nfi.dk DNS records

🖥️ Nameservers2 records 37ms

Nameserver	IP addresses	PTR	ASN / ISP
ns1.mkrdns.dk	87.63.98.194	ns1.mkrdns.dk	AS3292 TDC Holding A/S
ns2.swislock.dk	2001:6c8:119::2 87.63.98.178	ns2.swislock.dk ns2.swislock.dk	AS3292 TDC Holding A/S AS3292 TDC Holding A/S

🌍 A Records1 records 52ms

IP	TTL	PTR	ASN	ISP / Org	CIDR	Country	City
165.227.140.129	600s	do1.dudal.com	AS14061	DigitalOcean, LLC	165.227.0.0/16	🇩🇪 Germany	Frankfurt am Main

📧 MX Records2 records 57ms

Priority	TTL	Mail Server	IP addresses	PTR	ASN
10	600s	mx-01-eu-central-1.prod.hydra.sophos.com	18.192.254.67 3.125.178.49	ec2-18-192-254-67.eu-central-1.compute.amazonaws.com ec2-3-125-178-49.eu-central-1.compute.amazonaws.com	AS16509 Amazon.com, Inc. AS16509 Amazon.com, Inc.
20	600s	mx-02-eu-central-1.prod.hydra.sophos.com	18.192.254.67 3.125.178.49	ec2-18-192-254-67.eu-central-1.compute.amazonaws.com ec2-3-125-178-49.eu-central-1.compute.amazonaws.com	AS16509 Amazon.com, Inc. AS16509 Amazon.com, Inc.

📧 Autodiscover / Autoconfig

Service	CNAME / IP
🔷 Autodiscover	autodiscover.outlook.com → 40.104.116.56

🔷 AAAA Records (IPv6)

✗ No AAAA records — IPv6 not configured

🔐 HTTPS Records

✗ No HTTPS RR — no SVCB/HTTPS service binding

🔌 SRV Records1 records 93ms

Service	Priority	Weight	Port	Target
_sipfederationtls._tcp	1	100	5061	sipfed.online.lync.com

📝 TXT Records4 records 263ms

TXT Record
2bdp384scmclm5rgqekqs94lk9
2utqkpl802pefko3u64l4l0a83
sophos-domain-verification=4d9619b20f914d0609c9dc736563a1fc6e7819ed
v=spf1 ip4:5.103.31.98 include:spf.protection.outlook.com include:_spf.prod.hydra.sophos.com -all

✉️ SPF

Policy	Record (nfi.dk)
-all (hard fail)	v=spf1 ip4:5.103.31.98 include:spf.protection.outlook.com include:_spf.prod.hydra.sophos.com -all

📨 DMARC

Policy	Record (_dmarc.nfi.dk)
p=reject	v=DMARC1; p=reject; rua=mailto:67863f2a1e20c@dmarc-dk.centerasecurity.com;

📬 MTA-STS

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records

✗ No CAA records — any CA may issue certificates

🔗 TLSA / DANE

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC104ms

Check	Result
Validation Status	🔓 Insecure
AD Flag (resolver validates)	✗ Not set
DS Record	✗ Not found
DNSKEY Record	✗ Not found
Flags	unsigned answer

🏷️ SOA0ms

Field	Value
Serial	2026071701
Primary NS (MNAME)	ns1.mkrdns.dk
Responsible (RNAME)	mkr@mkr.dk
Refresh	86400s
Retry	600s
Expire	2419200s
Minimum (neg-cache TTL)	3600s

📋 Registration

✗ No registration data — collected automatically when SOA serial changes

📋 WHOIS

⏱️ Lookup Timing

NS

37ms

A

52ms

MX

57ms

AAAA

76ms

TXT

263ms

CAA

76ms

HTTPS

64ms

TLSA

135ms

SOA

0ms

MTA-STS

60ms

DNSSEC

104ms

SRV

93ms

Total

805ms

🕐 Scan History

Scanned At	Duration	Records	DNSSEC
2026-08-25 18:16:21	805ms	2 NS 1 A 2 MX	🔓 Insecure	View
2026-08-25 11:07:37	1353ms	2 NS 1 A 2 MX	🔓 Insecure	View
2026-07-18 05:55:06	9489ms	2 NS 1 A 2 MX	❓ Unknown	View
2026-07-03 02:22:40	9641ms	2 NS 1 A 2 MX	🔓 Insecure	View
2026-06-28 02:22:29	1581ms	2 NS 1 A 2 MX	🔓 Insecure	View
2026-06-26 07:46:49	857ms	2 NS 1 A 2 MX	🔓 Insecure	View
2026-06-22 06:56:17	1022ms	0 NS 0 A 0 MX	❓ Unknown	View
2026-06-21 16:11:47	617ms	2 NS 1 A 2 MX	🔓 Insecure	View
2026-06-21 01:16:38	694ms	2 NS 1 A 2 MX	🔓 Insecure	View
2026-06-20 23:23:54	946ms	0 NS 0 A 0 MX	❓ Unknown	View
2026-06-20 17:42:43	2304ms	2 NS 1 A 2 MX	🔓 Insecure	View
2026-06-18 05:53:20	2736ms	2 NS 1 A 2 MX	🔓 Insecure	View