firstmail.dk is a .dk domain served by 4 nameservers (ns1.bdm.microsoftonline.com, ns2.bdm.microsoftonline.com, ns3.bdm.microsoftonline.com and 1 more). It was already in the .dk zone when our tracking began on 16 June 2026. Its website address 168.61.97.117 is hosted by Microsoft Corporation (AS8075) in Ireland. Mail is handled by firstmail-dk.mail.protection.outlook.com. The zone is not DNSSEC-signed, publishes a DMARC policy and has no IPv6 address. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.
| Nameserver | IP addresses | PTR | ASN / ISP |
|---|---|---|---|
| ns1.bdm.microsoftonline.com | — | — | — |
| ns2.bdm.microsoftonline.com | — | — | — |
| ns3.bdm.microsoftonline.com | — | — | — |
| ns4.bdm.microsoftonline.com | — | — | — |
| IP | TTL | PTR | ASN | ISP / Org | CIDR | Country | City |
|---|---|---|---|---|---|---|---|
| 168.61.97.117 | — | — | AS8075 | Microsoft Corporation | 168.61.0.0/16 | 🇮🇪 Ireland | Dublin |
| TXT Record |
|---|
| MS=ms59483253 |
| mscid=kNm+P2aIO1IpUzqpTOi++FgnaQZaWIcfTAxmia8hM5EWleSKGv7ne7/AnhrfUiMG0igf13xyppV+xerggAEthQ== |
| v=spf1 a:mailgw.sirrar.dk include:spf.protection.outlook.com -all |
| Policy | Record (firstmail.dk) |
|---|---|
| -all (hard fail) | v=spf1 a:mailgw.sirrar.dk include:spf.protection.outlook.com -all |
| Policy | Record (_dmarc.firstmail.dk) |
|---|---|
| p=quarantine | v=DMARC1; p=quarantine; rua=mailto:dmarc@egebirk.dk,mailto:dmarc_agg@vali.email; ruf=mailto:dmarc@egebirk.dk; sp=quarantine; fo=1; |
| www CNAME | az-web-01.sirrar.dk (all on sirrar.dk) → 168.61.97.117 (AS8075) |
| www vs bare domain | Same network |
| Wildcard | No |
| Selector | CNAME | Key |
|---|---|---|
| selector1 | selector1-firstmail-dk._domainkey.egebirk.onmicrosoft.com | RSA · ~1024 bit below 2048 bit |
| selector2 | selector2-firstmail-dk._domainkey.egebirk.onmicrosoft.com | RSA · ~1024 bit below 2048 bit |
DKIM selectors can't be listed, so we check the common ones (Microsoft 365, Google, Mailchimp, SendGrid, generic). Keys under other selectors aren't shown.
DNS lookups: 2/10 · policy: -all
No problems found| Check | Result |
|---|---|
| Validation Status | 🔓 Insecure |
| AD Flag (resolver validates) | ✗ Not set |
| DS Record | ✗ Not found |
| DNSKEY Record | ✗ Not found |
| Flags | unsigned answer |
| Field | Value |
|---|---|
| Serial | 1 |
| Primary NS (MNAME) | ns1.bdm.microsoftonline.com |
| Responsible (RNAME) | azuredns-hostmaster@microsoft.com |
| Refresh | 3600s |
| Retry | 300s |
| Expire | 2419200s |
| Minimum (neg-cache TTL) | 300s |
| Scanned At | Duration | Records | DNSSEC |
|---|---|---|---|
| 2026-09-30 22:12:01 | 1209ms | 4 NS 1 A 1 MX | 🔓 Insecure |
| 2026-08-28 02:39:09 | 954ms | 4 NS 1 A 1 MX | 🔓 Insecure |
| 2026-07-02 00:50:10 | 990ms | 4 NS 1 A 1 MX | 🔓 Insecure |
| 2026-06-17 09:23:07 shown | 921ms | 4 NS 1 A 1 MX | 🔓 Insecure |