topdanmark.dk

📜 Historical scan 2026-06-18 08:00:56 · ← Latest scan

⬇ Zone File 📜 Timeline & History ⚡ Scan Now

topdanmark.dk is a .dk domain served by 4 nameservers (ns-1356.awsdns-41.org, ns-1676.awsdns-17.co.uk, ns-488.awsdns-61.com and 1 more). It was registered on 15 September 1994 (WHOIS) and was already in the .dk zone when our tracking began on 16 June 2026. Its website address 3.174.18.34 is hosted by Amazon.com, Inc. (AS16509) in United States. Mail is handled by topdanmark-dk.mail.protection.outlook.com. The zone is not DNSSEC-signed, publishes a DMARC policy and has no IPv6 address. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

4 records 214ms

Nameserver	IP addresses	PTR	ASN / ISP
ns-1356.awsdns-41.org	205.251.197.76 2600:9000:5305:4c00::1	ns-1356.awsdns-41.org ns-1356.awsdns-41.org	AS16509 Amazon.com, Inc. AS16509 Amazon.com, Inc.
ns-1676.awsdns-17.co.uk	205.251.198.140 2600:9000:5306:8c00::1	ns-1676.awsdns-17.co.uk ns-1676.awsdns-17.co.uk	AS16509 Amazon.com, Inc. AS16509 Amazon.com, Inc.
ns-488.awsdns-61.com	205.251.193.232 2600:9000:5301:e800::1	ns-488.awsdns-61.com ns-488.awsdns-61.com	AS16509 Amazon.com, Inc. AS16509 Amazon.com, Inc.
ns-927.awsdns-51.net	205.251.195.159 2600:9000:5303:9f00::1	ns-927.awsdns-51.net ns-927.awsdns-51.net	AS16509 Amazon.com, Inc. AS16509 Amazon.com, Inc.

🌍 A Records#

4 records 193ms

IP	TTL	PTR	ASN	ISP / Org	CIDR	Country	City
3.174.18.34	—	server-3-174-18-34.cph50.r.cloudfront.net	AS16509	Amazon.com, Inc.	3.128.0.0/10	🇺🇸 United States	—
3.174.18.41	—	server-3-174-18-41.cph50.r.cloudfront.net	AS16509	Amazon.com, Inc.	3.128.0.0/10	🇺🇸 United States	—
3.174.18.57	—	server-3-174-18-57.cph50.r.cloudfront.net	AS16509	Amazon.com, Inc.	3.128.0.0/10	🇺🇸 United States	—
3.174.18.90	—	server-3-174-18-90.cph50.r.cloudfront.net	AS16509	Amazon.com, Inc.	3.128.0.0/10	🇺🇸 United States	—

📧 MX Records#

1 records 224ms

Priority	TTL	Mail Server	IP addresses	PTR	ASN
0	—	topdanmark-dk.mail.protection.outlook.com	2a01:111:f403:ca04::5 2a01:111:f403:ca09::2 2a01:111:f403:ca09::7 2a01:111:f403:ca09::b 52.101.68.10 52.101.68.16 52.101.68.32 52.101.73.30	mail-db3pr0202cu00205.inbound.protection.outlook.com mail-am0pr83cu00402.inbound.protection.outlook.com mail-am9pr04cu00107.inbound.protection.outlook.com mail-am7pr05cu00103.inbound.protection.outlook.com mail-dbbpr03cu00102.inbound.protection.outlook.com mail-db4pr02cu00400.inbound.protection.outlook.com mail-db3pr0202cu00200.inbound.protection.outlook.com mail-am7pr05cu00306.inbound.protection.outlook.com	AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation

📧 Autodiscover / Autoconfig#

Service	CNAME / IP
🔷 Autodiscover	autodiscover.outlook.com → 40.104.116.8

🔷 AAAA Records (IPv6)#

✗ No AAAA records — IPv6 not configured

🔐 HTTPS Records#

✗ No HTTPS RR — no SVCB/HTTPS service binding

🔌 SRV Records#

1 records 356ms

Service	Priority	Weight	Port	Target
_sipfederationtls._tcp	100	1	5061	sipfed.online.lync.com

