thli.dk is a .dk domain served by 4 nameservers (ns1-35.azure-dns.com, ns2-35.azure-dns.net, ns3-35.azure-dns.org and 1 more). It was registered on 13 May 2020 (WHOIS) and was already in the .dk zone when our tracking began on 16 June 2026. Mail is handled by thli-dk.mail.protection.outlook.com. The zone is not DNSSEC-signed, has no DMARC policy and has no IPv6 address. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.
| Service | CNAME / IP |
|---|---|
| 🔷 Autodiscover | autodiscover.outlook.com → 52.98.149.136 |
| TXT Record |
|---|
| v=spf1 include:spf.protection.outlook.com -all |
| Policy | Record (thli.dk) |
|---|---|
| -all (hard fail) | v=spf1 include:spf.protection.outlook.com -all |
| www | NXDOMAIN |
| www vs bare domain | Neither resolves thli.dk: no address www.thli.dk: no address |
| Wildcard | No |
| Denial of existence | NSEC zone can be walked (all names enumerable) |
| CDS / CDNSKEY | Published: key rollovers can be automated with the registry (RFC 7344/8078) 1 CDS, 1 CDNSKEY |
| Selector | CNAME | Key |
|---|---|---|
| selector1 | selector1-thli-dk._domainkey.incapadk.onmicrosoft.com | RSA · ~2048 bit |
DKIM selectors can't be listed, so we check the common ones (Microsoft 365, Google, Mailchimp, SendGrid, generic). Keys under other selectors aren't shown.
DNS lookups: 1/10 · policy: -all
No problems found| Check | Result |
|---|---|
| Validation Status | 🔓 Insecure |
| AD Flag (resolver validates) | ✗ Not set |
| DS Record | ✗ Not found |
| DNSKEY Record | ✗ Not found |
| Flags | resolution failed: ncache nxrrset |
| Field | Value |
|---|---|
| Serial | 1 |
| Primary NS (MNAME) | ns1-35.azure-dns.com |
| Responsible (RNAME) | azuredns-hostmaster@microsoft.com |
| Refresh | 3600s |
| Retry | 300s |
| Expire | 2419200s |
| Minimum (neg-cache TTL) | 300s |
| Field | Value |
|---|---|
| Registrar | Punktum dk A/S (direct) |
| Registered | 2020-05-13 |
| Expires | 2027-05-31 (222d) |
Other .dk domains whose WHOIS registrant has the same name and postal address. Matched on a keyed hash: the registrant's details are not stored or shown. Covers only domains whose WHOIS we have fetched (refreshed about monthly).
| Domain | Registrar |
|---|---|
| incapa.dk | Punktum dk A/S (direct) |
| nili.dk | Punktum dk A/S (direct) |
| nkli.dk | Punktum dk A/S (direct) |
| Scanned At | Duration | Records | DNSSEC |
|---|---|---|---|
| 2026-10-20 01:52:10 | 2186ms | 2 NS 0 A 1 MX | ❓ Unknown |
| 2026-10-19 00:25:54 | 1547ms | 2 NS 0 A 1 MX | 🔓 Insecure |
| 2026-10-18 00:05:46 | 1285ms | 2 NS 0 A 1 MX | 🔓 Insecure |
| 2026-10-16 23:06:54 | 1292ms | 2 NS 0 A 1 MX | 🔓 Insecure |
| 2026-10-15 22:44:38 | 1467ms | 2 NS 0 A 1 MX | 🔓 Insecure |
| 2026-10-13 20:38:38 | 1619ms | 2 NS 0 A 1 MX | 🔓 Insecure |
| 2026-10-11 19:15:35 | 2385ms | 2 NS 0 A 1 MX | 🔓 Insecure |
| 2026-10-10 10:24:00 | 1932ms | 2 NS 0 A 1 MX | 🔓 Insecure |
| 2026-10-09 00:28:12 | 1739ms | 2 NS 0 A 1 MX | 🔓 Insecure |
| 2026-10-07 00:19:48 | 2789ms | 2 NS 0 A 1 MX | 🔓 Insecure |
| 2026-10-05 21:28:55 | 1911ms | 2 NS 0 A 1 MX | 🔓 Insecure |
| 2026-10-02 21:14:03 | 1148ms | 2 NS 0 A 1 MX | 🔓 Insecure |
| 2026-09-30 21:04:23 | 1532ms | 2 NS 0 A 1 MX | 🔓 Insecure |
| 2026-09-29 20:54:30 | 1230ms | 2 NS 0 A 1 MX | 🔓 Insecure |
| 2026-09-28 20:46:04 | 2339ms | 2 NS 0 A 1 MX | 🔓 Insecure |
| 2026-09-27 20:36:45 | 2120ms | 2 NS 0 A 1 MX | 🔓 Insecure |
| 2026-09-24 19:46:17 | 1560ms | 2 NS 0 A 1 MX | 🔓 Insecure |
| 2026-09-16 19:11:24 | 1517ms | 2 NS 0 A 1 MX | 🔓 Insecure |
| 2026-09-06 21:42:44 | 10203ms | 2 NS 0 A 1 MX | 🔓 Insecure |
| 2026-08-27 17:53:59 | 1522ms | 2 NS 0 A 1 MX | 🔓 Insecure |
| 2026-08-25 13:00:49 | 921ms | 2 NS 0 A 1 MX | 🔓 Insecure |
| 2026-08-24 14:41:16 | 17155ms | 2 NS 0 A 1 MX | 🔓 Insecure |
| 2026-08-23 13:04:53 | 10212ms | 2 NS 0 A 1 MX | 🔓 Insecure |
| 2026-08-18 09:18:08 | 6169ms | 2 NS 0 A 1 MX | 🔓 Insecure |
| 2026-08-15 20:53:33 | 4326ms | 2 NS 0 A 1 MX | 🔓 Insecure |