kaj-e-h.dk DNS records

🖥️ Nameservers2 records 372ms

Nameserver	IP addresses	PTR	ASN / ISP
ns2.zoneedit.com	2600:3c03::f03c:95ff:fe34:9154 97.107.129.160	nwk1.zoneedit.com nwk1.zoneedit.com	AS63949 Akamai Connected Cloud AS63949 Akamai Connected Cloud
ns3.zoneedit.com	172.104.173.26 2400:8901::f03c:95ff:fe1d:4623	sgp1.zoneedit.com sgp1.zoneedit.com	AS63949 Akamai Connected Cloud AS63949 Akamai Connected Cloud

🌍 A Records1 records 230ms

IP	TTL	PTR	ASN	ISP / Org	CIDR	Country	City
62.44.138.19	36000s	—	AS3308	Norlys Telco A/S	62.44.128.0/18	🇩🇰 Denmark	Maribo

📧 MX Records5 records 120ms

Priority	TTL	Mail Server	IP addresses	PTR	ASN
1	300s	aspmx.l.google.com	2a00:1450:4010:c0f::1a 2a00:1450:4010:c0f::1a 64.233.164.27	lt-in-x1a.1e100.net lt-in-f26.1e100.net lf-in-f27.1e100.net	AS15169 Google LLC AS15169 Google LLC AS15169 Google LLC
5	300s	alt1.aspmx.l.google.com	192.178.158.27 2404:6800:4013:813::1b	lcdels-in-f27.1e100.net lcdels-in-f27.1e100.net	AS15169 Google LLC AS15169 Google LLC
5	300s	alt2.aspmx.l.google.com	173.194.41.27 173.194.41.27 2404:6800:4001:c01::1b	yukulwh-in-f27.1e100.net mad01s14-in-f27.1e100.net yukulwh-in-f27.1e100.net	AS15169 Google LLC AS15169 Google LLC AS15169 Google LLC
10	300s	aspmx2.googlemail.com	192.178.158.27 2404:6800:4013:813::1b	lcdels-in-f27.1e100.net lcdels-in-f27.1e100.net	AS15169 Google LLC AS15169 Google LLC
10	300s	aspmx3.googlemail.com	173.194.41.27 173.194.41.27 2404:6800:4001:c01::1b	yukulwh-in-f27.1e100.net mad01s14-in-f27.1e100.net yukulwh-in-f27.1e100.net	AS15169 Google LLC AS15169 Google LLC AS15169 Google LLC

🔷 AAAA Records (IPv6)

✗ No AAAA records — IPv6 not configured

🔐 HTTPS Records

✗ No HTTPS RR — no SVCB/HTTPS service binding

📝 TXT Records2 records 923ms

TXT Record
v=spf1 a mx ptr
v=spf1 include:_spf.google.com ~all

✉️ SPF

⚠ Multiple SPF records — RFC 7208 §4.5 violation (receivers must treat this as permerror)

Policy	Record (kaj-e-h.dk)
no all — incomplete SPF	v=spf1 a mx ptr
~all (soft fail)	v=spf1 include:_spf.google.com ~all

📨 DMARC

✗ No DMARC record — mail spoofing not restricted

📬 MTA-STS

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records

✗ No CAA records — any CA may issue certificates

🔗 TLSA / DANE

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC9093ms

Check	Result
Validation Status	🔓 Insecure
AD Flag (resolver validates)	✗ Not set
DS Record	✗ Not found
DNSKEY Record	✗ Not found
Flags	unsigned answer

🏷️ SOA0ms

Field	Value
Serial	1613749147
Primary NS (MNAME)	dns0.zoneedit.com
Responsible (RNAME)	zone@zoneedit.com
Refresh	3600s
Retry	600s
Expire	1209600s
Minimum (neg-cache TTL)	300s

📋 Registration

✗ No registration data — collected automatically when SOA serial changes

📋 WHOIS

⏱️ Lookup Timing

NS

372ms

A

230ms

MX

120ms

AAAA

133ms

TXT

923ms

CAA

224ms

HTTPS

132ms

TLSA

218ms

SOA

0ms

MTA-STS

234ms

DNSSEC

9093ms

SRV

481ms

Total

10335ms

🕐 Scan History

Scanned At	Duration	Records	DNSSEC
2026-08-26 04:06:35	10335ms	2 NS 1 A 5 MX	🔓 Insecure	View
2026-08-06 22:41:04	25345ms	2 NS 1 A 5 MX	🔓 Insecure	View
2026-06-30 20:32:43	1595ms	2 NS 1 A 5 MX	🔓 Insecure	View
2026-06-25 16:20:15	1553ms	2 NS 1 A 5 MX	🔓 Insecure	View
2026-06-23 08:46:40	1185ms	0 NS 0 A 0 MX	❓ Unknown	View
2026-06-17 13:19:59	3771ms	2 NS 1 A 5 MX	🔓 Insecure	View