govcert.dk DNS records

🖥️ Nameservers5 records 35ms

Nameserver	IP addresses	PTR	ASN / ISP
ns1.brandshelter.com	193.227.117.9 2a04:2b00:14cc::9	ns1.brandshelter.com —	AS1921 ipcom GmbH AS1921 ipcom GmbH
ns2.brandshelter.de	194.50.187.11 2a04:2b00:14dd::11	ns2.brandshelter.de ns11.j.centralnic-dns.com	AS207021 ipcom GmbH AS207021 ipcom GmbH
ns3.brandshelter.info	194.0.182.12 2a04:2b00:14ee::12	ns3.brandshelter.info ns12.k.centralnic-dns.com	AS1921 ipcom GmbH AS1921 ipcom GmbH
ns4.brandshelter.net	193.227.117.10 2a04:2b00:14cc::10	ns4.brandshelter.net ns10.i.centralnic-dns.com	AS1921 ipcom GmbH AS1921 ipcom GmbH
ns5.brandshelter.us	194.50.187.14 2a04:2b00:14dd::14	ns5.brandshelter.us ns14.j.centralnic-dns.com	AS207021 ipcom GmbH AS207021 ipcom GmbH

🌍 A Records2 records 38ms

IP	TTL	PTR	ASN	ISP / Org	CIDR	Country	City
5.22.145.121	600s	relay.mail-forwarder.io	AS16509	Amazon.com, Inc.	5.22.145.0/24	🇩🇪 Germany	—
5.22.145.16	600s	relay.mail-forwarder.io	AS16509	Amazon.com, Inc.	5.22.145.0/24	🇩🇪 Germany	—

📧 MX Records1 records 39ms

Priority	TTL	Mail Server	IP addresses	PTR	ASN
10	21600s	mail.govcert.dk	93.178.185.220	mail.cert.cfcs.dk	AS3292 TDC Holding A/S

🔷 AAAA Records (IPv6)2 records 34ms

IPv6 Address	TTL	PTR	ASN	ISP / Org	CIDR	Country	City
2a00:18e0:5:2:7577:4e4d:413b:f507	600s	relay.mail-forwarder.io	AS16509	Amazon.com, Inc.	2a00:18e0:5:0:0:0:0:0/48	🇩🇪 Germany	—
2a00:18e0:5:3:dfe2:c743:85aa:61bc	600s	relay.mail-forwarder.io	AS16509	Amazon.com, Inc.	2a00:18e0:5:0:0:0:0:0/48	🇩🇪 Germany	—

🔐 HTTPS Records

✗ No HTTPS RR — no SVCB/HTTPS service binding

📝 TXT Records6 records 145ms

TXT Record
_globalsign-domain-verification=6iYPrkYS90GAXWMmL8rj7u3NzENfKsikmIzwa6-CRM
_globalsign-domain-verification=G5gbkmolvI_sl9W612BPVVP3u4WW1xauGeT1P9YYG1
_globalsign-domain-verification=l7LzTlyJicNYWJw9FYfyDB-ri61WrL2BFx0T9612Fo
_globalsign-domain-verification=qmNTQddfzI_bUpMz2pjUzsNlIFKpVRreHgrd2ZkZQN
_globalsign-domain-verification=qPn9kbmcRi_hSsJ9Koi5qOW8x3l40Dj-QkFqecxLD_
v=spf1 mx -all

✉️ SPF

Policy	Record (govcert.dk)
-all (hard fail)	v=spf1 mx -all

📨 DMARC

Policy	Record (_dmarc.govcert.dk)
p=reject	v=DMARC1; p=reject; sp=reject; rua=mailto:dmarc-rua@fe-ddis.dk; ruf=mailto:dmarc-ruf@fe-ddis.dk; fo=1; pct=100

📬 MTA-STS

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records

✗ No CAA records — any CA may issue certificates

🔗 TLSA / DANE

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC106ms

Check	Result
Validation Status	🔒 Secure
AD Flag (resolver validates)	✓ Set
DS Record	✓ Found
DNSKEY Record	✓ Found
Flags	fully validated

🏷️ SOA0ms

Field	Value
Serial	2025035772
Primary NS (MNAME)	ns1.brandshelter.com
Responsible (RNAME)	tech@brandshelter.com
Refresh	10800s
Retry	3600s
Expire	604800s
Minimum (neg-cache TTL)	300s

📋 Registration

✗ No registration data — collected automatically when SOA serial changes

📋 WHOIS

⏱️ Lookup Timing

NS

35ms

A

38ms

MX

39ms

AAAA

34ms

TXT

145ms

CAA

41ms

HTTPS

44ms

TLSA

479ms

SOA

0ms

MTA-STS

47ms

DNSSEC

106ms

SRV

43ms

Total

978ms

🕐 Scan History

Scanned At	Duration	Records	DNSSEC
2026-09-03 22:03:42	978ms	5 NS 2 A 1 MX	🔒 Secure	View
2026-08-27 17:05:48	878ms	5 NS 2 A 1 MX	🔒 Secure	View
2026-08-20 14:38:19	1106ms	5 NS 2 A 1 MX	🔒 Secure	View
2026-08-13 09:30:34	5615ms	5 NS 2 A 1 MX	🔒 Secure	View
2026-08-07 19:40:12	1308ms	5 NS 2 A 1 MX	🔒 Secure	View
2026-07-24 00:22:52	9071ms	5 NS 2 A 1 MX	🔒 Secure	View
2026-07-17 08:48:07	978ms	5 NS 2 A 1 MX	🔒 Secure	View
2026-07-13 18:36:55	1304ms	5 NS 2 A 1 MX	🔒 Secure	View
2026-07-03 20:40:07	1345ms	5 NS 2 A 1 MX	🔒 Secure	View
2026-06-26 07:36:11	870ms	5 NS 2 A 1 MX	🔒 Secure	View
2026-06-21 23:00:20	948ms	0 NS 0 A 0 MX	❓ Unknown	View
2026-06-18 11:28:54	1512ms	5 NS 2 A 1 MX	🔒 Secure	View
2026-06-17 10:00:25	5215ms	5 NS 2 A 1 MX	🔒 Secure	View