nexthair.dk

Records from scan: 2026-10-01 08:40:26  ·  1446ms total  ·  last checked 2026-10-22 17:32 (unchanged)
⬇ Zone File 📜 Timeline & History ⚡ Scan Now

nexthair.dk is a .dk domain served by 2 nameservers (ns7.bricksite.net, ns8.bricksite.net). It was registered on 7 June 2023 (WHOIS) and was already in the .dk zone when our tracking began on 16 June 2026. Its website address 178.33.221.84 is hosted by OVH SAS (AS16276) in France. Mail is handled by mx.nexthair.dk.cust.a.hostedemail.com. The zone is not DNSSEC-signed, has no DMARC policy and has no IPv6 address. Below are all of its DNS records from our latest scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

2 records   59ms

🌍 A Records#

1 records   61ms
IPTTLPTRASNISP / OrgCIDRCountryCity
178.33.221.84 3600s ip84.ip-178-33-221.eu AS16276 OVH SAS 178.32.0.0/15 🇫🇷 France —

📧 MX Records#

1 records   62ms

📧 Autodiscover / Autoconfig#

ServiceCNAME / IP
🔷 Autodiscover178.33.221.84
🔶 Autoconfig178.33.221.84

🔷 AAAA Records (IPv6)#

✗ No AAAA records — IPv6 not configured

🔐 HTTPS Records#

✗ No HTTPS RR — no SVCB/HTTPS service binding

📝 TXT Records#

2 records   412ms
TXT Record
v=spf1 include:_spf.hostedemail.com ~all
v=spf1 include:spf.protection.outlook.com ~all

✉️ SPF#

⚠ Multiple SPF records — RFC 7208 §4.5 violation (receivers must treat this as permerror)
PolicyRecord (nexthair.dk)
~all (soft fail) v=spf1 include:_spf.hostedemail.com ~all
~all (soft fail) v=spf1 include:spf.protection.outlook.com ~all

📨 DMARC#

✗ No DMARC record — mail spoofing not restricted

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

✗ No CAA records — any CA may issue certificates

🧩 Web & zone#

checked 2026-10-11 19:43:43
www178.33.221.84 (AS16276) (address records, no CNAME)
www vs bare domainSame network
nexthair.dk: 178.33.221.84 (AS16276)
www.nexthair.dk: 178.33.221.84 (AS16276)
WildcardYes: any name under the zone resolves

🔎 SPF check#

zone-wide SPF report

DNS lookups: 1/10 · policy: ~all

  • error 2 SPF records: receivers must treat that as a permanent error (RFC 7208 §4.5)

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

78ms
CheckResult
Validation Status🔓 Insecure
AD Flag (resolver validates)✗ Not set
DS Record✗ Not found
DNSKEY Record✗ Not found
Flagsunsigned answer

🏷️ SOA#

64ms
FieldValue
Serial2023060811
Primary NS (MNAME)ns7.bricksite.net
Responsible (RNAME)hostmaster@bricksite.net
Refresh10800s
Retry3600s
Expire604800s
Minimum (neg-cache TTL)3600s

📋 Registration#

WHOIS fetched 2026-10-24 13:46:02
FieldValue
RegistrarPunktum dk A/S (direct)
Registered2023-06-07
Expires2027-06-06 (224d)

🔗 Same registrant#

1 domain

Other .dk domains whose WHOIS registrant has the same name and postal address. Matched on a keyed hash: the registrant's details are not stored or shown. Covers only domains whose WHOIS we have fetched (refreshed about monthly).

DomainRegistrar
h59.dkSimply.com A/S
📋 WHOIS#

⏱️ Lookup Timing#

NS
59ms
A
61ms
MX
62ms
AAAA
51ms
TXT
412ms
CAA
72ms
HTTPS
60ms
TLSA
727ms
SOA
64ms
MTA-STS
96ms
DNSSEC
78ms
SRV
127ms
Total
1446ms

🕐 Scan History#

Scanned AtDurationRecordsDNSSEC
2026-10-01 08:40:26 shown 1446ms 2 NS 1 A 1 MX 🔓 Insecure
2026-09-26 18:07:01 1503ms 2 NS 1 A 1 MX 🔓 Insecure
2026-09-15 05:39:14 1366ms 2 NS 1 A 1 MX 🔓 Insecure
2026-07-02 13:00:10 1338ms 2 NS 1 A 1 MX 🔓 Insecure
2026-06-18 00:33:49 1587ms 2 NS 1 A 1 MX 🔓 Insecure
dhd.dk [/] search Domains, Hosts & DNS — .dk zone