onwater.dk DNS records

🖥️ Nameservers2 records 50ms

Nameserver	IP addresses	PTR	ASN / ISP
dns1.stair.se	213.136.41.67	h-213-136-41-67.A137.corp.bahnhof.se	AS8473 Bahnhof AB
dns2.stair.se	46.101.116.239	—	AS14061 DigitalOcean, LLC

🌍 A Records1 records 51ms

IP	TTL	PTR	ASN	ISP / Org	CIDR	Country	City
23.227.38.65	3600s	myshopify.com	AS13335	Cloudflare, Inc.	23.227.38.0/23	🇨🇦 Canada	Ottawa

📧 MX Records1 records 66ms

Priority	TTL	Mail Server	IP addresses	PTR	ASN
0	3600s	Onwater-se.mail.protection.outlook.com	2a01:111:f403:ca04::9 2a01:111:f403:ca09::28 2a01:111:f403:ca09::6 2a01:111:f403:ca09::e 52.101.68.25 52.101.68.5 52.101.73.126 52.101.73.24	mail-db7pr03cu00601.inbound.protection.outlook.com mail-am6pr02cu00300.inbound.protection.outlook.com mail-am4pr0401cu00106.inbound.protection.outlook.com mail-am7pr05cu00206.inbound.protection.outlook.com mail-db8pr02cu00101.inbound.protection.outlook.com mail-du2pr03cu00105.inbound.protection.outlook.com mail-am8pr83cu00106.inbound.protection.outlook.com mail-as8pr05cu00300.inbound.protection.outlook.com	AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation

🔷 AAAA Records (IPv6)

✗ No AAAA records — IPv6 not configured

🔐 HTTPS Records

✗ No HTTPS RR — no SVCB/HTTPS service binding

📝 TXT Records2 records 308ms

TXT Record
MS=ms66400017
v=spf1 a mx include:spf.protection.outlook.com ip4:213.136.41.66 ip4:213.136.41.67 ip4:213.136.41.68 ip4:213.136.41.71 ip4:213.136.41.69 ip4:216.146.33.5 include:spf.gansend.com -all

✉️ SPF

Policy	Record (onwater.dk)
-all (hard fail)	v=spf1 a mx include:spf.protection.outlook.com ip4:213.136.41.66 ip4:213.136.41.67 ip4:213.136.41.68 ip4:213.136.41.71 ip4:213.136.41.69 ip4:216.146.33.5 include:spf.gansend.com -all

📨 DMARC

✗ No DMARC record — mail spoofing not restricted

📬 MTA-STS

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records

✗ No CAA records — any CA may issue certificates

🔗 TLSA / DANE

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC2084ms

Check	Result
Validation Status	🔓 Insecure
AD Flag (resolver validates)	✗ Not set
DS Record	✗ Not found
DNSKEY Record	✗ Not found
Flags	unsigned answer

🏷️ SOA61ms

Field	Value
Serial	2020022503
Primary NS (MNAME)	dns1.stair.se
Responsible (RNAME)	tor@eurostair.com
Refresh	900s
Retry	600s
Expire	86400s
Minimum (neg-cache TTL)	3600s

📋 Registration

✗ No registration data — collected automatically when SOA serial changes

📋 WHOIS

⏱️ Lookup Timing

NS

50ms

A

51ms

MX

66ms

AAAA

66ms

TXT

308ms

CAA

49ms

HTTPS

55ms

TLSA

309ms

SOA

61ms

MTA-STS

75ms

DNSSEC

2084ms

SRV

91ms

Total

15092ms

🕐 Scan History

Scanned At	Duration	Records	DNSSEC
2026-08-26 10:57:58	15092ms	2 NS 1 A 1 MX	🔓 Insecure	View
2026-08-21 23:46:19	13262ms	2 NS 1 A 1 MX	🔓 Insecure	View
2026-08-16 15:02:35	12167ms	2 NS 1 A 1 MX	🔓 Insecure	View
2026-08-07 02:02:59	11063ms	2 NS 1 A 1 MX	🔓 Insecure	View
2026-07-25 23:46:14	15297ms	2 NS 1 A 1 MX	🔓 Insecure	View
2026-07-16 11:00:21	20151ms	2 NS 1 A 1 MX	🔓 Insecure	View
2026-06-27 10:59:37	10931ms	2 NS 1 A 1 MX	🔓 Insecure	View
2026-06-26 09:32:09	10491ms	2 NS 1 A 1 MX	🔓 Insecure	View
2026-06-21 19:30:00	989ms	0 NS 0 A 0 MX	❓ Unknown	View
2026-06-20 16:28:41	6412ms	2 NS 1 A 1 MX	🔓 Insecure	View
2026-06-18 02:12:46	10947ms	2 NS 1 A 1 MX	🔓 Insecure	View