brighter.dk

Records from scan: 2026-10-08 22:35:19  ·  821ms total  ·  last checked 2026-10-20 17:36 (unchanged)
⬇ Zone File 📜 Timeline & History ⚡ Scan Now

brighter.dk is a .dk domain served by 2 nameservers (ns6.wixdns.net, ns7.wixdns.net). It was already in the .dk zone when our tracking began on 16 June 2026. Its website address 185.230.63.107 is hosted by Wix.com Ltd. (AS58182) in United States. Mail is handled by aspmx.l.google.com, alt1.aspmx.l.google.com and 3 more. The zone is not DNSSEC-signed, has no DMARC policy and has no IPv6 address. Below are all of its DNS records from our latest scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

2 records   54ms

🌍 A Records#

3 records   59ms

📧 MX Records#

5 records   58ms

🔷 AAAA Records (IPv6)#

✗ No AAAA records — IPv6 not configured

🔐 HTTPS Records#

✗ No HTTPS RR — no SVCB/HTTPS service binding

📝 TXT Records#

3 records   364ms
TXT Record
google-site-verification=dI6EshqOP07MdC4LiH3378oh7niTPxQsMcyxsKJAkmY
v=spf1 a mx include:spf.gigahost.dk -all
v=spf1 include:_spf.google.com -all

✉️ SPF#

⚠ Multiple SPF records — RFC 7208 §4.5 violation (receivers must treat this as permerror)
PolicyRecord (brighter.dk)
-all (hard fail) v=spf1 a mx include:spf.gigahost.dk -all
-all (hard fail) v=spf1 include:_spf.google.com -all

📨 DMARC#

✗ No DMARC record — mail spoofing not restricted

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

✗ No CAA records — any CA may issue certificates

🧩 Web & zone#

checked 2026-10-08 22:35:19
www CNAMEcdn3.wixdns.net (all on wixdns.net)
www vs bare domainDifferent networks (all like this)
WildcardNo
Denial of existenceNSEC3 · 1 iteration · 8-byte salt RFC 9276 recommends 0 iterations and no salt
CDS / CDNSKEYPublished: key rollovers can be automated with the registry (RFC 7344/8078) 1 CDS, 0 CDNSKEY

🔎 SPF check#

zone-wide SPF report

DNS lookups: 3/10 · policy: -all

  • error 2 SPF records: receivers must treat that as a permanent error (RFC 7208 §4.5)

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

88ms
CheckResult
Validation Status🔓 Insecure
AD Flag (resolver validates)✗ Not set
DS Record✗ Not found
DNSKEY Record✓ Found
Flagsunsigned answer

🏷️ SOA#

56ms
FieldValue
Serial2023052718
Primary NS (MNAME)ns6.wixdns.net
Responsible (RNAME)support@wix.com
Refresh10800s
Retry3600s
Expire1209600s
Minimum (neg-cache TTL)3600s

📋 Registration#

✗ No registration data yet — queued for a WHOIS lookup
📋 WHOIS#

⏱️ Lookup Timing#

NS
54ms
A
59ms
MX
58ms
AAAA
58ms
TXT
364ms
CAA
67ms
HTTPS
63ms
TLSA
112ms
SOA
56ms
MTA-STS
104ms
DNSSEC
88ms
SRV
108ms
Total
821ms

🕐 Scan History#

Scanned AtDurationRecordsDNSSEC
2026-10-08 22:35:19 shown 821ms 2 NS 3 A 5 MX 🔓 Insecure
2026-09-30 13:14:12 879ms 2 NS 3 A 5 MX 🔓 Insecure
2026-09-23 12:41:56 1078ms 2 NS 3 A 5 MX 🔓 Insecure
2026-06-29 04:01:02 1491ms 2 NS 3 A 5 MX 🔓 Insecure
2026-06-16 16:55:22 865ms 2 NS 3 A 5 MX 🔓 Insecure
dhd.dk [/] search Domains, Hosts & DNS — .dk zone