lema.dk DNS records

🖥️ Nameservers3 records 97ms

Nameserver	IP addresses	PTR	ASN / ISP
ns1.digitalocean.com	172.64.52.210 2606:4700:52::ac40:34d2	ns1.digitalocean.com ns1.digitalocean.com	AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc.
ns2.digitalocean.com	172.64.53.21 2606:4700:5a::ac40:3515	ns2.digitalocean.com ns2.digitalocean.com	AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc.
ns3.digitalocean.com	172.64.49.209 2606:4700:52::ac40:31d1	ns3.digitalocean.com ns3.digitalocean.com	AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc.

🌍 A Records1 records 70ms

IP	TTL	PTR	ASN	ISP / Org	CIDR	Country	City
164.92.162.225	60s	—	AS14061	DigitalOcean, LLC	164.92.128.0/17	🇩🇪 Germany	Frankfurt am Main

📧 MX Records1 records 75ms

Priority	TTL	Mail Server	IP addresses	PTR	ASN
9	60s	lema.dk.mx.one.com	104.37.34.70 104.37.34.71 104.37.34.72 104.37.34.73	mx1.pub.mailpod10-cph3.one.com mx2.pub.mailpod10-cph3.one.com mx3.pub.mailpod10-cph3.one.com mx4.pub.mailpod10-cph3.one.com	AS51468 One.com A/S AS51468 One.com A/S AS51468 One.com A/S AS51468 One.com A/S

📧 Autodiscover / Autoconfig

Service	CNAME / IP
🔷 Autodiscover	164.92.162.225
🔶 Autoconfig	164.92.162.225

🔷 AAAA Records (IPv6)

✗ No AAAA records — IPv6 not configured

🔐 HTTPS Records

✗ No HTTPS RR — no SVCB/HTTPS service binding

📝 TXT Records2 records 503ms

TXT Record
v=spf1 include:_custspf.one.com ~all
v=spf1 include:eu.mailgun.org ~all

✉️ SPF

⚠ Multiple SPF records — RFC 7208 §4.5 violation (receivers must treat this as permerror)

Policy	Record (lema.dk)
~all (soft fail)	v=spf1 include:_custspf.one.com ~all
~all (soft fail)	v=spf1 include:eu.mailgun.org ~all

📨 DMARC

✗ No DMARC record — mail spoofing not restricted

📬 MTA-STS

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records

✗ No CAA records — any CA may issue certificates

🔏 ACME Challenge

Type	Name	Value
TXT	_acme-challenge.lema.dk	7N5_s9F1wEVZ6QwKsKwSl2bXy9hGm3Gc1jYZ30SIyUk
TXT	_acme-challenge.lema.dk	JjGykbzXtDl0aNjxic0Hv5tSIl5QouvNLnkofYQmtKQ
TXT	_acme-challenge.lema.dk	N-XL2IYZfH55VfX64LhDjv-c5d2WoDCY-H1j0cFTKhI
TXT	_acme-challenge.lema.dk	X_bDMV9W4h_cAZ2nL7dbbUOwIrE-agcxbwSSghizr8E
TXT	_acme-challenge.lema.dk	_Wt5NQ6VgbgHe8lHG6yBzG7Q7WEcGINXLfVlVAN0320
TXT	_acme-challenge.lema.dk	c-Rx3O3EfGyFU3qvxFTXpJuymA9kPA-yZ__TV9k4B9o
TXT	_acme-challenge.lema.dk	jfvEoHcgaASaFKrjkGzWYOAShMIx1_OlF6IyAMTDYtQ
TXT	_acme-challenge.lema.dk	mFsWCmDkDVCaoyeGRKfchMY_4XiTF3FdVuLLgH0O0mI
TXT	_acme-challenge.lema.dk	uwG-RMmqDukLNs6r7W0fe37gVlI284jlQr6JChj91sA
TXT	_acme-challenge.lema.dk	xNxPJr1BuQmW1OqEYuxXhmW5544G_ofO1tZmfpcXbXI

🔗 TLSA / DANE

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC9080ms

Check	Result
Validation Status	🔓 Insecure
AD Flag (resolver validates)	✗ Not set
DS Record	✗ Not found
DNSKEY Record	✗ Not found
Flags	unsigned answer

🏷️ SOA0ms

Field	Value
Serial	0
Primary NS (MNAME)	ns1.digitalocean.com
Responsible (RNAME)	hostmaster@lema.dk
Refresh	10800s
Retry	3600s
Expire	604800s
Minimum (neg-cache TTL)	1800s

📋 Registration

✗ No registration data — collected automatically when SOA serial changes

📋 WHOIS

⏱️ Lookup Timing

NS

97ms

A

70ms

MX

75ms

AAAA

72ms

TXT

503ms

CAA

67ms

HTTPS

103ms

TLSA

116ms

SOA

0ms

MTA-STS

110ms

DNSSEC

9080ms

SRV

131ms

Total

9589ms

🕐 Scan History

Scanned At	Duration	Records	DNSSEC
2026-09-02 17:55:43	9589ms	3 NS 1 A 1 MX	🔓 Insecure	View
2026-08-27 10:39:51	962ms	3 NS 1 A 1 MX	🔓 Insecure	View
2026-06-28 23:39:51	967ms	3 NS 1 A 1 MX	🔓 Insecure	View
2026-06-22 10:47:38	5924ms	3 NS 1 A 1 MX	🔓 Insecure	View
2026-06-22 03:56:07	1166ms	0 NS 0 A 0 MX	❓ Unknown	View
2026-06-17 15:24:12	869ms	3 NS 1 A 1 MX	🔓 Insecure	View