denlaw.dk

📜 Historical scan 2026-07-19 14:54:01 · ← Latest scan

⬇ Zone File 📜 Timeline & History ⚡ Scan Now

denlaw.dk is a .dk domain served by 3 nameservers (ns.nerdonline.dk, ns2.nerdonline.dk, ns3.nerdonline.dk). It was already in the .dk zone when our tracking began on 16 June 2026. Mail is handled by denlaw-dk.mail.protection.outlook.com. The zone is not DNSSEC-signed, publishes a DMARC policy and has no IPv6 address. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

3 records 44ms

Nameserver	IP addresses	PTR	ASN / ISP
ns.nerdonline.dk	167.233.0.169	mailgw1.nerdonline.dk	AS24940 Hetzner Online GmbH
ns2.nerdonline.dk	95.216.155.89	hel01.nerdonline.dk	AS24940 Hetzner Online GmbH
ns3.nerdonline.dk	167.233.0.167	ns3.nerdonline.dk	AS24940 Hetzner Online GmbH

🌍 A Records#

🌍

No A records found

📧 MX Records#

1 records 46ms

Priority	TTL	Mail Server	IP addresses	PTR	ASN
5	38400s	denlaw-dk.mail.protection.outlook.com	2a01:111:f403:ca04::c 2a01:111:f403:ca04::f 2a01:111:f403:ca09:: 2a01:111:f403:ca09::2 52.101.68.10 52.101.68.12 52.101.68.8 52.101.73.4	mail-db9pr02cu00204.inbound.protection.outlook.com mail-db7pr03cu00507.inbound.protection.outlook.com mail-am3pr04cu00500.inbound.protection.outlook.com mail-am0pr83cu00402.inbound.protection.outlook.com mail-dbbpr03cu00102.inbound.protection.outlook.com mail-db9pr02cu00204.inbound.protection.outlook.com mail-du0pr03cu00100.inbound.protection.outlook.com mail-am0pr83cu00404.inbound.protection.outlook.com	AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation

📧 Autodiscover / Autoconfig#

Service	CNAME / IP
🔷 Autodiscover	autodiscover.outlook.com → 40.104.116.56

🔷 AAAA Records (IPv6)#

✗ No AAAA records — IPv6 not configured

🔐 HTTPS Records#

✗ No HTTPS RR — no SVCB/HTTPS service binding

🔌 SRV Records#

1 records 2070ms

Service	Priority	Weight	Port	Target
_sipfederationtls._tcp	100	1	5061	sipfed.online.lync.com

📝 TXT Records#

2 records 321ms

TXT Record
MS=ms30773916
v=spf1 a mx ptr a:mailgw2.nerdonline.dk a:mailgw1.nerdonline.dk a:mailgw5.nerdonline.dk ip4:40.113.158.174 include:spf.protection.outlook.com ~all

✉️ SPF#

Policy	Record (denlaw.dk)
~all (soft fail)	v=spf1 a mx ptr a:mailgw2.nerdonline.dk a:mailgw1.nerdonline.dk a:mailgw5.nerdonline.dk ip4:40.113.158.174 include:spf.protection.outlook.com ~all

📨 DMARC#

Policy	Record (_dmarc.denlaw.dk)
p=none (monitor only)	v=DMARC1; pct=5; p=none; adkim=r; aspf=r

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

✗ No CAA records — any CA may issue certificates

🧩 Web & zone#

latest probe, not this scan · checked 2026-10-09 14:48:53

www CNAME	denlaw.dk (all on denlaw.dk) → 144.76.84.138 (AS24940)
www vs bare domain	Same network denlaw.dk: 144.76.84.138 (AS24940) www.denlaw.dk: 144.76.84.138 (AS24940)
Wildcard	No

✍️ DKIM keys#

1 found

Selector	CNAME	Key
selector1	selector1-denlaw-dk._domainkey.denlaw.onmicrosoft.com	RSA · ~1024 bit below 2048 bit

DKIM selectors can't be listed, so we check the common ones (Microsoft 365, Google, Mailchimp, SendGrid, generic). Keys under other selectors aren't shown.

🔎 SPF check#

zone-wide SPF report

DNS lookups: 7/10 · policy: ~all

warn "ptr" is slow, unreliable and discouraged (RFC 7208 §5.5)

🔏 ACME Challenge#

Type	Name	Value
TXT	_acme-challenge.denlaw.dk	ZVKHqNrsr1n1QZLxYHQsyQ0HpN4NMeaEdD_h-HNtxt0

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

9058ms

Check	Result
Validation Status	🔓 Insecure
AD Flag (resolver validates)	✗ Not set
DS Record	✗ Not found
DNSKEY Record	✗ Not found
Flags	unsigned answer

🏷️ SOA#

2025ms

Field	Value
Serial	1284372001
Primary NS (MNAME)	ns.nerdonline.dk
Responsible (RNAME)	hostmaster@nerdonline.dk
Refresh	10800s
Retry	3600s
Expire	604800s
Minimum (neg-cache TTL)	38400s

📋 Registration#

✗ No registration data yet — queued for a WHOIS lookup

📋 WHOIS#

⏱️ Lookup Timing#

44ms

4027ms

46ms

AAAA

46ms

TXT

321ms

CAA

2043ms

HTTPS

44ms

TLSA

742ms

SOA

2025ms

MTA-STS

2075ms

DNSSEC

9058ms

SRV

2070ms

Total

14752ms

🕐 Scan History#

Scanned At	Duration	Records	DNSSEC
2026-08-26 13:35:48	2684ms	3 NS 1 A 1 MX	🔓 Insecure
2026-07-19 14:54:01 shown	14752ms	3 NS 0 A 1 MX	🔓 Insecure
2026-06-28 06:11:38	1511ms	3 NS 1 A 1 MX	🔓 Insecure
2026-06-17 01:55:15	724ms	3 NS 1 A 1 MX	🔓 Insecure