leg.dk

📜 Historical scan 2026-06-21 20:54:41 · ← Latest scan

⬇ Zone File 📜 Timeline & History ⚡ Scan Now

leg.dk is a .dk domain served by 2 nameservers (hans.ns.cloudflare.com, lia.ns.cloudflare.com). It was already in the .dk zone when our tracking began on 16 June 2026. Mail is handled by leg-dk.mail.protection.outlook.com. The zone is not DNSSEC-signed, publishes a DMARC policy and is reachable over IPv6. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

2 records 49ms

Nameserver	IP addresses	PTR	ASN / ISP
hans.ns.cloudflare.com	108.162.193.175 172.64.33.175 173.245.59.175 2606:4700:58::adf5:3baf 2803:f800:50::6ca2:c1af 2a06:98c1:50::ac40:21af	hans.ns.cloudflare.com hans.ns.cloudflare.com hans.ns.cloudflare.com hans.ns.cloudflare.com hans.ns.cloudflare.com hans.ns.cloudflare.com	AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc.
lia.ns.cloudflare.com	108.162.192.185 172.64.32.185 173.245.58.185 2606:4700:50::adf5:3ab9 2803:f800:50::6ca2:c0b9 2a06:98c1:50::ac40:20b9	lia.ns.cloudflare.com lia.ns.cloudflare.com lia.ns.cloudflare.com lia.ns.cloudflare.com — lia.ns.cloudflare.com	AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc.

🌍 A Records#

2 records 56ms

IP	TTL	PTR	ASN	ISP / Org	CIDR	Country	City
188.114.96.1	300s	—	AS13335	—	—	—	—
188.114.97.1	300s	—	AS13335	—	—	—	—

📧 MX Records#

1 records 59ms

Priority	TTL	Mail Server	IP addresses	PTR	ASN
0	3600s	leg-dk.mail.protection.outlook.com	2a01:111:f403:ca04::1 2a01:111:f403:ca04::d 2a01:111:f403:ca09::5 2a01:111:f403:ca09::e 52.101.68.12 52.101.68.32 52.101.73.1 52.101.73.4	mail-db7pr03cu00401.inbound.protection.outlook.com mail-db6pr03cu00105.inbound.protection.outlook.com mail-am1pr04cu00105.inbound.protection.outlook.com mail-am7pr05cu00206.inbound.protection.outlook.com mail-db9pr02cu00204.inbound.protection.outlook.com mail-db3pr0202cu00200.inbound.protection.outlook.com mail-am3pr04cu00501.inbound.protection.outlook.com mail-am0pr83cu00404.inbound.protection.outlook.com	AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation

📧 Autodiscover / Autoconfig#

Service	CNAME / IP
🔷 Autodiscover	autodiscover.outlook.com → 52.98.149.136

🔷 AAAA Records (IPv6)#

2 records 56ms

IPv6 Address	TTL	PTR	ASN	ISP / Org	CIDR	Country	City
2a06:98c1:3120::1	300s	—	AS13335	—	—	—	—
2a06:98c1:3121::1	300s	—	AS13335	—	—	—	—

🔐 HTTPS Records#

1 records 53ms

Priority	Target	SvcParams
1 service	.	alpn="h3,h2" ipv4hint=188.114.96.1,188.114.97.1 ech=AEX+DQBBxQAgACBZVSLaCvXYy4/290FK6A8nVlVT08SD/iLIbWlMRz+6LwAEAAEAAQASY2xvdWRmbGFyZS1lY2guY29tAAA= ipv6hint=2a06:98c1:3120::1,2a06:98c1:3121::1

📝 TXT Records#

1 records 372ms

TXT Record
v=spf1 a:udwscqakvnhumcz.directoryup.com include:sendgrid.net include:spf.protection.outlook.com -all

✉️ SPF#

Policy	Record (leg.dk)
-all (hard fail)	v=spf1 a:udwscqakvnhumcz.directoryup.com include:sendgrid.net include:spf.protection.outlook.com -all

📨 DMARC#

Policy	Record (_dmarc.leg.dk)
p=reject	v=DMARC1; p=reject; rua=mailto:f7cfaa3d21af43d09e5511c7eb6a3f68@dmarc-reports.cloudflare.net

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

✗ No CAA records — any CA may issue certificates

🧩 Web & zone#

latest probe, not this scan · checked 2026-10-09 13:23:37

www	104.21.66.77 172.67.157.129 2606:4700:3032::ac43:9d81 2606:4700:3034::6815:424d (AS13335) (address records, no CNAME)
www vs bare domain	Same network leg.dk: 104.21.66.77 172.67.157.129 2606:4700:3032::ac43:9d81 2606:4700:3034::6815:424d (AS13335) www.leg.dk: 104.21.66.77 172.67.157.129 2606:4700:3032::ac43:9d81 2606:4700:3034::6815:424d (AS13335)
Wildcard	No

✍️ DKIM keys#

2 found

Selector	CNAME	Key
selector1	selector1-leg-dk._domainkey.tdchosting1016295.q-v1.dkim.mail.microsoft	RSA · ~2048 bit
selector2	selector2-leg-dk._domainkey.tdchosting1016295.q-v1.dkim.mail.microsoft	RSA · ~2048 bit

DKIM selectors can't be listed, so we check the common ones (Microsoft 365, Google, Mailchimp, SendGrid, generic). Keys under other selectors aren't shown.

🔎 SPF check#

zone-wide SPF report

DNS lookups: 4/10 · policy: -all

No problems found

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

134ms

Check	Result
Validation Status	🔓 Insecure
AD Flag (resolver validates)	✗ Not set
DS Record	✗ Not found
DNSKEY Record	✗ Not found
Flags	unsigned answer

🏷️ SOA#

62ms

Field	Value
Serial	2405528295
Primary NS (MNAME)	hans.ns.cloudflare.com
Responsible (RNAME)	dns@cloudflare.com
Refresh	10000s
Retry	2400s
Expire	604800s
Minimum (neg-cache TTL)	1800s

📋 Registration#

✗ No registration data yet — queued for a WHOIS lookup

📋 WHOIS#

⏱️ Lookup Timing#

49ms

56ms

59ms

AAAA

56ms

TXT

372ms

CAA

55ms

HTTPS

53ms

TLSA

117ms

SOA

62ms

MTA-STS

52ms

DNSSEC

134ms

SRV

225ms

Total

838ms

🕐 Scan History#

Scanned At	Duration	Records	DNSSEC
2026-10-09 13:23:37	1552ms	2 NS 2 A 1 MX	🔓 Insecure
2026-10-01 04:18:39	1767ms	2 NS 2 A 1 MX	🔓 Insecure
2026-09-23 11:55:11	10388ms	2 NS 2 A 1 MX	🔓 Insecure
2026-09-09 02:23:53	1109ms	2 NS 2 A 1 MX	🔓 Insecure
2026-09-03 13:29:48	1424ms	2 NS 2 A 1 MX	🔓 Insecure
2026-08-31 06:46:59	2547ms	2 NS 2 A 1 MX	🔓 Insecure
2026-07-10 23:01:21	11091ms	2 NS 2 A 1 MX	🔓 Insecure
2026-06-21 20:54:41 shown	838ms	2 NS 2 A 1 MX	🔓 Insecure
2026-06-21 18:50:38	908ms	0 NS 0 A 0 MX	❓ Unknown
2026-06-17 21:07:00	4575ms	2 NS 2 A 1 MX	🔓 Insecure