it-nerd.dk

📜 Historical scan 2026-08-19 04:21:54 · ← Latest scan

⬇ Zone File 📜 Timeline & History ⚡ Scan Now

it-nerd.dk is a .dk domain served by 2 nameservers (lloyd.ns.cloudflare.com, tess.ns.cloudflare.com). It was already in the .dk zone when our tracking began on 16 June 2026. Its website address 104.21.20.44 is hosted by Cloudflare, Inc. (AS13335). Mail is handled by itnerd-dk0e.y-v1.mx.microsoft. The zone is DNSSEC-signed and validates, publishes a DMARC policy and is reachable over IPv6. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

2 records 218ms

Nameserver	IP addresses	PTR	ASN / ISP
lloyd.ns.cloudflare.com	108.162.193.197 172.64.33.197 173.245.59.197 2606:4700:58::adf5:3bc5 2803:f800:50::6ca2:c1c5 2a06:98c1:50::ac40:21c5	lloyd.ns.cloudflare.com lloyd.ns.cloudflare.com lloyd.ns.cloudflare.com lloyd.ns.cloudflare.com lloyd.ns.cloudflare.com lloyd.ns.cloudflare.com	AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc.
tess.ns.cloudflare.com	108.162.192.227 172.64.32.227 173.245.58.227 2606:4700:50::adf5:3ae3 2803:f800:50::6ca2:c0e3 2a06:98c1:50::ac40:20e3	tess.ns.cloudflare.com tess.ns.cloudflare.com tess.ns.cloudflare.com tess.ns.cloudflare.com tess.ns.cloudflare.com tess.ns.cloudflare.com	AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc.

🌍 A Records#

2 records 220ms

IP	TTL	PTR	ASN	ISP / Org	CIDR	Country	City
104.21.20.44	300s	—	AS13335	Cloudflare, Inc.	104.21.0.0/17	—	—
172.67.191.85	300s	—	AS13335	Cloudflare, Inc.	172.67.128.0/17	—	—

📧 MX Records#

1 records 207ms

Priority	TTL	Mail Server	IP addresses	PTR	ASN
15	1800s	itnerd-dk0e.y-v1.mx.microsoft	2a01:111:f403:ca04::5 2a01:111:f403:ca04::a 2a01:111:f403:ca09::b 2a01:111:f403:ca09::d 52.101.68.10 52.101.68.12 52.101.68.16 52.101.68.8	mail-db3pr0202cu00205.inbound.protection.outlook.com mail-du0pr03cu00102.inbound.protection.outlook.com mail-am7pr05cu00103.inbound.protection.outlook.com mail-as9pr05cu01305.inbound.protection.outlook.com mail-dbbpr03cu00102.inbound.protection.outlook.com mail-db9pr02cu00204.inbound.protection.outlook.com mail-db4pr02cu00400.inbound.protection.outlook.com mail-du0pr03cu00100.inbound.protection.outlook.com	AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation

📧 Autodiscover / Autoconfig#

Service	CNAME / IP
🔷 Autodiscover	autodiscover.outlook.com → 40.104.116.56

🔷 AAAA Records (IPv6)#

2 records 211ms

IPv6 Address	TTL	PTR	ASN	ISP / Org	CIDR	Country	City
2606:4700:3032::6815:142c	300s	—	AS13335	Cloudflare, Inc.	2606:4700:3000:0:0:0:0:0/42	—	—
2606:4700:3033::ac43:bf55	300s	—	AS13335	Cloudflare, Inc.	2606:4700:3000:0:0:0:0:0/42	—	—

🔐 HTTPS Records#

1 records 221ms

Priority	Target	SvcParams
1 service	.	alpn="h3,h2" ipv4hint=104.21.20.44,172.67.191.85 ech=AEX+DQBBSwAgACBSI8SIWpPJZ+nSdwGLH9F2pFQjr+CzXuXIqbfFP/QdWAAEAAEAAQASY2xvdWRmbGFyZS1lY2guY29tAAA= ipv6hint=2606:4700:3032::6815:142c,2606:4700:3033::ac43:bf55

🔌 SRV Records#

1 records 1017ms

Service	Priority	Weight	Port	Target
_sipfederationtls._tcp	100	1	5061	sipfed.online.lync.com

📝 TXT Records#

2 records 692ms

TXT Record
MS=ms69535734
v=spf1 include:spf.protection.outlook.com -all

✉️ SPF#

Policy	Record (it-nerd.dk)
-all (hard fail)	v=spf1 include:spf.protection.outlook.com -all

📨 DMARC#

Policy	Record (_dmarc.it-nerd.dk)
p=reject	v=DMARC1; p=reject; rua=mailto:5039ad5068134d16b9f5998ff117baac@dmarc-reports.cloudflare.net,mailto:dmarc.rua@mxbox.dk ; ruf=mailto:dmarc.ruf@mxbox.dk

