young-money.dk

Records from scan: 2026-09-30 18:16:22  ·  969ms total  ·  last checked 2026-10-20 07:27 (unchanged)
⬇ Zone File 📜 Timeline & History ⚡ Scan Now

young-money.dk is a .dk domain served by 4 nameservers (ns1-04.azure-dns.com, ns2-04.azure-dns.net, ns3-04.azure-dns.org and 1 more). It was already in the .dk zone when our tracking began on 16 June 2026. Mail is handled by youngmoney-dk.mail.protection.outlook.com. The zone is not DNSSEC-signed, publishes a DMARC policy and has no IPv6 address. Below are all of its DNS records from our latest scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

4 records   41ms

🌍 A Records#

1 records   44ms
IPTTLPTRASNISP / OrgCIDRCountryCity
171.25.228.149 28800s — — — — — —

📧 MX Records#

1 records   48ms

🔷 AAAA Records (IPv6)#

✗ No AAAA records — IPv6 not configured

🔐 HTTPS Records#

✗ No HTTPS RR — no SVCB/HTTPS service binding

📝 TXT Records#

3 records   154ms
TXT Record
MQZ+azQTX18P14eYSSJgIOapKrVJz9uuoBrsKxp9Qwk=
MS=ms28404131
v=spf1 include:spfa.sparnord.dk include:spfd.sparnord.dk include:spfe.sparnord.dk include:spf.mandrillapp.com -all

✉️ SPF#

📨 DMARC#

PolicyRecord (_dmarc.young-money.dk)
p=reject v=DMARC1; p=reject; rua=mailto:dmarcrapports@sparnord.dk; adkim=s; aspf=s;

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

✗ No CAA records — any CA may issue certificates

🧩 Web & zone#

checked 2026-10-15 05:17:04
www171.25.228.149 (address records, no CNAME)
www vs bare domainSame network
young-money.dk: 171.25.228.149
www.young-money.dk: 171.25.228.149
WildcardNo

✍️ DKIM keys#

2 found
SelectorCNAMEKey
selector1 selector1-youngmoney-dk._domainkey.b00369.onmicrosoft.com RSA · ~1024 bit below 2048 bit
selector2 selector2-youngmoney-dk._domainkey.b00369.onmicrosoft.com RSA · ~1024 bit below 2048 bit

DKIM selectors can't be listed, so we check the common ones (Microsoft 365, Google, Mailchimp, SendGrid, generic). Keys under other selectors aren't shown.

🔎 SPF check#

zone-wide SPF report

DNS lookups: 9/10 · policy: -all

  • warn 9 of the 10 allowed DNS lookups used: one more include can break SPF

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

52ms
CheckResult
Validation Status🔓 Insecure
AD Flag (resolver validates)✗ Not set
DS Record✗ Not found
DNSKEY Record✗ Not found
Flagsunsigned answer

🏷️ SOA#

26ms
FieldValue
Serial79
Primary NS (MNAME)ns1-04.azure-dns.com
Responsible (RNAME)hostmaster@netic.dk
Refresh10800s
Retry3600s
Expire604800s
Minimum (neg-cache TTL)60s

📋 Registration#

✗ No registration data yet — queued for a WHOIS lookup
📋 WHOIS#

⏱️ Lookup Timing#

NS
41ms
A
44ms
MX
48ms
AAAA
40ms
TXT
154ms
CAA
43ms
HTTPS
35ms
TLSA
559ms
SOA
26ms
MTA-STS
55ms
DNSSEC
52ms
SRV
55ms
Total
969ms

🕐 Scan History#

Scanned AtDurationRecordsDNSSEC
2026-09-30 18:16:22 shown 969ms 4 NS 1 A 1 MX 🔓 Insecure
2026-09-16 17:43:23 941ms 4 NS 1 A 1 MX 🔓 Insecure
2026-08-28 00:44:34 1394ms 4 NS 1 A 1 MX 🔓 Insecure
2026-08-26 12:55:06 1202ms 4 NS 1 A 1 MX 🔓 Insecure
2026-06-27 19:45:21 1016ms 4 NS 1 A 1 MX 🔓 Insecure
2026-06-18 07:09:55 1962ms 4 NS 1 A 1 MX 🔓 Insecure
dhd.dk [/] search Domains, Hosts & DNS — .dk zone