dfff.dk

Records from scan: 2026-06-22 00:23:14 · 1203ms total · last checked 2026-10-24 12:23 (unchanged)

⬇ Zone File 📜 Timeline & History ⚡ Scan Now

dfff.dk is a .dk domain served by 4 nameservers (ns1-07.azure-dns.com, ns2-07.azure-dns.net, ns3-07.azure-dns.org and 1 more). It was already in the .dk zone when our tracking began on 16 June 2026. Its website address 195.249.85.116 is hosted by TDC Holding A/S (AS3292) in Denmark. Mail is handled by dfff-dk.mail.protection.outlook.com. The zone is not DNSSEC-signed, publishes a DMARC policy and has no IPv6 address. Below are all of its DNS records from our latest scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

4 records 143ms

Nameserver	IP addresses	PTR	ASN / ISP
ns1-07.azure-dns.com	13.107.236.7 2603:1061:0:700::7	ns1-07.azure-dns.com ns1-07.azure-dns.com	AS8075 Microsoft Corporation AS8075 Microsoft Corporation
ns2-07.azure-dns.net	150.171.21.7 2620:1ec:8ec:700::7	ns2-07.azure-dns.net ns2-07.azure-dns.net	AS8075 Microsoft Corporation AS8075 Microsoft Corporation
ns3-07.azure-dns.org	204.14.183.7 2a01:111:4000:700::7	ns3-07.azure-dns.org ns3-07.azure-dns.org	AS8075 Microsoft Corporation AS8075 Microsoft Corporation
ns4-07.azure-dns.info	208.84.5.7 2620:1ec:bda:700::7	ns4-07.azure-dns.info ns4-07.azure-dns.info	AS8075 Microsoft Corporation AS8075 Microsoft Corporation

🌍 A Records#

1 records 180ms

IP	TTL	PTR	ASN	ISP / Org	CIDR	Country	City
195.249.85.116	3600s	olf.dk.85.249.195.in-addr.arpa	AS3292	TDC Holding A/S	195.249.0.0/16	🇩🇰 Denmark	Rødovre Municipality

📧 MX Records#

1 records 138ms

Priority	TTL	Mail Server	IP addresses	PTR	ASN
0	3600s	dfff-dk.mail.protection.outlook.com	2a01:111:f403:ca04::1 2a01:111:f403:ca09:: 2a01:111:f403:ca09::2 2a01:111:f403:ca09::e 52.101.68.32 52.101.73.1 52.101.73.153 52.101.73.19	mail-db7pr03cu00401.inbound.protection.outlook.com mail-am3pr04cu00500.inbound.protection.outlook.com mail-am0pr83cu00402.inbound.protection.outlook.com mail-am7pr05cu00206.inbound.protection.outlook.com mail-db3pr0202cu00200.inbound.protection.outlook.com mail-am3pr04cu00501.inbound.protection.outlook.com mail-as8pr05cu00401.inbound.protection.outlook.com mail-as8pr04cu00803.inbound.protection.outlook.com	AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation

📧 Autodiscover / Autoconfig#

Service	CNAME / IP
🔷 Autodiscover	autodiscover.outlook.com → 40.104.116.56

🔷 AAAA Records (IPv6)#

✗ No AAAA records — IPv6 not configured

🔐 HTTPS Records#

✗ No HTTPS RR — no SVCB/HTTPS service binding

📝 TXT Records#

2 records 189ms

TXT Record
MS=ms59021737
v=spf1 ip4:93.176.80.16/29 ip4:93.162.241.194 ip4:193.32.65.0/24 ip4:95.166.250.222 ip4:52.174.93.69 ip4:95.166.248.154 include:spf.protection.outlook.com ~all

✉️ SPF#

Policy	Record (dfff.dk)
~all (soft fail)	v=spf1 ip4:93.176.80.16/29 ip4:93.162.241.194 ip4:193.32.65.0/24 ip4:95.166.250.222 ip4:52.174.93.69 ip4:95.166.248.154 include:spf.protection.outlook.com ~all

📨 DMARC#

Policy	Record (_dmarc.dfff.dk)
p=reject	v=DMARC1; p=reject; rua=mailto:dmarc_agg@vali.email;

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

✗ No CAA records — any CA may issue certificates

🧩 Web & zone#

checked 2026-10-08 04:35:51

www CNAME	dfff.dk (all on dfff.dk) → 195.249.85.116 (AS3292)
www vs bare domain	Same network dfff.dk: 195.249.85.116 (AS3292) www.dfff.dk: 195.249.85.116 (AS3292)
Wildcard	No

✍️ DKIM keys#

2 found

Selector	CNAME	Key
selector1	selector1-dfff-dk._domainkey.danskefiskeresforsikring.onmicrosoft.com	RSA · ~1024 bit below 2048 bit
selector2	selector2-dfff-dk._domainkey.danskefiskeresforsikring.onmicrosoft.com	RSA · ~1024 bit below 2048 bit

DKIM selectors can't be listed, so we check the common ones (Microsoft 365, Google, Mailchimp, SendGrid, generic). Keys under other selectors aren't shown.

🔎 SPF check#

zone-wide SPF report

DNS lookups: 1/10 · policy: ~all

No problems found

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

193ms

Check	Result
Validation Status	🔓 Insecure
AD Flag (resolver validates)	✗ Not set
DS Record	✗ Not found
DNSKEY Record	✗ Not found
Flags	unsigned answer

🏷️ SOA#

125ms

Field	Value
Serial	1
Primary NS (MNAME)	ns1-07.azure-dns.com
Responsible (RNAME)	azuredns-hostmaster@microsoft.com
Refresh	3600s
Retry	300s
Expire	2419200s
Minimum (neg-cache TTL)	300s

📋 Registration#

✗ No registration data yet — queued for a WHOIS lookup

📋 WHOIS#

⏱️ Lookup Timing#

143ms

180ms

138ms

AAAA

129ms

TXT

189ms

CAA

131ms

HTTPS

173ms

TLSA

187ms

SOA

125ms

MTA-STS

132ms

DNSSEC

193ms

SRV

233ms

Total

1203ms

🕐 Scan History#

Scanned At	Duration	Records	DNSSEC
2026-06-22 00:23:14 shown	1203ms	4 NS 1 A 1 MX	🔓 Insecure
2026-06-21 10:35:06	1184ms	0 NS 0 A 0 MX	❓ Unknown
2026-06-17 02:35:21	908ms	4 NS 1 A 1 MX	🔓 Insecure