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

✗ No CAA records — any CA may issue certificates

🧩 Web & zone#

latest probe, not this scan · checked 2026-10-17 23:01:13

www	104.21.20.44 172.67.191.85 2606:4700:3032::6815:142c 2606:4700:3033::ac43:bf55 (AS13335) (address records, no CNAME)
www vs bare domain	Same network it-nerd.dk: 104.21.20.44 172.67.191.85 2606:4700:3032::6815:142c 2606:4700:3033::ac43:bf55 (AS13335) www.it-nerd.dk: 104.21.20.44 172.67.191.85 2606:4700:3032::6815:142c 2606:4700:3033::ac43:bf55 (AS13335)
Wildcard	No
Denial of existence	Compact NSEC (RFC 9824, "black lies") not walkable
CDS / CDNSKEY	Published: key rollovers can be automated with the registry (RFC 7344/8078) 1 CDS, 1 CDNSKEY

🔎 SPF check#

zone-wide SPF report

DNS lookups: 1/10 · policy: -all

No problems found

🔗 TLSA / DANE#

10 records 261ms

Service / Owner	Type	Cert association
SMTP _25._tcp.itnerd-dk0e.y-v1.mx.microsoft	DANE-TA · Full cert · SHA-256	38D895F5105BC2545822C17A2444F4B0…
SMTP _25._tcp.itnerd-dk0e.y-v1.mx.microsoft	DANE-TA · Full cert · SHA-256	5F88694615E4C61686E106B84C3338C6…
SMTP _25._tcp.itnerd-dk0e.y-v1.mx.microsoft	DANE-TA · Full cert · SHA-256	6EBFF927297A5B3AAF5EAE672252C36A…
SMTP _25._tcp.itnerd-dk0e.y-v1.mx.microsoft	DANE-TA · Full cert · SHA-256	C1AD7778796D20BCA65C889A26550211…
SMTP _25._tcp.itnerd-dk0e.y-v1.mx.microsoft	DANE-TA · Full cert · SHA-256	EA7A25255D111FC3CE4CB8FABE3ADF9C…
SMTP _25._tcp.itnerd-dk0e.y-v1.mx.microsoft	DANE-EE · SPKI · SHA-256	133086C7B822371A4A3304F1661A7880…
SMTP _25._tcp.itnerd-dk0e.y-v1.mx.microsoft	DANE-EE · SPKI · SHA-256	54883CC5F1849331E6BF5002C3129D20…
SMTP _25._tcp.itnerd-dk0e.y-v1.mx.microsoft	DANE-EE · SPKI · SHA-256	803F7447CC75B208DBCA042346F5D8DF…
SMTP _25._tcp.itnerd-dk0e.y-v1.mx.microsoft	DANE-EE · SPKI · SHA-256	A6C267923B26A4A9617EDA73D8DB4FBC…
SMTP _25._tcp.itnerd-dk0e.y-v1.mx.microsoft	DANE-EE · SPKI · SHA-256	C495D9E40F7E625BE22F83CC64305182…

🔐 DNSSEC#

349ms

Check	Result
Validation Status	🔒 Secure
AD Flag (resolver validates)	✓ Set
DS Record	✓ Found
DNSKEY Record	✓ Found
Flags	fully validated

🏷️ SOA#

0ms

Field	Value
Serial	2412534512
Primary NS (MNAME)	lloyd.ns.cloudflare.com
Responsible (RNAME)	dns@cloudflare.com
Refresh	10000s
Retry	2400s
Expire	604800s
Minimum (neg-cache TTL)	1800s

📋 Registration#

✗ No registration data yet — queued for a WHOIS lookup

📋 WHOIS#

⏱️ Lookup Timing#

218ms

220ms

207ms

AAAA

211ms

TXT

692ms

CAA

69ms

HTTPS

221ms

TLSA

261ms

SOA

0ms

MTA-STS

115ms

DNSSEC

349ms

SRV

1017ms

Total

5729ms

🕐 Scan History#

Scanned At	Duration	Records	DNSSEC
2026-10-17 23:01:12	1645ms	2 NS 2 A 1 MX	🔒 Secure
2026-09-26 22:05:55	1367ms	2 NS 2 A 1 MX	🔒 Secure
2026-09-25 21:56:52	858ms	2 NS 2 A 1 MX	🔒 Secure
2026-09-23 21:12:57	881ms	2 NS 2 A 1 MX	🔒 Secure
2026-09-10 18:40:50	7071ms	2 NS 2 A 1 MX	🔒 Secure
2026-09-01 14:35:19	9669ms	2 NS 2 A 1 MX	🔒 Secure
2026-08-30 03:04:00	1589ms	2 NS 2 A 1 MX	🔒 Secure
2026-08-19 04:21:54 shown	5729ms	2 NS 2 A 1 MX	🔒 Secure
2026-08-08 23:38:44	1606ms	2 NS 2 A 1 MX	🔒 Secure
2026-08-03 14:06:36	1528ms	2 NS 2 A 1 MX	🔒 Secure
2026-07-16 04:02:11	2323ms	2 NS 2 A 1 MX	🔒 Secure
2026-06-20 23:41:24	1377ms	2 NS 2 A 1 MX	🔒 Secure
2026-06-20 00:05:55	830ms	2 NS 2 A 1 MX	🔒 Secure
2026-06-18 00:31:50	1305ms	2 NS 2 A 1 MX	🔒 Secure