digital-identity.dk

📜 Historical scan 2026-08-27 17:49:33  ·  ← Latest scan
⬇ Zone File 📜 Timeline & History ⚡ Scan Now

digital-identity.dk is a .dk domain served by 4 nameservers (ns-1415.awsdns-48.org, ns-1631.awsdns-11.co.uk, ns-452.awsdns-56.com and 1 more). It was already in the .dk zone when our tracking began on 16 June 2026. Its website address 34.253.29.137 is hosted by Amazon.com, Inc. (AS16509) in Ireland. Mail is handled by aspmx.l.google.com, alt1.aspmx.l.google.com and 4 more. The zone is not DNSSEC-signed, publishes a DMARC policy and has no IPv6 address. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

4 records   70ms
NameserverIP addressesPTRASN / ISP
ns-1415.awsdns-48.org 205.251.197.135
2600:9000:5305:8700::1		 ns-1415.awsdns-48.org
ns-1415.awsdns-48.org		 AS16509 Amazon.com, Inc.
AS16509 Amazon.com, Inc.
ns-1631.awsdns-11.co.uk 205.251.198.95
2600:9000:5306:5f00::1		 ns-1631.awsdns-11.co.uk
ns-1631.awsdns-11.co.uk		 AS16509 Amazon.com, Inc.
AS16509 Amazon.com, Inc.
ns-452.awsdns-56.com 205.251.193.196
2600:9000:5301:c400::1		 ns-452.awsdns-56.com
ns-452.awsdns-56.com		 AS16509 Amazon.com, Inc.
AS16509 Amazon.com, Inc.
ns-827.awsdns-39.net 205.251.195.59
2600:9000:5303:3b00::1		 ns-827.awsdns-39.net
ns-827.awsdns-39.net		 AS16509 Amazon.com, Inc.
AS16509 Amazon.com, Inc.

🌍 A Records#

3 records   65ms
IPTTLPTRASNISP / OrgCIDRCountryCity
34.253.29.137 60s ec2-34-253-29-137.eu-west-1.compute.amazonaws.com AS16509 Amazon.com, Inc. 34.240.0.0/12 🇮🇪 Ireland Dublin
52.210.239.115 60s ec2-52-210-239-115.eu-west-1.compute.amazonaws.com AS16509 Amazon.com, Inc. 52.208.0.0/13 🇮🇪 Ireland Dublin
52.31.178.38 60s ec2-52-31-178-38.eu-west-1.compute.amazonaws.com AS16509 Amazon.com, Inc. 52.24.0.0/13 🇮🇪 Ireland Dublin

📧 MX Records#

6 records   73ms
PriorityTTLMail ServerIP addressesPTRASN
1 3600s aspmx.l.google.com 173.194.221.27
2a00:1450:4010:c06::1b
2a00:1450:4010:c06::1b		 lm-in-f27.1e100.net
lj-in-x1b.1e100.net
lj-in-f27.1e100.net		 AS15169 Google LLC
AS15169 Google LLC
AS15169 Google LLC
5 3600s alt1.aspmx.l.google.com 192.178.158.26
2404:6800:4013:813::1a		 lcdels-in-f26.1e100.net
lcdels-in-f26.1e100.net		 AS15169 Google LLC
AS15169 Google LLC
5 3600s alt2.aspmx.l.google.com 173.194.41.27
173.194.41.27
2404:6800:4001:c01::1a		 yukulwh-in-f27.1e100.net
mad01s14-in-f27.1e100.net
yukulwh-in-f26.1e100.net		 AS15169 Google LLC
AS15169 Google LLC
AS15169 Google LLC
10 3600s aspmx2.googlemail.com 192.178.158.26
2404:6800:4013:813::1a		 lcdels-in-f26.1e100.net
lcdels-in-f26.1e100.net		 AS15169 Google LLC
AS15169 Google LLC
10 3600s aspmx3.googlemail.com 173.194.41.26
173.194.41.26
2404:6800:4001:c01::1a		 yukulwh-in-f26.1e100.net
mad01s14-in-f26.1e100.net
yukulwh-in-f26.1e100.net		 AS15169 Google LLC
AS15169 Google LLC
AS15169 Google LLC
32767 3600s ms16512493.msv1.invalid — — —

