okofamilien.dk

Records from scan: 2026-10-09 03:32:13 · 4181ms total · last checked 2026-10-17 22:07 (unchanged)

⬇ Zone File 📜 Timeline & History ⚡ Scan Now

okofamilien.dk is a .dk domain served by 2 nameservers (ns.dandomain.dk, ns2.dandomain.dk). It was registered on 7 July 2017 (WHOIS) and was already in the .dk zone when our tracking began on 16 June 2026. Its website address 185.221.38.134 is hosted by team.blue Denmark A/S (AS48854) in Denmark. Mail is handled by okofamilien-dk.mail.protection.outlook.com. The zone is DNSSEC-signed and validates, publishes a DMARC policy and has no IPv6 address. Below are all of its DNS records from our latest scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

2 records 62ms

Nameserver	IP addresses	PTR	ASN / ISP
ns.dandomain.dk	185.25.141.3 2a02:2339:4006:109::dd	ns.dandomain.dk ns.dandomain.dk	AS48854 team.blue Denmark A/S AS48854 team.blue Denmark A/S
ns2.dandomain.dk	2a02:2339:1:108::dd:dd 91.197.248.66	ns2.dandomain.dk ns2.dandomain.dk	AS48854 team.blue Denmark A/S AS48854 team.blue Denmark A/S

🌍 A Records#

1 records 59ms

IP	TTL	PTR	ASN	ISP / Org	CIDR	Country	City
185.221.38.134	120s	s1c9lb1.shopfactory.io	AS48854	team.blue Denmark A/S	185.221.36.0/22	🇩🇰 Denmark	—

📧 MX Records#

1 records 243ms

Priority	TTL	Mail Server	IP addresses	PTR	ASN
0	3600s	okofamilien-dk.mail.protection.outlook.com	2a01:111:f403:ca04::f 2a01:111:f403:ca09::24 2a01:111:f403:ca09::28 2a01:111:f403:ca21::c 52.101.103.39 52.101.185.24 52.101.68.21 52.101.91.159	mail-db7pr03cu00507.inbound.protection.outlook.com mail-am6pr02cu00204.inbound.protection.outlook.com mail-am6pr02cu00300.inbound.protection.outlook.com mail-matpr04cu00204.inbound.protection.outlook.com mail-miypr05cu00207.inbound.protection.outlook.com mail-zrxpr07cu00100.inbound.protection.outlook.com mail-db4pr02cu00205.inbound.protection.outlook.com mail-matpr04cu00207.inbound.protection.outlook.com	AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation

📧 Autodiscover / Autoconfig#

Service	CNAME / IP
🔷 Autodiscover	autodiscover.outlook.com → 52.98.154.152
🔶 Autoconfig	185.221.38.134

🔷 AAAA Records (IPv6)#

✗ No AAAA records — IPv6 not configured

🔐 HTTPS Records#

✗ No HTTPS RR — no SVCB/HTTPS service binding

📝 TXT Records#

7 records 556ms

TXT Record
ca3-73dc58da832646408e4139a804ea6e2d
ca3-93b6024f2b144fd7b5fc9451fc80e32d
google-site-verification=iGJzBtH_2cSHUFQMrwZf8bS6yGPmhwpj3baUYLa7P8o
google-site-verification=vtzsncddybcvopdezVBgTELsZ6sDNz_i5pn_cDsGSWg
google-site-verification=zP34V6Q_BM0WdESU1DN5B0kwtJUR0at-M23CB9-0GR8
klaviyo-site-verification=S33SeR
v=spf1 a mx include:relay.mailchannels.net include:spf.protection.outlook.com include:spf.dandomain.dk include:amazonses.com ~all

✉️ SPF#

Policy	Record (okofamilien.dk)
~all (soft fail)	v=spf1 a mx include:relay.mailchannels.net include:spf.protection.outlook.com include:spf.dandomain.dk include:amazonses.com ~all

📨 DMARC#

Policy	Record (_dmarc.okofamilien.dk)
p=reject	v=DMARC1;p=reject;rua=mailto:status@userit.dk

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

✗ No CAA records — any CA may issue certificates

🧩 Web & zone#

checked 2026-10-09 03:32:13

www	185.221.38.134 (AS48854) (address records, no CNAME)
www vs bare domain	Same network okofamilien.dk: 185.221.38.134 (AS48854) www.okofamilien.dk: 185.221.38.134 (AS48854)
Wildcard	Yes: any name under the zone resolves
Denial of existence	NSEC3 · 1 iteration · 1-byte salt RFC 9276 recommends 0 iterations and no salt
CDS / CDNSKEY	None 0 CDS, 0 CDNSKEY

✍️ DKIM keys#

1 found

Selector	CNAME	Key
selector1	selector1-okofamilien-dk._domainkey.okofamilien.onmicrosoft.com	RSA · ~1024 bit below 2048 bit

DKIM selectors can't be listed, so we check the common ones (Microsoft 365, Google, Mailchimp, SendGrid, generic). Keys under other selectors aren't shown.

🔎 SPF check#

zone-wide SPF report

DNS lookups: 8/10 · policy: ~all

warn 8 of the 10 allowed DNS lookups used: one more include can break SPF

🔏 ACME Challenge#

Type	Name	Value
CNAME	_acme-challenge.okofamilien.dk	okofamilien.dk.kinstavalidation.app
TXT	okofamilien.dk.kinstavalidation.app	2bt5tF45TrAZuQ1Kde98N8ZFrROvkfCKRKNQC1G3IuY
TXT	okofamilien.dk.kinstavalidation.app	cnxTRtbGeMl30DVv77qn5c0cvE09i1oPxcCKQmOPLoU

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

374ms

Check	Result
Validation Status	🔒 Secure
AD Flag (resolver validates)	✓ Set
DS Record	✓ Found
DNSKEY Record	✓ Found
Flags	fully validated

🏷️ SOA#

89ms

Field	Value
Serial	2026100801
Primary NS (MNAME)	ns.dandomain.dk
Responsible (RNAME)	hostmaster@dandomain.dk
Refresh	14400s
Retry	3600s
Expire	1209600s
Minimum (neg-cache TTL)	300s

📋 Registration#

WHOIS fetched 2026-10-09 03:52:41

Field	Value
Registrar	DANDOMAIN A/S
Registered	2017-07-07
Expires	2027-07-31 (285d)

📋 WHOIS#

⏱️ Lookup Timing#

62ms

59ms

243ms

AAAA

129ms

TXT

556ms

CAA

123ms

HTTPS

86ms

TLSA

915ms

SOA

89ms

MTA-STS

259ms

DNSSEC

374ms

SRV

282ms

Total

4181ms

🕐 Scan History#

Scanned At	Duration	Records	DNSSEC
2026-10-09 03:32:13 shown	4181ms	2 NS 1 A 1 MX	🔒 Secure
2026-08-25 22:45:55	1370ms	2 NS 1 A 1 MX	🔒 Secure
2026-07-03 08:10:29	808ms	2 NS 1 A 1 MX	🔒 Secure
2026-06-26 14:47:42	2017ms	2 NS 1 A 1 MX	🔒 Secure
2026-06-17 15:09:48	689ms	2 NS 1 A 1 MX	❓ Unknown