www CNAME	shops.myshopify.com (all on myshopify.com)
Wildcard	Yes: any name under the zone resolves
Denial of existence	NSEC zone can be walked (all names enumerable)
CDS / CDNSKEY	Published: key rollovers can be automated with the registry (RFC 7344/8078) 1 CDS, 1 CDNSKEY

🔎 SPF check

zone-wide SPF report

DNS lookups: 1/10 · policy: ?all

warn "?all" is neutral: it gives receivers no guidance, much like having no SPF

🔗 TLSA / DANE

2 records 54ms

Service / Owner	Type	Cert association
SMTP _25._tcp.mx.simply.com	DANE-EE · SPKI · SHA-256	A9D603AF4D7ED6B9246B4B68500CD6F2…
SMTP _25._tcp.mx.simply.com	DANE-EE · SPKI · SHA-256	97A3BA009F39C761BFFB6574340E8138…

🔐 DNSSEC

77ms

Check	Result
Validation Status	🔒 Secure
AD Flag (resolver validates)	✓ Set
DS Record	✓ Found
DNSKEY Record	✓ Found
Flags	resolution failed: ncache nxrrset

🏷️ SOA

0ms

Field	Value
Serial	2025110501
Primary NS (MNAME)	ns1.simply.com
Responsible (RNAME)	hostmaster@simply.com
Refresh	14400s
Retry	3600s
Expire	1209600s
Minimum (neg-cache TTL)	3600s

📋 Registration

✗ No registration data — collected automatically when SOA serial changes

📋 WHOIS

⏱️ Lookup Timing

50ms

51ms

35ms

AAAA

41ms

TXT

152ms

CAA

51ms

HTTPS

51ms

TLSA

54ms

SOA

0ms

MTA-STS

62ms

DNSSEC

77ms

SRV

63ms

Total

609ms

🕐 Scan History

Scanned At	Duration	Records	DNSSEC
2026-09-25 17:51:26	485ms	4 NS 0 A 1 MX	🔒 Secure
2026-09-13 05:07:06	424ms	4 NS 0 A 1 MX	🔒 Secure
2026-08-27 23:11:03 shown	609ms	4 NS 0 A 1 MX	🔒 Secure
2026-08-27 02:30:49	558ms	4 NS 0 A 1 MX	🔒 Secure
2026-06-27 07:49:47	1250ms	4 NS 0 A 1 MX	🔒 Secure
2026-06-23 13:06:01	583ms	4 NS 0 A 1 MX	🔒 Secure
2026-06-22 11:39:09	961ms	0 NS 0 A 0 MX	❓ Unknown
2026-06-20 14:52:46	709ms	4 NS 0 A 1 MX	🔒 Secure
2026-06-16 18:55:36	2296ms	4 NS 0 A 1 MX	🔒 Secure