ciff.dk is a .dk domain served by 4 nameservers (ns1-01.azure-dns.com, ns2-01.azure-dns.net, ns3-01.azure-dns.org and 1 more). It was already in the .dk zone when our tracking began on 16 June 2026. Its website address 76.76.21.21 is hosted by Amazon.com, Inc. (AS16509) in United States. Mail is handled by ciff-dk.mail.protection.outlook.com. The zone is DNSSEC-signed and validates, publishes a DMARC policy and has no IPv6 address. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.
| Nameserver | IP addresses | PTR | ASN / ISP |
|---|---|---|---|
| ns1-01.azure-dns.com | — | — | — |
| ns2-01.azure-dns.net | — | — | — |
| ns3-01.azure-dns.org | — | — | — |
| ns4-01.azure-dns.info | — | — | — |
| IP | TTL | PTR | ASN | ISP / Org | CIDR | Country | City |
|---|---|---|---|---|---|---|---|
| 76.76.21.21 | — | — | AS16509 | Amazon.com, Inc. | 76.76.21.0/24 | 🇺🇸 United States | Walnut |
| TXT Record |
|---|
| 0hvhrv100cf273n7mk4h58nh2rm8y7x3 |
| 4q030sc1q8h9l8ymkpxffd9b2zhq1z0t |
| google-site-verification=_DMkGgGf9qi-kl5GFKB-XKktMOlgwV_Iq1fHe7oDyEw |
| jFkSt5CZiK7XoR53ao00vbqrIIN1jHTcsGNUtWzzv5kZxF8cBApU+hRP1d629uwDdnu1IQNXxCtatqt39ElsdA== |
| MS=ms19722913 |
| v=spf1 include:_spf66410.spf-protect.dk -all |
| Policy | Record (ciff.dk) |
|---|---|
| -all (hard fail) | v=spf1 include:_spf66410.spf-protect.dk -all |
| Policy | Record (_dmarc.ciff.dk) |
|---|---|
| p=reject | v=DMARC1; p=reject; sp=reject; rua=mailto:659fbc9728e74@dmarc-dk.centerasecurity.com; |
| www CNAME | ciff.dk (all on ciff.dk) → 76.76.21.21 (AS16509) |
| www vs bare domain | Same network |
| Wildcard | No |
| Denial of existence | Compact NSEC (RFC 9824, "black lies") not walkable |
| CDS / CDNSKEY | None 0 CDS, 0 CDNSKEY |
| Selector | CNAME | Key |
|---|---|---|
| k1 | dkim.mcsv.net | RSA · ~1024 bit below 2048 bit |
| s1 | s1.domainkey.u21790276.wl027.sendgrid.net | RSA · ~2048 bit |
| s2 | s2.domainkey.u21790276.wl027.sendgrid.net | RSA · ~2048 bit |
| selector1 | selector1-ciff-dk._domainkey.bchospitalitygroup.onmicrosoft.com | RSA · ~1024 bit below 2048 bit |
DKIM selectors can't be listed, so we check the common ones (Microsoft 365, Google, Mailchimp, SendGrid, generic). Keys under other selectors aren't shown.
DNS lookups: 2/10 · policy: -all
No problems found| Check | Result |
|---|---|
| Validation Status | 🔒 Secure |
| AD Flag (resolver validates) | ✓ Set |
| DS Record | ✓ Found |
| DNSKEY Record | ✓ Found |
| Flags | fully validated |
| Field | Value |
|---|---|
| Serial | 76 |
| Primary NS (MNAME) | ns1-01.azure-dns.com |
| Responsible (RNAME) | dns@bellacenter.dk |
| Refresh | 900s |
| Retry | 600s |
| Expire | 1209600s |
| Minimum (neg-cache TTL) | 900s |
| Scanned At | Duration | Records | DNSSEC |
|---|---|---|---|
| 2026-09-28 07:07:00 | 879ms | 4 NS 1 A 1 MX | 🔒 Secure |
| 2026-09-16 20:04:51 | 3186ms | 4 NS 1 A 1 MX | 🔒 Secure |
| 2026-08-26 19:27:06 | 1227ms | 4 NS 1 A 1 MX | 🔒 Secure |
| 2026-06-22 14:55:49 | 1341ms | 4 NS 1 A 1 MX | 🔒 Secure |
| 2026-06-22 13:39:29 | 1007ms | 0 NS 0 A 0 MX | ❓ Unknown |
| 2026-06-16 20:50:04 shown | 669ms | 4 NS 1 A 1 MX | 🔒 Secure |