ifa-hetag.dk

📜 Historical scan 2026-06-20 23:16:33 · ← Latest scan

ifa-hetag.dk is a .dk domain served by 2 nameservers (ns1.curanet.dk, ns2.curanet.dk). Mail is handled by ifahetag-dk0i.mail.protection.outlook.com. The zone is DNSSEC-signed and validates, publishes a DMARC policy and has no IPv6 address. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers

2 records 78ms

Nameserver	IP addresses	PTR	ASN / ISP
ns1.curanet.dk	185.25.141.12 2a02:2339:4006:108::123	ns1.curanet.dk ns1.curanet.dk	AS48854 team.blue Denmark A/S AS48854 team.blue Denmark A/S
ns2.curanet.dk	2a02:2339:1:10f::123:123 91.197.248.75	ns2.curanet.dk ns2.curanet.dk	AS48854 team.blue Denmark A/S AS48854 team.blue Denmark A/S

🌍 A Records

🌍

No A records found

📧 MX Records

1 records 66ms

Priority	TTL	Mail Server	IP addresses	PTR	ASN
0	300s	ifahetag-dk0i.mail.protection.outlook.com	2a01:111:f403:ca04::4 2a01:111:f403:ca04::b 2a01:111:f403:ca04::d 2a01:111:f403:ca09::6 52.101.68.21 52.101.68.36 52.101.68.8 52.101.73.28	mail-db4pr02cu00204.inbound.protection.outlook.com mail-dbbpr03cu00103.inbound.protection.outlook.com mail-db6pr03cu00105.inbound.protection.outlook.com mail-am4pr0401cu00106.inbound.protection.outlook.com mail-db4pr02cu00205.inbound.protection.outlook.com mail-db5pr02cu00104.inbound.protection.outlook.com mail-du0pr03cu00100.inbound.protection.outlook.com mail-am7pr05cu00204.inbound.protection.outlook.com	AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation

📧 Autodiscover / Autoconfig

Service	CNAME / IP
🔷 Autodiscover	autodiscover.outlook.com → 52.98.154.152

🔷 AAAA Records (IPv6)

✗ No AAAA records — IPv6 not configured

🔐 HTTPS Records

✗ No HTTPS RR — no SVCB/HTTPS service binding

🔌 SRV Records

1 records 141ms

Service	Priority	Weight	Port	Target
_sipfederationtls._tcp	100	1	5061	sipfed.online.lync.com

📝 TXT Records

5 records 332ms

TXT Record
DomainVerification=O7S0H3OW83K86Z11P8QP30KHGJ2GQ2TNIBQGUK18SY4IWPH3PZKM4IUE5D33X3EF
knowbe4-site-verification=12db3b27fddec6ea272e3f8d5e7c1a76
MS=ms41475472
MS=ms43584592
v=spf1 ip4:212.112.184.237 ip4:80.160.72.48/28 include:spf.protection.outlook.com -all

✉️ SPF

Policy	Record (ifa-hetag.dk)
-all (hard fail)	v=spf1 ip4:212.112.184.237 ip4:80.160.72.48/28 include:spf.protection.outlook.com -all

📨 DMARC

Policy	Record (_dmarc.ifa-hetag.dk)
p=reject	v=DMARC1; p=reject; rua=mailto:67335ed7d9289@dmarc-dk.centerasecurity.com;

📬 MTA-STS

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records

✗ No CAA records — any CA may issue certificates

🧩 Web & zone

latest probe, not this scan · checked 2026-09-29 17:39:58

www	Exists, no address
Wildcard	No
Denial of existence	NSEC3 · 1 iteration · 1-byte salt RFC 9276 recommends 0 iterations and no salt
CDS / CDNSKEY	None 0 CDS, 0 CDNSKEY

✍️ DKIM keys

3 found

Selector	CNAME	Key
s1	s1.domainkey.u38999500.wl001.sendgrid.net	RSA · ~2048 bit
s2	s2.domainkey.u38999500.wl001.sendgrid.net	RSA · ~2048 bit
selector1	selector1-ifahetag-dk0i._domainkey.nordicwp.onmicrosoft.com	RSA · ~2048 bit

DKIM selectors can't be listed, so we check the common ones (Microsoft 365, Google, Mailchimp, SendGrid, generic). Keys under other selectors aren't shown.

🔎 SPF check

zone-wide SPF report

DNS lookups: 1/10 · policy: -all

No problems found

🔗 TLSA / DANE

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC

234ms

Check	Result
Validation Status	🔒 Secure
AD Flag (resolver validates)	✓ Set
DS Record	✓ Found
DNSKEY Record	✓ Found
Flags	resolution failed: ncache nxrrset

🏷️ SOA

77ms

Field	Value
Serial	2026030201
Primary NS (MNAME)	ns1.curanet.dk
Responsible (RNAME)	hostmaster@curanet.dk
Refresh	14400s
Retry	3600s
Expire	1209600s
Minimum (neg-cache TTL)	300s

📋 Registration

✗ No registration data — collected automatically when SOA serial changes

📋 WHOIS

⏱️ Lookup Timing

78ms

71ms

66ms

AAAA

82ms

TXT

332ms

CAA

100ms

HTTPS

69ms

TLSA

623ms

SOA

77ms

MTA-STS

97ms

DNSSEC

234ms

SRV

141ms

Total

1713ms

🕐 Scan History

Scanned At	Duration	Records	DNSSEC
2026-09-18 19:47:24	917ms	2 NS 0 A 1 MX	🔒 Secure
2026-08-27 14:25:18	1264ms	2 NS 0 A 1 MX	🔒 Secure
2026-06-30 02:02:41	1010ms	2 NS 0 A 1 MX	🔒 Secure
2026-06-23 20:52:10	3962ms	2 NS 0 A 1 MX	🔒 Secure
2026-06-21 14:43:29	1145ms	0 NS 0 A 0 MX	❓ Unknown
2026-06-20 23:16:33 shown	1713ms	2 NS 0 A 1 MX	🔒 Secure
2026-06-17 14:37:05	285ms	0 NS 0 A 0 MX	❓ Unknown