trustedshops.dk

📜 Historical scan 2026-09-07 21:40:43  ·  ← Latest scan
⬇ Zone File 📜 Timeline & History ⚡ Scan Now

trustedshops.dk is a .dk domain served by 4 nameservers (ns-1399.awsdns-46.org, ns-1816.awsdns-35.co.uk, ns-191.awsdns-23.com and 1 more). It was already in the .dk zone when our tracking began on 16 June 2026. Its website address 18.153.138.111 is hosted by Amazon.com, Inc. (AS16509) in Germany. Mail is handled by mxa-005f2701.gslb.pphosted.com, mxb-005f2701.gslb.pphosted.com. The zone is not DNSSEC-signed, publishes a DMARC policy and has no IPv6 address. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

4 records   1235ms

🌍 A Records#

3 records   957ms

📧 MX Records#

2 records   1206ms

📧 Autodiscover / Autoconfig#

ServiceCNAME / IP
🔷 Autodiscover63.176.80.57
🔶 Autoconfig3.64.4.204

🔷 AAAA Records (IPv6)#

✗ No AAAA records — IPv6 not configured

🔐 HTTPS Records#

✗ No HTTPS RR — no SVCB/HTTPS service binding

📝 TXT Records#

5 records   226ms
TXT Record
google-site-verification=lZjRadWUPWsFJg1vhGHT2Y4BksxiGPBlmL4l9ZOdI-A
MS=ms57217897
RIgAPkaWGV4G58uxFSZdgwq/6yvB6fDLJaM50OsS13GwUu5M4CPmjI/6c8mhzjxcFWOUVTR2VcAS2jal51J8Iw==
v=spf1 ~all
v=spf1 include:spf.protection.outlook.com -all

✉️ SPF#

⚠ Multiple SPF records — RFC 7208 §4.5 violation (receivers must treat this as permerror)
PolicyRecord (trustedshops.dk)
~all (soft fail) v=spf1 ~all
-all (hard fail) v=spf1 include:spf.protection.outlook.com -all

📨 DMARC#

PolicyRecord (_dmarc.trustedshops.dk)
p=reject v=DMARC1;p=reject;rua=mailto:dmarc@techreports.trustedshops.com;ruf=mailto:dmarc@techreports.trustedshops.com;fo=1;

📬 MTA-STS#

1272ms
CheckResult
Status🔒 Enforce
TXT record (_mta-sts)✓ Found
HTTPS policy✓ Valid
Modeenforce
Policy ID20260305000000Z
max_age86400s
Policy MXmxa-005f2701.gslb.pphosted.com, mxb-005f2701.gslb.pphosted.com

📈 TLSRPT#

StatusReport address (rua)
✓ Enabled mailto:tls-rpt@techreports.trustedshops.com

📜 CAA Records#

✗ No CAA records — any CA may issue certificates

🧩 Web & zone#

latest probe, not this scan · checked 2026-10-09 23:46:50
www18.153.189.246 3.69.152.21 3.78.32.62 (AS16509) (address records, no CNAME)
www vs bare domainSame network
WildcardYes: any name under the zone resolves

🔎 SPF check#

zone-wide SPF report

DNS lookups: 0/10 · policy: ~all

  • error 2 SPF records: receivers must treat that as a permanent error (RFC 7208 §4.5)

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

9081ms
CheckResult
Validation Status🔓 Insecure
AD Flag (resolver validates)✗ Not set
DS Record✗ Not found
DNSKEY Record✗ Not found
Flagsunsigned answer

🏷️ SOA#

0ms
FieldValue
Serial1
Primary NS (MNAME)ns-191.awsdns-23.com
Responsible (RNAME)awsdns-hostmaster@amazon.com
Refresh7200s
Retry900s
Expire1209600s
Minimum (neg-cache TTL)86400s

📋 Registration#

✗ No registration data yet — queued for a WHOIS lookup
📋 WHOIS#

⏱️ Lookup Timing#

NS
1235ms
A
957ms
MX
1206ms
AAAA
1206ms
TXT
226ms
CAA
149ms
HTTPS
41ms
TLSA
817ms
SOA
0ms
MTA-STS
1272ms
DNSSEC
9081ms
SRV
302ms
Total
13031ms

🕐 Scan History#

Scanned AtDurationRecordsDNSSEC
2026-09-29 20:07:39 3547ms 4 NS 3 A 2 MX 🔓 Insecure
2026-09-07 21:40:43 shown 13031ms 4 NS 3 A 2 MX 🔓 Insecure
2026-08-25 00:13:45 6197ms 4 NS 3 A 2 MX 🔓 Insecure
2026-06-17 12:03:42 1898ms 4 NS 3 A 2 MX 🔓 Insecure
dhd.dk [/] search Domains, Hosts & DNS — .dk zone