kfc.dk

📜 Historical scan 2026-06-21 05:59:17  ·  ← Latest scan
⬇ Zone File 📜 Timeline & History ⚡ Scan Now

kfc.dk is a .dk domain served by 2 nameservers (udns1.cscdns.net, udns2.cscdns.uk). It was registered on 17 December 2001 (WHOIS) and was already in the .dk zone when our tracking began on 16 June 2026. Its website address 46.16.234.36 is hosted by ODERLAND Webbhotell AB (AS44136) in Sweden. Mail is handled by kfc-dk.mail.protection.outlook.com. The zone is not DNSSEC-signed, publishes a DMARC policy and has no IPv6 address. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

2 records   107ms

🌍 A Records#

1 records   61ms

📧 MX Records#

1 records   107ms

📧 Autodiscover / Autoconfig#

ServiceCNAME / IP
🔷 Autodiscoverautodiscover.outlook.com → 40.104.116.40

🔷 AAAA Records (IPv6)#

✗ No AAAA records — IPv6 not configured

🔐 HTTPS Records#

✗ No HTTPS RR — no SVCB/HTTPS service binding

📝 TXT Records#

3 records   333ms
TXT Record
MS=ms36922141
v=spf1 include:_vsp.oderland.com -all
v=spf1 include:spf.protection.outlook.com -all

✉️ SPF#

⚠ Multiple SPF records — RFC 7208 §4.5 violation (receivers must treat this as permerror)
PolicyRecord (kfc.dk)
-all (hard fail) v=spf1 include:_vsp.oderland.com -all
-all (hard fail) v=spf1 include:spf.protection.outlook.com -all

📨 DMARC#

PolicyRecord (_dmarc.kfc.dk)
p=reject v=DMARC1; p=reject; rua=mailto:wyjtp6ok@ag.dmarcian.com; ruf=mailto:wyjtp6ok@fr.dmarcian.com; rf=afrf; ri=86400; fo=1

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

✗ No CAA records — any CA may issue certificates

🧩 Web & zone#

latest probe, not this scan · checked 2026-10-14 05:11:16
www CNAMEkfc.dk (all on kfc.dk)
www vs bare domainSame network
kfc.dk: 46.16.234.36 (AS44136)
www.kfc.dk: 46.16.234.36 (AS44136)
WildcardNo

✍️ DKIM keys#

1 found
SelectorCNAMEKey
default — RSA · ~2048 bit

DKIM selectors can't be listed, so we check the common ones (Microsoft 365, Google, Mailchimp, SendGrid, generic). Keys under other selectors aren't shown.

🔎 SPF check#

zone-wide SPF report

DNS lookups: 1/10 · policy: -all

  • error 2 SPF records: receivers must treat that as a permanent error (RFC 7208 §4.5)

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

96ms
CheckResult
Validation Status🔓 Insecure
AD Flag (resolver validates)✗ Not set
DS Record✗ Not found
DNSKEY Record✗ Not found
Flagsunsigned answer

🏷️ SOA#

79ms
FieldValue
Serial2026042112
Primary NS (MNAME)udns1.cscdns.net
Responsible (RNAME)hostmaster@cscdns.net
Refresh86400s
Retry86400s
Expire86400s
Minimum (neg-cache TTL)86400s

📋 Registration#

WHOIS fetched 2026-10-06 03:08:47
FieldValue
RegistrarCSC Digital Brand Service, Inc
Registered2001-12-17
Expires2026-12-31 (70d)
📋 WHOIS#

⏱️ Lookup Timing#

NS
107ms
A
61ms
MX
107ms
AAAA
61ms
TXT
333ms
CAA
57ms
HTTPS
107ms
TLSA
129ms
SOA
79ms
MTA-STS
107ms
DNSSEC
96ms
SRV
152ms
Total
735ms

🕐 Scan History#

Scanned AtDurationRecordsDNSSEC
2026-09-30 14:43:06 882ms 2 NS 1 A 1 MX 🔓 Insecure
2026-09-29 16:36:30 892ms 2 NS 1 A 1 MX 🔓 Insecure
2026-08-27 17:19:58 9678ms 2 NS 1 A 1 MX 🔓 Insecure
2026-07-08 13:34:44 3546ms 2 NS 1 A 1 MX 🔓 Insecure
2026-07-01 12:59:47 942ms 2 NS 1 A 1 MX 🔓 Insecure
2026-06-26 07:17:31 874ms 2 NS 1 A 1 MX 🔓 Insecure
2026-06-21 05:59:17 shown 735ms 2 NS 1 A 1 MX 🔓 Insecure
2026-06-17 14:55:24 1399ms 2 NS 1 A 0 MX 🔓 Insecure
dhd.dk [/] search Domains, Hosts & DNS — .dk zone