capitalbolig.dk

📜 Historical scan 2026-06-16 19:15:16  ·  ← Latest scan
⬇ Zone File 📜 Timeline & History ⚡ Scan Now

capitalbolig.dk is a .dk domain served by 4 nameservers (ns1-07.azure-dns.com, ns2-07.azure-dns.net, ns3-07.azure-dns.org and 1 more). It was registered on 8 February 2016 (WHOIS) and was already in the .dk zone when our tracking began on 16 June 2026. Its website address 185.21.42.25 is hosted by team.blue Denmark A/S (AS48854) in Denmark. Mail is handled by capitalbolig-dk.mail.protection.outlook.com. The zone is not DNSSEC-signed, publishes a DMARC policy and has no IPv6 address. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

4 records   35ms
NameserverIP addressesPTRASN / ISP
ns1-07.azure-dns.com — — —
ns2-07.azure-dns.net — — —
ns3-07.azure-dns.org — — —
ns4-07.azure-dns.info — — —

🌍 A Records#

1 records   32ms

📧 MX Records#

1 records   34ms

🔷 AAAA Records (IPv6)#

✗ No AAAA records — IPv6 not configured

🔐 HTTPS Records#

✗ No HTTPS RR — no SVCB/HTTPS service binding

📝 TXT Records#

5 records   126ms
TXT Record
brevo-code:afd27f26bf9e7ddb36ce19704ccb1ebe
google-site-verification=8f4EtA8t_JxwGTB-eMtlwd6ynOJNCZJIPAptK-DYg1Y
MS=ms18202150
MS=ms59995820
v=spf1 include:spf.protection.outlook.com -all

✉️ SPF#

PolicyRecord (capitalbolig.dk)
-all (hard fail) v=spf1 include:spf.protection.outlook.com -all

📨 DMARC#

PolicyRecord (_dmarc.capitalbolig.dk)
p=reject v=DMARC1; p=reject; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

✗ No CAA records — any CA may issue certificates

🧩 Web & zone#

latest probe, not this scan · checked 2026-10-10 09:24:33
www185.21.42.25 (AS48854) (address records, no CNAME)
www vs bare domainSame network
capitalbolig.dk: 185.21.42.25 (AS48854)
www.capitalbolig.dk: 185.21.42.25 (AS48854)
WildcardYes: any name under the zone resolves
CDS / CDNSKEYNone 0 CDS, 0 CDNSKEY

✍️ DKIM keys#

1 found
SelectorCNAMEKey
mail — RSA · ~1024 bit below 2048 bit

DKIM selectors can't be listed, so we check the common ones (Microsoft 365, Google, Mailchimp, SendGrid, generic). Keys under other selectors aren't shown.

🔎 SPF check#

zone-wide SPF report

DNS lookups: 1/10 · policy: -all

No problems found

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

136ms
CheckResult
Validation Status🔓 Insecure
AD Flag (resolver validates)✗ Not set
DS Record✗ Not found
DNSKEY Record✗ Not found
Flagsunsigned answer

🏷️ SOA#

34ms
FieldValue
Serial1
Primary NS (MNAME)ns1-07.azure-dns.com
Responsible (RNAME)azuredns-hostmaster@microsoft.com
Refresh3600s
Retry300s
Expire2419200s
Minimum (neg-cache TTL)300s

📋 Registration#

WHOIS fetched 2026-10-08 14:02:30
FieldValue
RegistrarCSC Digital Brand Service, Inc
Registered2016-02-08
Expires2027-02-28 (126d)
📋 WHOIS#

⏱️ Lookup Timing#

NS
35ms
A
32ms
MX
34ms
AAAA
36ms
TXT
126ms
CAA
34ms
HTTPS
37ms
TLSA
108ms
SOA
34ms
MTA-STS
26ms
DNSSEC
136ms
SRV
0ms
Total
755ms

🕐 Scan History#

Scanned AtDurationRecordsDNSSEC
2026-09-30 21:33:37 2855ms 4 NS 1 A 1 MX 🔒 Secure
2026-09-15 23:29:58 1259ms 4 NS 1 A 1 MX 🔒 Secure
2026-09-09 18:28:09 1281ms 4 NS 1 A 1 MX 🔒 Secure
2026-08-27 05:03:40 826ms 4 NS 1 A 1 MX 🔒 Secure
2026-06-24 03:46:42 979ms 4 NS 1 A 1 MX 🔓 Insecure
2026-06-23 21:33:43 884ms 4 NS 1 A 1 MX 🔓 Insecure
2026-06-16 19:15:16 shown 755ms 4 NS 1 A 1 MX 🔓 Insecure
dhd.dk [/] search Domains, Hosts & DNS — .dk zone