📝 TXT Records#

21 records 580ms

TXT Record
_fd83at04camrko4mn2dja61szcjyd1j
_globalsign-domain-verification=14w_Bfh-v8Qp8jeegpofomKGNEThhMSzpkUNQHdPOT
_globalsign-domain-verification=3U2Ig-ljL7JfD7g8n8Ncmma0LQE9iXCFaO4wk7XGoW
_j5jxrqid5hlzg6d66ghhbfv5ahyvobo
2012ytlhyfw5szpdcp027r2c106c9yf7
5jwzb9h44kf39v9rdbylj6b3wph80jr0
adobe-idp-site-verification=96a671d84272ee91c87445f395adbfabea560174f66abb700530e5610dab8150
apple-domain-verification=JzxFP6zaADLgBaDJ
B0WzPYZtE76sSbgU8JM4B6WOj2Ekg4P4ERaRL5I8i8Q=
docusign=11a58e06-3f52-4aee-9826-20aa43406d02
Dynatrace-site-verification=7e32cd83-e2cd-4d1f-ba49-0c17b92a16ba__mk0d742cj9ugcu2ibq5usef336
facebook-domain-verification=nl948wok3q5j3daa12wroxe4q48qpe
flexera-domain-verification-rlxkqahkkiupskjp
google-site-verification=PAmCgQtkUazoZhmrBTk2nPkUsiVD1R899GKNBllg5Fs
h0nllbvtdvsg8w8b23rsj6g0hfzdw20t
miro-verification=ce593636ebf10801319cd4cf33e57f59e07cc260
MS=ms35873588
MS=ms64345693
OSSRH-51238
v=spf1 ip4:195.189.232.23 ip4:77.66.23.122 ip4:35.242.247.107 ip4:34.107.8.58 ip4:94.237.95.0 ip4:51.105.188.144 ip4:51.105.186.105 include:spf.protection.outlook.com include:amazonses.com include:sendgrid.net include:sas.mail.e.sparkpost.com include:_spf.salesforce.com include:spf.eu.odmad.quest-on-demand.com -all
ZA=qWaNSkES7TyCnlmC33T2Sw==

✉️ SPF#

Policy	Record (topdanmark.dk)
-all (hard fail)	v=spf1 ip4:195.189.232.23 ip4:77.66.23.122 ip4:35.242.247.107 ip4:34.107.8.58 ip4:94.237.95.0 ip4:51.105.188.144 ip4:51.105.186.105 include:spf.protection.outlook.com include:amazonses.com include:sendgrid.net include:sas.mail.e.sparkpost.com include:_spf.salesforce.com include:spf.eu.odmad.quest-on-demand.com -all

📨 DMARC#

Policy	Record (_dmarc.topdanmark.dk)
p=reject	v=DMARC1; p=reject; rua=mailto:awzvtxu4@ag.eu.dmarcadvisor.com; ruf=mailto:DMARC-fail@topdanmark.dk

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

Status	Report address (rua)
✓ Enabled	mailto:awzvtxu4@tls.eu.dmarcadvisor.com

📜 CAA Records#

✗ No CAA records — any CA may issue certificates

🧩 Web & zone#

latest probe, not this scan · checked 2026-10-10 08:14:38

www	65.9.106.103 65.9.106.15 65.9.106.76 65.9.106.98 (AS16509) (address records, no CNAME)
www vs bare domain	Same network topdanmark.dk: 65.9.106.103 65.9.106.15 65.9.106.76 65.9.106.98 (AS16509) www.topdanmark.dk: 65.9.106.103 65.9.106.15 65.9.106.76 65.9.106.98 (AS16509)
Wildcard	No

✍️ DKIM keys#

4 found

Selector	CNAME	Key
s1	s1.domainkey.u15337959.wl210.sendgrid.net	RSA · ~2048 bit
s2	s2.domainkey.u15337959.wl210.sendgrid.net	RSA · ~1024 bit below 2048 bit
selector1	selector1-topdanmark-dk._domainkey.ifitservices.e-v1.dkim.mail.microsoft	RSA · ~2048 bit
selector2	selector2-topdanmark-dk._domainkey.ifitservices.e-v1.dkim.mail.microsoft	RSA · ~2048 bit

DKIM selectors can't be listed, so we check the common ones (Microsoft 365, Google, Mailchimp, SendGrid, generic). Keys under other selectors aren't shown.

🔎 SPF check#

zone-wide SPF report

DNS lookups: 9/10 · policy: -all

warn 9 of the 10 allowed DNS lookups used: one more include can break SPF

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

415ms

Check	Result
Validation Status	🔓 Insecure
AD Flag (resolver validates)	✗ Not set
DS Record	✗ Not found
DNSKEY Record	✗ Not found
Flags	unsigned answer

🏷️ SOA#

184ms

Field	Value
Serial	1
Primary NS (MNAME)	ns-927.awsdns-51.net
Responsible (RNAME)	awsdns-hostmaster@amazon.com
Refresh	7200s
Retry	900s
Expire	1209600s
Minimum (neg-cache TTL)	86400s

📋 Registration#

WHOIS fetched 2026-10-10 05:33:47

Field	Value
Registrar	CSC Digital Brand Service, Inc
Registered	1994-09-15
Expires	2027-09-30 (348d)

📋 WHOIS#

⏱️ Lookup Timing#

214ms

193ms

224ms

AAAA

308ms

TXT

580ms

CAA

304ms

HTTPS

173ms

TLSA

687ms

SOA

184ms

MTA-STS

307ms

DNSSEC

415ms

SRV

356ms

Total

4810ms

🕐 Scan History#

Scanned At	Duration	Records	DNSSEC
2026-09-29 22:02:44	3487ms	4 NS 4 A 1 MX	🔓 Insecure
2026-08-27 02:17:36	18326ms	4 NS 4 A 1 MX	🔓 Insecure
2026-06-25 22:07:04	2378ms	4 NS 4 A 1 MX	🔓 Insecure
2026-06-24 22:48:09	1185ms	4 NS 4 A 1 MX	🔓 Insecure
2026-06-18 08:00:56 shown	4810ms	4 NS 4 A 1 MX	🔓 Insecure