nesec.dk DNS records

🖥️ Nameservers2 records 44ms

Nameserver	IP addresses	PTR	ASN / ISP
ns01.one.com	195.206.121.10 2001:67c:28cc::10	ns01.one.com ns01.one.com	AS197495 One.com A/S AS197495 One.com A/S
ns02.one.com	185.10.11.10 2001:67c:3c0::10	ns02.one.com ns02.one.com	AS51468 One.com A/S AS51468 One.com A/S

🌍 A Records

🌍

No A records found

📧 MX Records1 records 35ms

Priority	TTL	Mail Server	IP addresses	PTR	ASN
5	3600s	nesec-dk.mail.protection.outlook.com	2a01:111:f403:ca04::1 2a01:111:f403:ca04::4 2a01:111:f403:ca09::1 2a01:111:f403:ca09::b 52.101.68.27 52.101.68.29 52.101.68.8 52.101.73.19	mail-db7pr03cu00401.inbound.protection.outlook.com mail-db4pr02cu00204.inbound.protection.outlook.com mail-as9pr07cu00301.inbound.protection.outlook.com mail-am7pr05cu00103.inbound.protection.outlook.com mail-db7pr03cu00503.inbound.protection.outlook.com mail-dbapr03cu00105.inbound.protection.outlook.com mail-du0pr03cu00100.inbound.protection.outlook.com mail-as8pr04cu00803.inbound.protection.outlook.com	AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation

📧 Autodiscover / Autoconfig

Service	CNAME / IP
🔷 Autodiscover	autodiscover.outlook.com → 40.104.116.24

🔷 AAAA Records (IPv6)

✗ No AAAA records — IPv6 not configured

🔐 HTTPS Records

✗ No HTTPS RR — no SVCB/HTTPS service binding

📝 TXT Records3 records 195ms

TXT Record
google-site-verification=4iyQodWLq9D0iDkvHzXKH5GFdNkQLXFIMPgiTS_SHR4
MS=ms57383180
v=spf1 include:spf.protection.outlook.com -all

✉️ SPF

Policy	Record (nesec.dk)
-all (hard fail)	v=spf1 include:spf.protection.outlook.com -all

📨 DMARC

✗ No DMARC record — mail spoofing not restricted

📬 MTA-STS

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records

✗ No CAA records — any CA may issue certificates

🔗 TLSA / DANE

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC59ms

Check	Result
Validation Status	⚠️ Bogus
AD Flag (resolver validates)	✗ Not set
DS Record	✓ Found
DNSKEY Record	✓ Found
Flags	broken trust chain resolving 'nesec.dk/DS/IN': 127.0.0.1#53

🏷️ SOA105ms

Field	Value
Serial	2026061101
Primary NS (MNAME)	ns01.one.com
Responsible (RNAME)	hostmaster@one.com
Refresh	14400s
Retry	3600s
Expire	1209600s
Minimum (neg-cache TTL)	600s

📋 Registration

✗ No registration data — collected automatically when SOA serial changes

📋 WHOIS

⏱️ Lookup Timing

NS

44ms

A

36ms

MX

35ms

AAAA

35ms

TXT

195ms

CAA

34ms

HTTPS

35ms

TLSA

425ms

SOA

105ms

MTA-STS

37ms

DNSSEC

59ms

SRV

98ms

Total

985ms

🕐 Scan History

Scanned At	Duration	Records	DNSSEC
2026-08-17 00:24:06	3272ms	2 NS 1 A 1 MX	🔒 Secure	View
2026-08-13 02:14:08	1001ms	2 NS 0 A 1 MX	🔒 Secure	View
2026-07-18 15:19:09	2396ms	2 NS 0 A 1 MX	🔒 Secure	View
2026-07-14 00:27:00	977ms	2 NS 0 A 1 MX	🔒 Secure	View
2026-07-04 11:42:44	2186ms	2 NS 0 A 1 MX	🔒 Secure	View
2026-06-24 07:54:10	985ms	2 NS 0 A 1 MX	⚠️ Bogus	View
2026-06-18 02:12:04	2816ms	2 NS 0 A 1 MX	🔒 Secure	View