📧 Autodiscover / Autoconfig#

ServiceCNAME / IP
🔷 Autodiscoverautodiscover.outlook.com → 40.104.116.24
🔶 Autoconfig52.31.178.38

🔷 AAAA Records (IPv6)#

✗ No AAAA records — IPv6 not configured

🔐 HTTPS Records#

✗ No HTTPS RR — no SVCB/HTTPS service binding

🔌 SRV Records#

1 records   99ms
ServicePriorityWeightPortTarget
_sipfederationtls._tcp 100 1 5061 sipfed.online.lync.com

📝 TXT Records#

1 records   313ms
TXT Record
v=spf1 include:amazonses.com include:mailgun.org include:mailgun.net include:_spf.google.com include:_spf.tem.scaleway.com ~all

✉️ SPF#

PolicyRecord (digital-identity.dk)
~all (soft fail) v=spf1 include:amazonses.com include:mailgun.org include:mailgun.net include:_spf.google.com include:_spf.tem.scaleway.com ~all

📨 DMARC#

PolicyRecord (_dmarc.digital-identity.dk)
p=none (monitor only) v=DMARC1;p=none;

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

✗ No CAA records — any CA may issue certificates

🧩 Web & zone#

latest probe, not this scan · checked 2026-10-09 14:25:09
www CNAMEd2tulikn1et0c3.cloudfront.net (all on cloudfront.net)
www vs bare domainSame network
WildcardYes: any name under the zone resolves
CDS / CDNSKEYNone 0 CDS, 0 CDNSKEY

✍️ DKIM keys#

1 found
SelectorCNAMEKey
k1 — RSA · ~1024 bit below 2048 bit

DKIM selectors can't be listed, so we check the common ones (Microsoft 365, Google, Mailchimp, SendGrid, generic). Keys under other selectors aren't shown.

🔎 SPF check#

zone-wide SPF report

DNS lookups: 12/10 · policy: ~all

  • error 12 DNS lookups: the limit is 10, so a receiver whose evaluation gets past the 10th returns permerror (SPF fails)

🔏 ACME Challenge#

TypeNameValue
CNAME _acme-challenge.digital-identity.dk _acme-challenge.9ac01310829aae848a5b299bb9e38ac9fdd3e0d949697c77.upcloudlb.com

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

116ms
CheckResult
Validation Status🔓 Insecure
AD Flag (resolver validates)✗ Not set
DS Record✗ Not found
DNSKEY Record✓ Found
Flagsunsigned answer

🏷️ SOA#

0ms
FieldValue
Serial1
Primary NS (MNAME)ns-827.awsdns-39.net
Responsible (RNAME)awsdns-hostmaster@amazon.com
Refresh7200s
Retry900s
Expire1209600s
Minimum (neg-cache TTL)86400s

📋 Registration#

✗ No registration data yet — queued for a WHOIS lookup
📋 WHOIS#

⏱️ Lookup Timing#

NS
70ms
A
65ms
MX
73ms
AAAA
84ms
TXT
313ms
CAA
64ms
HTTPS
80ms
TLSA
204ms
SOA
0ms
MTA-STS
88ms
DNSSEC
116ms
SRV
99ms
Total
3752ms

🕐 Scan History#

Scanned AtDurationRecordsDNSSEC
2026-10-09 14:25:09 7132ms 4 NS 3 A 6 MX 🔓 Insecure
2026-09-30 18:38:21 3133ms 4 NS 3 A 6 MX 🔓 Insecure
2026-09-30 02:14:24 3290ms 4 NS 3 A 6 MX 🔓 Insecure
2026-08-27 17:49:33 shown 3752ms 4 NS 3 A 6 MX 🔓 Insecure
2026-06-25 11:23:13 4535ms 4 NS 3 A 6 MX 🔓 Insecure
2026-06-17 02:50:45 690ms 4 NS 3 A 6 MX 🔓 Insecure
dhd.dk [/] search Domains, Hosts & DNS — .dk zone