ncsc.dk DNS records

🖥️ Nameservers5 records 93ms

Nameserver	IP addresses	PTR	ASN / ISP
ns1.brandshelter.com	193.227.117.9 2a04:2b00:14cc::9	ns1.brandshelter.com —	AS1921 ipcom GmbH AS1921 ipcom GmbH
ns2.brandshelter.de	194.50.187.11 2a04:2b00:14dd::11	ns2.brandshelter.de ns11.j.centralnic-dns.com	AS207021 ipcom GmbH AS207021 ipcom GmbH
ns3.brandshelter.info	194.0.182.12 2a04:2b00:14ee::12	ns3.brandshelter.info ns12.k.centralnic-dns.com	AS1921 ipcom GmbH AS1921 ipcom GmbH
ns4.brandshelter.net	193.227.117.10 2a04:2b00:14cc::10	ns4.brandshelter.net ns10.i.centralnic-dns.com	AS1921 ipcom GmbH AS1921 ipcom GmbH
ns5.brandshelter.us	194.50.187.14 2a04:2b00:14dd::14	ns5.brandshelter.us ns14.j.centralnic-dns.com	AS207021 ipcom GmbH AS207021 ipcom GmbH

🌍 A Records2 records 83ms

IP	TTL	PTR	ASN	ISP / Org	CIDR	Country	City
5.22.145.121	600s	relay.mail-forwarder.io	AS16509	Amazon.com, Inc.	5.22.145.0/24	🇩🇪 Germany	—
5.22.145.16	600s	relay.mail-forwarder.io	AS16509	Amazon.com, Inc.	5.22.145.0/24	🇩🇪 Germany	—

📧 MX Records1 records 99ms

Priority	TTL	Mail Server	IP addresses	PTR	ASN
10	14400s	custmx.cscdns.net	198.58.121.58	198-58-121-58.ip.linodeusercontent.com	AS63949 Akamai Connected Cloud

📧 Autodiscover / Autoconfig

Service	CNAME / IP
🔷 Autodiscover	5.22.145.121
🔶 Autoconfig	5.22.145.16

🔷 AAAA Records (IPv6)2 records 107ms

IPv6 Address	TTL	PTR	ASN	ISP / Org	CIDR	Country	City
2a00:18e0:5:2:7577:4e4d:413b:f507	600s	relay.mail-forwarder.io	AS16509	Amazon.com, Inc.	2a00:18e0:5:0:0:0:0:0/48	🇩🇪 Germany	—
2a00:18e0:5:3:dfe2:c743:85aa:61bc	600s	relay.mail-forwarder.io	AS16509	Amazon.com, Inc.	2a00:18e0:5:0:0:0:0:0/48	🇩🇪 Germany	—

🔐 HTTPS Records

✗ No HTTPS RR — no SVCB/HTTPS service binding

📝 TXT Records1 records 404ms

TXT Record
v=spf1 -all

✉️ SPF

Policy	Record (ncsc.dk)
-all (hard fail)	v=spf1 -all

📨 DMARC

Policy	Record (_dmarc.ncsc.dk)
p=reject	v=DMARC1; p=reject; sp=reject; rua=mailto:dmarc-rua@fe-ddis.dk; ruf=mailto:dmarc-ruf@fe-ddis.dk; fo=1; pct=100

📬 MTA-STS

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records

✗ No CAA records — any CA may issue certificates

🔗 TLSA / DANE

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC210ms

Check	Result
Validation Status	🔒 Secure
AD Flag (resolver validates)	✓ Set
DS Record	✓ Found
DNSKEY Record	✓ Found
Flags	fully validated

🏷️ SOA0ms

Field	Value
Serial	2025035770
Primary NS (MNAME)	ns1.brandshelter.com
Responsible (RNAME)	tech@brandshelter.com
Refresh	10800s
Retry	3600s
Expire	604800s
Minimum (neg-cache TTL)	300s

📋 Registration

✗ No registration data — collected automatically when SOA serial changes

📋 WHOIS

⏱️ Lookup Timing

NS

93ms

A

83ms

MX

99ms

AAAA

107ms

TXT

404ms

CAA

107ms

HTTPS

85ms

TLSA

8082ms

SOA

0ms

MTA-STS

204ms

DNSSEC

210ms

SRV

167ms

Total

10300ms

🕐 Scan History

Scanned At	Duration	Records	DNSSEC
2026-08-27 16:19:06	654ms	5 NS 2 A 1 MX	🔒 Secure	View
2026-08-20 09:53:32	10300ms	5 NS 2 A 1 MX	🔒 Secure	View
2026-08-13 17:20:29	5159ms	5 NS 2 A 1 MX	🔒 Secure	View
2026-08-06 22:01:46	1190ms	5 NS 2 A 1 MX	🔒 Secure	View
2026-08-01 09:31:47	1173ms	5 NS 2 A 1 MX	🔒 Secure	View
2026-07-24 02:59:28	1211ms	5 NS 2 A 1 MX	🔒 Secure	View
2026-07-17 22:56:29	1350ms	5 NS 2 A 1 MX	🔒 Secure	View
2026-07-10 04:12:15	2556ms	5 NS 2 A 1 MX	🔒 Secure	View
2026-07-03 15:16:20	6136ms	5 NS 2 A 1 MX	🔒 Secure	View
2026-06-28 14:47:11	1093ms	5 NS 2 A 1 MX	🔒 Secure	View
2026-06-25 09:37:18	1037ms	5 NS 2 A 1 MX	🔒 Secure	View
2026-06-24 22:47:51	902ms	5 NS 2 A 1 MX	🔒 Secure	View
2026-06-21 02:34:39	809ms	5 NS 2 A 1 MX	🔒 Secure	View
2026-06-20 19:51:38	1256ms	5 NS 2 A 1 MX	🔒 Secure	View
2026-06-17 23:06:38	1205ms	5 NS 2 A 1 MX	🔒 Secure	View