next.dk

📜 Historical scan 2026-09-02 17:56:06  ·  ← Latest scan
⬇ Zone File 📜 Timeline & History ⚡ Scan Now

next.dk is a .dk domain served by 4 nameservers (ns1-03.azure-dns.com, ns2-03.azure-dns.net, ns3-03.azure-dns.org and 1 more). It was already in the .dk zone when our tracking began on 16 June 2026. Its website address 20.105.216.22 is hosted by Microsoft Corporation (AS8075) in The Netherlands. Mail is handled by de-smtp-inbound-1.mimecast.com, de-smtp-inbound-2.mimecast.com. The zone is not DNSSEC-signed, publishes a DMARC policy and has no IPv6 address. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

4 records   55ms

🌍 A Records#

1 records   44ms

📧 MX Records#

2 records   37ms

📧 Autodiscover / Autoconfig#

ServiceCNAME / IP
🔷 Autodiscoverautodiscover.outlook.com → 40.104.116.8

🔷 AAAA Records (IPv6)#

✗ No AAAA records — IPv6 not configured

🔐 HTTPS Records#

✗ No HTTPS RR — no SVCB/HTTPS service binding

🔌 SRV Records#

2 records   76ms

📝 TXT Records#

8 records   210ms
TXT Record
facebook-domain-verification=mewy9kcy91uytkro2msw6c5sib9a9l
g0uNQpTGCuPmZ2sCkGaJXtnbRaosKS9NIMf+iRlsfJLcs7bIGz4tq+ojsUUYYsLV7sFRpAGNdWVAMag9EgxR3Q==
google-site-verification=N3bTsh6E6fxQdGMSDedsYpnldN7qMjkGlLIswABim4c
MS=ms21630559
MS=ms43161341
MS=ms82687571
O3gxPjqqJPtnNVBXkBgW7p81d1ih9eRWnRbvqJFPyRe0jga2mSpuRy0kkxUAsJgrjlV5e+bhg2/kX/A7fZZjFw==
v=spf1 redirect=_ssvcn9tct.sdmarc.net

✉️ SPF#

PolicyRecord (next.dk)
redirect=_ssvcn9tct.sdmarc.net v=spf1 redirect=_ssvcn9tct.sdmarc.net

📨 DMARC#

PolicyRecord (_dmarc.next.dk)
p=reject v=DMARC1; p=reject; rua=mailto:a.svcn9tct@sdmarc.net; adkim=r; aspf=r

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

✗ No CAA records — any CA may issue certificates

🧩 Web & zone#

latest probe, not this scan · checked 2026-10-09 09:46:55

✍️ DKIM keys#

3 found
SelectorCNAMEKey
k1 dkim.mcsv.net RSA · ~1024 bit below 2048 bit
s1 s1.domainkey.u12613262.wl013.sendgrid.net RSA · ~2048 bit
s2 s2.domainkey.u12613262.wl013.sendgrid.net RSA · ~1024 bit below 2048 bit

DKIM selectors can't be listed, so we check the common ones (Microsoft 365, Google, Mailchimp, SendGrid, generic). Keys under other selectors aren't shown.

🔎 SPF check#

zone-wide SPF report

DNS lookups: 11/10 · policy: ~all

  • error 11 DNS lookups: the limit is 10, so a receiver whose evaluation gets past the 10th returns permerror (SPF fails)

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

86ms
CheckResult
Validation Status🔓 Insecure
AD Flag (resolver validates)✗ Not set
DS Record✗ Not found
DNSKEY Record✗ Not found
Flagsunsigned answer

🏷️ SOA#

0ms
FieldValue
Serial1
Primary NS (MNAME)ns1-03.azure-dns.com
Responsible (RNAME)azuredns-hostmaster@microsoft.com
Refresh3600s
Retry300s
Expire2419200s
Minimum (neg-cache TTL)300s

📋 Registration#

✗ No registration data yet — queued for a WHOIS lookup
📋 WHOIS#

⏱️ Lookup Timing#

NS
55ms
A
44ms
MX
37ms
AAAA
50ms
TXT
210ms
CAA
50ms
HTTPS
58ms
TLSA
220ms
SOA
0ms
MTA-STS
78ms
DNSSEC
86ms
SRV
76ms
Total
903ms

🕐 Scan History#

Scanned AtDurationRecordsDNSSEC
2026-10-09 09:46:55 1134ms 4 NS 1 A 2 MX 🔓 Insecure
2026-09-08 10:31:50 751ms 4 NS 1 A 2 MX 🔓 Insecure
2026-09-02 17:56:06 shown 903ms 4 NS 1 A 2 MX 🔓 Insecure
2026-07-02 18:18:10 3273ms 4 NS 1 A 2 MX 🔓 Insecure
2026-06-18 08:28:37 1084ms 4 NS 1 A 2 MX 🔓 Insecure
dhd.dk [/] search Domains, Hosts & DNS — .dk zone