zerotrust.dk DNS records

🖥️ Nameservers4 records 119ms

Nameserver	IP addresses	PTR	ASN / ISP
ns1.bdm.microsoftonline.com	13.107.236.208 2603:1061:0:700::d0	ns1-208.azure-dns.com ns1-208.azure-dns.com	AS8075 Microsoft Corporation AS8075 Microsoft Corporation
ns2.bdm.microsoftonline.com	150.171.21.208 2620:1ec:8ec:700::d0	ns2-208.azure-dns.net ns2-208.azure-dns.net	AS8075 Microsoft Corporation AS8075 Microsoft Corporation
ns3.bdm.microsoftonline.com	204.14.183.208 2a01:111:4000:700::d0	ns3-208.azure-dns.org ns3-208.azure-dns.org	AS8075 Microsoft Corporation AS8075 Microsoft Corporation
ns4.bdm.microsoftonline.com	208.84.5.208 2620:1ec:bda:700::d0	ns4-208.azure-dns.info ns4-208.azure-dns.info	AS8075 Microsoft Corporation AS8075 Microsoft Corporation

🌍 A Records

🌍

No A records found

📧 MX Records1 records 87ms

Priority	TTL	Mail Server	IP addresses	PTR	ASN
0	3600s	zerotrust-dk.mail.protection.outlook.com	2a01:111:f403:ca04::1 2a01:111:f403:ca04::e 2a01:111:f403:ca09::3 2a01:111:f403:ca09::e 52.101.68.0 52.101.68.16 52.101.68.36 52.101.73.30	mail-db7pr03cu00401.inbound.protection.outlook.com mail-db8pr02cu00106.inbound.protection.outlook.com mail-am6pr04cu00303.inbound.protection.outlook.com mail-am7pr05cu00206.inbound.protection.outlook.com mail-db3pr0202cu00100.inbound.protection.outlook.com mail-db4pr02cu00400.inbound.protection.outlook.com mail-db5pr02cu00104.inbound.protection.outlook.com mail-am7pr05cu00306.inbound.protection.outlook.com	AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation AS8075 Microsoft Corporation

📧 Autodiscover / Autoconfig

Service	CNAME / IP
🔷 Autodiscover	autodiscover.outlook.com → 40.98.16.99

🔷 AAAA Records (IPv6)

✗ No AAAA records — IPv6 not configured

🔐 HTTPS Records

✗ No HTTPS RR — no SVCB/HTTPS service binding

📝 TXT Records2 records 310ms

TXT Record
mscid=/8g5bXfhJsyYRsnvKi+AaNNGbsJASVGvt1pOwkrgcDnD565xuQfZxGqTVr00wsSX0h1K6YBJYNxCGyGp+NrxKQ==
v=spf1 include:spf.protection.outlook.com -all

✉️ SPF

Policy	Record (zerotrust.dk)
-all (hard fail)	v=spf1 include:spf.protection.outlook.com -all

📨 DMARC

Policy	Record (_dmarc.zerotrust.dk)
p=reject	v=DMARC1; p=reject; rua=mailto:dmarc_agg@vali.email;

📬 MTA-STS

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records

✗ No CAA records — any CA may issue certificates

🔗 TLSA / DANE

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC98ms

Check	Result
Validation Status	🔓 Insecure
AD Flag (resolver validates)	✗ Not set
DS Record	✗ Not found
DNSKEY Record	✗ Not found
Flags	resolution failed: ncache nxrrset

🏷️ SOA174ms

Field	Value
Serial	1
Primary NS (MNAME)	ns1.bdm.microsoftonline.com
Responsible (RNAME)	azuredns-hostmaster@microsoft.com
Refresh	3600s
Retry	300s
Expire	2419200s
Minimum (neg-cache TTL)	300s

📋 Registration

✗ No registration data — collected automatically when SOA serial changes

📋 WHOIS

⏱️ Lookup Timing

NS

119ms

A

87ms

MX

87ms

AAAA

61ms

TXT

310ms

CAA

76ms

HTTPS

100ms

TLSA

140ms

SOA

174ms

MTA-STS

111ms

DNSSEC

98ms

SRV

137ms

Total

759ms

🕐 Scan History

Scanned At	Duration	Records	DNSSEC
2026-06-20 08:49:04	759ms	4 NS 0 A 1 MX	🔓 Insecure	View
2026-06-17 13:34:16	2673ms	4 NS 0 A 1 MX	⚠️ Bogus	View