nccsign.dk

📜 Historical scan 2026-09-14 20:40:26 · ← Latest scan

⬇ Zone File 📜 Timeline & History ⚡ Scan Now

nccsign.dk is a .dk domain served by 2 nameservers (ns01.one.com, ns02.one.com). It was registered on 7 December 2017 (WHOIS) and was already in the .dk zone when our tracking began on 16 June 2026. Mail is handled by aspmx.l.google.com, alt1.aspmx.l.google.com and 3 more. The zone is DNSSEC-signed and validates, has no DMARC policy and has no IPv6 address. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

2 records 30ms

Nameserver	IP addresses	PTR	ASN / ISP
ns01.one.com	195.206.121.10 2001:67c:28cc::10	ns01.one.com ns01.one.com	AS197495 One.com A/S AS197495 One.com A/S
ns02.one.com	185.10.11.10 2001:67c:3c0::10	ns02.one.com ns02.one.com	AS51468 One.com A/S AS51468 One.com A/S

🌍 A Records#

🌍

No A records found

📧 MX Records#

5 records 51ms

Priority	TTL	Mail Server	IP addresses	PTR	ASN
1	3600s	aspmx.l.google.com	209.85.233.26 2a00:1450:4010:c0e::1b 2a00:1450:4010:c0e::1b	lr-in-f26.1e100.net lu-in-x1b.1e100.net lu-in-f27.1e100.net	AS15169 Google LLC AS15169 Google LLC AS15169 Google LLC
5	43200s	alt1.aspmx.l.google.com	192.178.158.26 2404:6800:4013:813::1b	lcdels-in-f26.1e100.net lcdels-in-f27.1e100.net	AS15169 Google LLC AS15169 Google LLC
5	3600s	alt2.aspmx.l.google.com	173.194.41.27 173.194.41.27 2404:6800:4001:c01::1a	mad01s14-in-f27.1e100.net yukulwh-in-f27.1e100.net yukulwh-in-f26.1e100.net	AS15169 Google LLC AS15169 Google LLC AS15169 Google LLC
10	3600s	alt3.aspmx.l.google.com	172.253.158.26 2404:6800:4003:c26::1b	so-in-f26.1e100.net so-in-f27.1e100.net	AS15169 Google LLC AS15169 Google LLC
10	3600s	alt4.aspmx.l.google.com	108.177.125.26 2404:6800:4008:c01::1b	tp-in-f26.1e100.net tp-in-f27.1e100.net	AS15169 Google LLC AS15169 Google LLC

🔷 AAAA Records (IPv6)#

✗ No AAAA records — IPv6 not configured

🔐 HTTPS Records#

✗ No HTTPS RR — no SVCB/HTTPS service binding

📝 TXT Records#

2 records 145ms

TXT Record
google-site-verification=2fo3gNFKiMbao3nYxQDPBj9-569IRPRTm7o4b4SJdLs
v=spf1 include:_spf.mailersend.net include:_spf.google.com ~all

✉️ SPF#

Policy	Record (nccsign.dk)
~all (soft fail)	v=spf1 include:_spf.mailersend.net include:_spf.google.com ~all

📨 DMARC#

✗ No DMARC record — mail spoofing not restricted

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

✗ No CAA records — any CA may issue certificates

🧩 Web & zone#

latest probe, not this scan · checked 2026-10-11 12:56:53

www	46.30.211.38 (AS51468) (address records, no CNAME)
www vs bare domain	Only www resolves nccsign.dk: no address www.nccsign.dk: 46.30.211.38 (AS51468) (all like this)
Wildcard	No
Denial of existence	NSEC3 · 0 iterations · no salt RFC 9276 ✓
CDS / CDNSKEY	None 0 CDS, 0 CDNSKEY

✍️ DKIM keys#

2 found

Selector	CNAME	Key
s1	s1.domainkey.u22074007.wl008.sendgrid.net	RSA · ~2048 bit
s2	s2.domainkey.u22074007.wl008.sendgrid.net	RSA · ~2048 bit

DKIM selectors can't be listed, so we check the common ones (Microsoft 365, Google, Mailchimp, SendGrid, generic). Keys under other selectors aren't shown.

🔎 SPF check#

zone-wide SPF report

DNS lookups: 2/10 · policy: ~all

No problems found

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

72ms

Check	Result
Validation Status	🔒 Secure
AD Flag (resolver validates)	✓ Set
DS Record	✓ Found
DNSKEY Record	✓ Found
Flags	resolution failed: ncache nxrrset

🏷️ SOA#

0ms

Field	Value
Serial	2026091001
Primary NS (MNAME)	ns01.one.com
Responsible (RNAME)	hostmaster@one.com
Refresh	14400s
Retry	3600s
Expire	1209600s
Minimum (neg-cache TTL)	600s

📋 Registration#

WHOIS fetched 2026-10-11 13:33:18

Field	Value
Registrar	ONE.COM A/S
Registered	2017-12-07
Expires	2027-12-31 (431d)

🔗 Same registrant#

1 domain

Other .dk domains whose WHOIS registrant has the same name and postal address. Matched on a keyed hash: the registrant's details are not stored or shown. Covers only domains whose WHOIS we have fetched (refreshed about monthly).

Domain	Registrar
lanconsult.dk	ONE.COM A/S

📋 WHOIS#

⏱️ Lookup Timing#

30ms

24ms

51ms

AAAA

33ms

TXT

145ms

CAA

40ms

HTTPS

41ms

TLSA

98ms

SOA

0ms

MTA-STS

55ms

DNSSEC

72ms

SRV

56ms

Total

618ms

🕐 Scan History#

Scanned At	Duration	Records	DNSSEC
2026-10-11 12:56:53	731ms	2 NS 0 A 5 MX	🔒 Secure
2026-10-09 10:46:25	840ms	2 NS 0 A 5 MX	🔒 Secure
2026-09-25 03:28:11	4564ms	2 NS 0 A 5 MX	🔒 Secure
2026-09-14 20:40:26 shown	618ms	2 NS 0 A 5 MX	🔒 Secure
2026-09-11 09:35:11	878ms	2 NS 0 A 5 MX	🔒 Secure
2026-09-04 06:41:32	928ms	2 NS 0 A 5 MX	🔒 Secure
2026-08-12 03:37:16	1716ms	2 NS 0 A 5 MX	🔒 Secure
2026-07-18 04:06:12	4165ms	2 NS 0 A 5 MX	🔒 Secure
2026-07-15 21:03:04	9378ms	2 NS 0 A 5 MX	🔒 Secure
2026-06-24 04:25:02	978ms	2 NS 0 A 5 MX	🔒 Secure
2026-06-22 19:07:25	682ms	2 NS 0 A 5 MX	🔒 Secure
2026-06-22 14:45:35	686ms	2 NS 0 A 5 MX	⚠️ Bogus
2026-06-21 10:02:42	470ms	2 NS 0 A 5 MX	🔒 Secure
2026-06-17 22:39:40	630ms	2 NS 0 A 5 MX	🔒 Secure