caritas.dk is a .dk domain served by 4 nameservers (ns1.dotserv.com, ns1.dotserv.net, ns2.dotserv.com and 1 more). It was already in the .dk zone when our tracking began on 16 June 2026. Its website address 94.231.103.61 is hosted by team.blue Denmark A/S (AS48854) in Denmark. Mail is handled by eu-esec-01.heimdalsecurity.com, eu-esec-02.heimdalsecurity.com. The zone is not DNSSEC-signed, publishes a DMARC policy and has no IPv6 address. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.
| IP | TTL | PTR | ASN | ISP / Org | CIDR | Country | City |
|---|---|---|---|---|---|---|---|
| 94.231.103.61 | 3600s | linux67.unoeuro.com | AS48854 | team.blue Denmark A/S | 94.231.96.0/20 | 🇩🇰 Denmark | — |
| Service | CNAME / IP |
|---|---|
| 🔷 Autodiscover | autodiscover.outlook.com → 40.104.116.40 |
| 🔶 Autoconfig | 94.231.103.61 |
| Service | Priority | Weight | Port | Target |
|---|---|---|---|---|
| _sipfederationtls._tcp | 100 | 1 | 5061 | sipfed.online.lync.com |
| TXT Record |
|---|
| v=spf1 mx a ip4:217.157.148.18 include:spf.mandrillapp.com include:dedicated.mysmtp.com include:send.heyloyalty.com include:spf.protection.outlook.com a:sg-mail-gw.supportgruppen.dk a:v0071.dotserv.com ip4:93.90.117.1/24 ip4:93.90.115.1/24 include:_spf.sotea.dk include:web.shared.mysmtp.com -all |
| Policy | Record (caritas.dk) |
|---|---|
| -all (hard fail) | v=spf1 mx a ip4:217.157.148.18 include:spf.mandrillapp.com include:dedicated.mysmtp.com include:send.heyloyalty.com include:spf.protection.outlook.com a:sg-mail-gw.supportgruppen.dk a:v0071.dotserv.com ip4:93.90.117.1/24 ip4:93.90.115.1/24 include:_spf.sotea.dk include:web.shared.mysmtp.com -all |
| Policy | Record (_dmarc.caritas.dk) |
|---|---|
| p=reject | v=DMARC1; p=reject; |
| Flags | Tag | Value |
|---|---|---|
| 0 | issue | comodoca.com |
| 0 | issue | letsencrypt.org |
| www | 94.231.103.61 (AS48854) (address records, no CNAME) |
| www vs bare domain | Same network |
| Wildcard | Yes: any name under the zone resolves |
| Denial of existence | NSEC zone can be walked (all names enumerable) |
| CDS / CDNSKEY | None 0 CDS, 0 CDNSKEY |
| Selector | CNAME | Key |
|---|---|---|
| default | — | RSA · ~1024 bit below 2048 bit |
DKIM selectors can't be listed, so we check the common ones (Microsoft 365, Google, Mailchimp, SendGrid, generic). Keys under other selectors aren't shown.
DNS lookups: 16/10 · policy: -all
| Service / Owner | Type | Cert association |
|---|---|---|
| SMTP _25._tcp.eu-esec-01.heimdalsecurity.com | DANE-EE · SPKI · SHA-256 | 2E8933DD6DB99304A5A9D5C4ECDE7B8E… |
| SMTP _25._tcp.eu-esec-02.heimdalsecurity.com | DANE-EE · SPKI · SHA-256 | 2E8933DD6DB99304A5A9D5C4ECDE7B8E… |
| Check | Result |
|---|---|
| Validation Status | 🔓 Insecure |
| AD Flag (resolver validates) | ✗ Not set |
| DS Record | ✗ Not found |
| DNSKEY Record | ✓ Found |
| Flags | unsigned answer |
| Field | Value |
|---|---|
| Serial | 2021042200 |
| Primary NS (MNAME) | ns1.dotserv.com |
| Responsible (RNAME) | hostmaster@dotserv.com |
| Refresh | 14400s |
| Retry | 7200s |
| Expire | 1209600s |
| Minimum (neg-cache TTL) | 900s |
| Scanned At | Duration | Records | DNSSEC |
|---|---|---|---|
| 2026-09-19 13:28:10 | 2579ms | 4 NS 1 A 2 MX | 🔓 Insecure |
| 2026-06-24 16:52:37 shown | 841ms | 4 NS 1 A 2 MX | 🔓 Insecure |
| 2026-06-23 10:51:58 | 1183ms | 0 NS 0 A 0 MX | ❓ Unknown |
| 2026-06-20 07:14:04 | 1205ms | 4 NS 1 A 2 MX | 🔓 Insecure |
| 2026-06-16 19:39:58 | 65535ms | 4 NS 1 A 2 MX | 🔓 Insecure |
| 2026-06-16 19:26:27 | 2632ms | 4 NS 1 A 2 MX | 🔓 Insecure |