sandmaster.dk

📜 Historical scan 2026-06-21 06:29:01 · ← Latest scan

⬇ Zone File 📜 Timeline & History ⚡ Scan Now

sandmaster.dk is a .dk domain served by 3 nameservers (ns1.timmehosting.de, ns2.timmehosting.de, ns3.timmehosting.de). It was registered on 18 February 2009 (WHOIS) and was already in the .dk zone when our tracking began on 16 June 2026. Its website address 88.99.88.201 is hosted by Hetzner Online GmbH (AS24940) in Germany. Mail is handled by hosting4office-mx1.titanhq.com. The zone is not DNSSEC-signed, has no DMARC policy and has no IPv6 address. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

3 records 171ms

Nameserver	IP addresses	PTR	ASN / ISP
ns1.timmehosting.de	2a01:4f8:c17:89e2::1 78.47.168.192	ns1.timmehosting.de ns1.timmehosting.de	AS24940 Hetzner Online GmbH AS24940 Hetzner Online GmbH
ns2.timmehosting.de	157.90.19.57 2a01:4f8:1c1e:b474::1	ns2.timmehosting.de ns2.timmehosting.de	AS24940 Hetzner Online GmbH AS24940 Hetzner Online GmbH
ns3.timmehosting.de	2a04:3542:1000:910:74b0:a6ff:feb3:4ad5 94.237.31.204	ns3.timmehosting.de ns3.timmehosting.de	AS202053 UpCloud Ltd AS202053 UpCloud Ltd

🌍 A Records#

1 records 64ms

IP	TTL	PTR	ASN	ISP / Org	CIDR	Country	City
88.99.88.201	3600s	k06y70.meinserver.io	AS24940	Hetzner Online GmbH	88.99.0.0/16	🇩🇪 Germany	Falkenstein

📧 MX Records#

1 records 89ms

Priority	TTL	Mail Server	IP addresses	PTR	ASN
10	3600s	hosting4office-mx1.titanhq.com	3.125.67.59 3.70.162.203 35.158.11.197 35.158.242.254	eu1-smtp1.titanhq.com eu1-smtp1.titanhq.com eu1-smtp2.titanhq.com eu1-smtp2.titanhq.com	AS16509 Amazon.com, Inc. AS16509 Amazon.com, Inc. AS16509 Amazon.com, Inc. AS16509 Amazon.com, Inc.

📧 Autodiscover / Autoconfig#

Service	CNAME / IP
🔷 Autodiscover	autodiscover.outlook.com → 40.104.116.8
🔶 Autoconfig	88.99.88.201

🔷 AAAA Records (IPv6)#

✗ No AAAA records — IPv6 not configured

🔐 HTTPS Records#

✗ No HTTPS RR — no SVCB/HTTPS service binding

🔌 SRV Records#

1 records 213ms

Service	Priority	Weight	Port	Target
_sipfederationtls._tcp	100	1	5061	sipfed.online.lync.com

📝 TXT Records#

2 records 452ms

TXT Record
MS=ms24900296
v=spf1 mx ip4:178.254.4.101 ip4:178.254.0.201 ip4:178.254.0.202 ip4:178.254.0.203 ip4:178.254.0.204 ip4:178.254.0.205 ip4:178.254.0.206 ip4:178.254.0.207 ip4:178.254.0.208 a:kasslerkallweit1.timmeserver.de include:spf.protection.outlook.com -all

✉️ SPF#

Policy	Record (sandmaster.dk)
-all (hard fail)	v=spf1 mx ip4:178.254.4.101 ip4:178.254.0.201 ip4:178.254.0.202 ip4:178.254.0.203 ip4:178.254.0.204 ip4:178.254.0.205 ip4:178.254.0.206 ip4:178.254.0.207 ip4:178.254.0.208 a:kasslerkallweit1.timmeserver.de include:spf.protection.outlook.com -all

📨 DMARC#

✗ No DMARC record — mail spoofing not restricted

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

✗ No CAA records — any CA may issue certificates

🧩 Web & zone#

latest probe, not this scan · checked 2026-10-08 19:25:33

www	88.99.88.201 (AS24940) (address records, no CNAME)
www vs bare domain	Same network sandmaster.dk: 88.99.88.201 (AS24940) www.sandmaster.dk: 88.99.88.201 (AS24940)
Wildcard	Yes: any name under the zone resolves

🔎 SPF check#

zone-wide SPF report

DNS lookups: 3/10 · policy: -all

No problems found

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

97ms

Check	Result
Validation Status	🔓 Insecure
AD Flag (resolver validates)	✗ Not set
DS Record	✗ Not found
DNSKEY Record	✗ Not found
Flags	unsigned answer

🏷️ SOA#

67ms

Field	Value
Serial	2024022801
Primary NS (MNAME)	ns1.timmehosting.de
Responsible (RNAME)	zonemaster@timmehosting.de
Refresh	7200s
Retry	900s
Expire	604800s
Minimum (neg-cache TTL)	86400s

📋 Registration#

WHOIS fetched 2026-10-20 06:54:04

Field	Value
Registrar	Punktum dk A/S (direct)
Registered	2009-02-18
Expires	2027-02-28 (131d)

🔗 Same registrant#

0 domains

Other .dk domains whose WHOIS registrant has the same name and postal address. Matched on a keyed hash: the registrant's details are not stored or shown. Covers only domains whose WHOIS we have fetched (refreshed about monthly).

No other domain with this registrant in our WHOIS data yet

📋 WHOIS#

⏱️ Lookup Timing#

171ms

64ms

89ms

AAAA

70ms

TXT

452ms

CAA

206ms

HTTPS

103ms

TLSA

161ms

SOA

67ms

MTA-STS

82ms

DNSSEC

97ms

SRV

213ms

Total

1034ms

🕐 Scan History#

Scanned At	Duration	Records	DNSSEC
2026-09-25 06:19:29	11997ms	3 NS 1 A 1 MX	🔓 Insecure
2026-09-19 14:45:36	2644ms	3 NS 1 A 1 MX	🔓 Insecure
2026-06-24 09:18:55	873ms	3 NS 1 A 1 MX	❓ Unknown
2026-06-23 10:11:48	1124ms	0 NS 0 A 0 MX	❓ Unknown
2026-06-21 06:29:01 shown	1034ms	3 NS 1 A 1 MX	🔓 Insecure
2026-06-17 22:01:52	3299ms	3 NS 1 A 1 MX	🔓 Insecure