refreshit.dk

Records from scan: 2026-09-27 07:00:28  ·  9897ms total  ·  last checked 2026-10-17 02:21 (unchanged)
⬇ Zone File 📜 Timeline & History ⚡ Scan Now

refreshit.dk is a .dk domain served by 2 nameservers (ns1.mydomain.com, ns2.mydomain.com). It was already in the .dk zone when our tracking began on 16 June 2026. Its website address 66.96.149.32 is hosted by Newfold Digital, Inc. (AS29873) in United States. Mail is handled by mx.refreshit.dk. The zone is not DNSSEC-signed, has no DMARC policy and has no IPv6 address. Below are all of its DNS records from our latest scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

2 records   54ms

🌍 A Records#

1 records   49ms

📧 MX Records#

1 records   58ms

📧 Autodiscover / Autoconfig#

ServiceCNAME / IP
🔷 Autodiscover66.96.163.133
🔶 Autoconfig66.96.163.133

🔷 AAAA Records (IPv6)#

✗ No AAAA records — IPv6 not configured

🔐 HTTPS Records#

✗ No HTTPS RR — no SVCB/HTTPS service binding

📝 TXT Records#

1 records   650ms
TXT Record
v=spf1 ip4:66.96.128.0/18 include:websitewelcome.com ?all

✉️ SPF#

PolicyRecord (refreshit.dk)
?all (neutral) v=spf1 ip4:66.96.128.0/18 include:websitewelcome.com ?all

📨 DMARC#

✗ No DMARC record — mail spoofing not restricted

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

✗ No CAA records — any CA may issue certificates

🧩 Web & zone#

checked 2026-10-11 19:45:25
www66.96.149.32 (AS29873) (address records, no CNAME)
www vs bare domainSame network
refreshit.dk: 66.96.149.32 (AS29873)
www.refreshit.dk: 66.96.149.32 (AS29873)
WildcardYes: any name under the zone resolves

✍️ DKIM keys#

1 found
SelectorCNAMEKey
dkim cur.dkim.v.eigmail.net RSA · ~2048 bit test mode

DKIM selectors can't be listed, so we check the common ones (Microsoft 365, Google, Mailchimp, SendGrid, generic). Keys under other selectors aren't shown.

🔎 SPF check#

zone-wide SPF report

DNS lookups: 8/10 · policy: ?all

  • warn "?all" is neutral: it gives receivers no guidance, much like having no SPF
  • warn 8 of the 10 allowed DNS lookups used: one more include can break SPF

🔏 ACME Challenge#

TypeNameValue
CNAME _acme-challenge.refreshit.dk refreshit.dk.letsencrypt.vdeck.eigdyn.com

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

9076ms
CheckResult
Validation Status🔓 Insecure
AD Flag (resolver validates)✗ Not set
DS Record✗ Not found
DNSKEY Record✗ Not found
Flagsunsigned answer

🏷️ SOA#

0ms
FieldValue
Serial2013011648
Primary NS (MNAME)ns1.mydomain.com
Responsible (RNAME)dnsadmin@mydomain.com
Refresh10800s
Retry3600s
Expire604800s
Minimum (neg-cache TTL)3600s

📋 Registration#

✗ No registration data yet — queued for a WHOIS lookup
📋 WHOIS#

⏱️ Lookup Timing#

NS
54ms
A
49ms
MX
58ms
AAAA
58ms
TXT
650ms
CAA
48ms
HTTPS
70ms
TLSA
243ms
SOA
0ms
MTA-STS
88ms
DNSSEC
9076ms
SRV
168ms
Total
9897ms

🕐 Scan History#

Scanned AtDurationRecordsDNSSEC
2026-09-27 07:00:28 shown 9897ms 2 NS 1 A 1 MX 🔓 Insecure
2026-09-12 09:53:26 1312ms 2 NS 1 A 1 MX 🔓 Insecure
2026-08-26 13:42:08 10393ms 2 NS 1 A 1 MX 🔓 Insecure
2026-07-24 00:14:10 23859ms 2 NS 1 A 1 MX 🔓 Insecure
2026-06-26 05:07:41 3078ms 2 NS 0 A 1 MX 🔓 Insecure
2026-06-23 22:49:55 4159ms 2 NS 1 A 1 MX 🔓 Insecure
2026-06-18 00:31:30 6427ms 2 NS 1 A 1 MX 🔓 Insecure
dhd.dk [/] search Domains, Hosts & DNS — .dk zone