thema1.dk DNS records

🖥️ Nameservers4 records 236ms

Nameserver	IP addresses	PTR	ASN / ISP
ns1.bdm.microsoftonline.com	13.107.236.208 2603:1061:0:700::d0	— ns1-208.azure-dns.com	AS8075 Microsoft Corporation AS8075 Microsoft Corporation
ns2.bdm.microsoftonline.com	150.171.21.208 2620:1ec:8ec:700::d0	ns2-208.azure-dns.net ns2-208.azure-dns.net	AS8075 Microsoft Corporation AS8075 Microsoft Corporation
ns3.bdm.microsoftonline.com	204.14.183.208 2a01:111:4000:700::d0	— ns3-208.azure-dns.org	AS8075 Microsoft Corporation AS8075 Microsoft Corporation
ns4.bdm.microsoftonline.com	208.84.5.208 2620:1ec:bda:700::d0	ns4-208.azure-dns.info ns4-208.azure-dns.info	AS8075 Microsoft Corporation AS8075 Microsoft Corporation

🌍 A Records

🌍

No A records found

📧 MX Records1 records 235ms

Priority	TTL	Mail Server	IP addresses	PTR	ASN
0	3600s	thema1-dk.mail.protection.outlook.com	52.101.68.25 52.101.68.36 52.101.68.5 52.101.73.6	mail-db8pr02cu00101.inbound.protection.outlook.com mail-db5pr02cu00104.inbound.protection.outlook.com mail-du2pr03cu00105.inbound.protection.outlook.com mail-am6pr04cu00306.inbound.protection.outlook.com	AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation

📧 Autodiscover / Autoconfig

Service	CNAME / IP
🔷 Autodiscover	autodiscover.outlook.com → 40.104.116.56

🔷 AAAA Records (IPv6)

✗ No AAAA records — IPv6 not configured

🔐 HTTPS Records

✗ No HTTPS RR — no SVCB/HTTPS service binding

🔌 SRV Records1 records 449ms

Service	Priority	Weight	Port	Target
_sipfederationtls._tcp	100	1	5061	sipfed.online.lync.com

📝 TXT Records2 records 776ms

TXT Record
mscid=DrYWys7MimHlmqzn1t8BiFN2G5mxgbEz4jJmao7uUAgf/KkOykW95ZX9/asmJXCN2EvKJMaOxTYz4h0aLvGDxg==
v=spf1 include:spf.protection.outlook.com -all

✉️ SPF

Policy	Record (thema1.dk)
-all (hard fail)	v=spf1 include:spf.protection.outlook.com -all

📨 DMARC

✗ No DMARC record — mail spoofing not restricted

📬 MTA-STS

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records

✗ No CAA records — any CA may issue certificates

🔗 TLSA / DANE

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC559ms

Check	Result
Validation Status	🔓 Insecure
AD Flag (resolver validates)	✗ Not set
DS Record	✗ Not found
DNSKEY Record	✗ Not found
Flags	resolution failed: ncache nxrrset

🏷️ SOA226ms

Field	Value
Serial	1
Primary NS (MNAME)	ns1.bdm.microsoftonline.com
Responsible (RNAME)	azuredns-hostmaster@microsoft.com
Refresh	3600s
Retry	300s
Expire	2419200s
Minimum (neg-cache TTL)	300s

📋 Registration

✗ No registration data — collected automatically when SOA serial changes

📋 WHOIS

⏱️ Lookup Timing

NS

236ms

A

242ms

MX

235ms

AAAA

223ms

TXT

776ms

CAA

256ms

HTTPS

252ms

TLSA

295ms

SOA

226ms

MTA-STS

275ms

DNSSEC

559ms

SRV

449ms

Total

3588ms

🕐 Scan History

Scanned At	Duration	Records	DNSSEC
2026-06-25 09:58:21	3588ms	4 NS 0 A 1 MX	🔓 Insecure	View
2026-06-24 02:00:13	1181ms	0 NS 0 A 0 MX	❓ Unknown	View
2026-06-22 02:44:50	810ms	4 NS 0 A 1 MX	🔓 Insecure	View
2026-06-20 04:13:24	3604ms	4 NS 0 A 1 MX	🔓 Insecure	View
2026-06-20 00:41:58	901ms	4 NS 0 A 1 MX	🔓 Insecure	View
2026-06-18 00:07:28	859ms	4 NS 0 A 1 MX	🔓 Insecure	View