kirkeweb.dk

📜 Historical scan 2026-08-25 04:57:21 · ← Latest scan

⬇ Zone File 📜 Timeline & History ⚡ Scan Now

kirkeweb.dk is a .dk domain served by 2 nameservers (fay.ns.cloudflare.com, jake.ns.cloudflare.com). It was registered on 2 March 1999 (WHOIS) and was already in the .dk zone when our tracking began on 16 June 2026. Its website address 104.21.5.104 is hosted by Cloudflare, Inc. (AS13335). Mail is handled by aspmx.l.google.com, alt1.aspmx.l.google.com and 3 more. The zone is not DNSSEC-signed, has no DMARC policy and is reachable over IPv6. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

2 records 47ms

Nameserver	IP addresses	PTR	ASN / ISP
fay.ns.cloudflare.com	108.162.192.115 172.64.32.115 173.245.58.115 2606:4700:50::adf5:3a73 2803:f800:50::6ca2:c073 2a06:98c1:50::ac40:2073	fay.ns.cloudflare.com fay.ns.cloudflare.com fay.ns.cloudflare.com fay.ns.cloudflare.com fay.ns.cloudflare.com fay.ns.cloudflare.com	AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc.
jake.ns.cloudflare.com	108.162.193.122 172.64.33.122 173.245.59.122 2606:4700:58::adf5:3b7a 2803:f800:50::6ca2:c17a 2a06:98c1:50::ac40:217a	jake.ns.cloudflare.com jake.ns.cloudflare.com jake.ns.cloudflare.com jake.ns.cloudflare.com jake.ns.cloudflare.com jake.ns.cloudflare.com	AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc.

🌍 A Records#

2 records 38ms

IP	TTL	PTR	ASN	ISP / Org	CIDR	Country	City
104.21.5.104	300s	—	AS13335	Cloudflare, Inc.	104.21.0.0/17	—	—
172.67.133.74	300s	—	AS13335	Cloudflare, Inc.	172.67.128.0/17	—	—

📧 MX Records#

5 records 50ms

Priority	TTL	Mail Server	IP addresses	PTR	ASN
1	300s	aspmx.l.google.com	108.177.14.26 2a00:1450:4010:c0a::1b 2a00:1450:4010:c0a::1b	lt-in-f26.1e100.net lm-in-f27.1e100.net lm-in-x1b.1e100.net	AS15169 Google LLC AS15169 Google LLC AS15169 Google LLC
5	300s	alt1.aspmx.l.google.com	192.178.158.26 2404:6800:4013:813::1a	lcdels-in-f26.1e100.net lcdels-in-f26.1e100.net	AS15169 Google LLC AS15169 Google LLC
5	300s	alt2.aspmx.l.google.com	173.194.41.27 173.194.41.27 2404:6800:4001:c01::1a	mad01s14-in-f27.1e100.net yukulwh-in-f27.1e100.net yukulwh-in-f26.1e100.net	AS15169 Google LLC AS15169 Google LLC AS15169 Google LLC
10	300s	aspmx2.googlemail.com	192.178.158.26 2404:6800:4013:813::1b	lcdels-in-f26.1e100.net lcdels-in-f27.1e100.net	AS15169 Google LLC AS15169 Google LLC
10	300s	aspmx3.googlemail.com	173.194.41.26 173.194.41.26 2404:6800:4001:c01::1a	mad01s14-in-f26.1e100.net yukulwh-in-f26.1e100.net yukulwh-in-f26.1e100.net	AS15169 Google LLC AS15169 Google LLC AS15169 Google LLC

📧 Autodiscover / Autoconfig#

Service	CNAME / IP
🔷 Autodiscover	aegir.churchdesk.com
🔶 Autoconfig	aegir.churchdesk.com

🔷 AAAA Records (IPv6)#

2 records 37ms

IPv6 Address	TTL	PTR	ASN	ISP / Org	CIDR	Country	City
2606:4700:3030::6815:568	300s	—	AS13335	Cloudflare, Inc.	2606:4700:3000:0:0:0:0:0/42	—	—
2606:4700:3030::ac43:854a	300s	—	AS13335	Cloudflare, Inc.	2606:4700:3000:0:0:0:0:0/42	—	—

🔐 HTTPS Records#

1 records 47ms

Priority	Target	SvcParams
1 service	.	alpn="h3,h2" ipv4hint=104.21.5.104,172.67.133.74 ech=AEX+DQBBwQAgACD/u+hmtJtvMmVGHTkPSqC7uyXx305cJHfayZbuaZdTUQAEAAEAAQASY2xvdWRmbGFyZS1lY2guY29tAAA= ipv6hint=2606:4700:3030::6815:568,2606:4700:3030::ac43:854a

📝 TXT Records#

4 records 194ms

TXT Record
google-site-verification=vOzx_3e9oDVaBwUX7SYvR5EUBtxIoYg8tlXw5NE3fSY
k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPtW5iwpXVPiH5FzJ7Nrl8USzuY9zqqzjE0D1r04xDN6qwziDnmgcFNNfMewVKN2D1O+2J9N14hRprzByFwfQW76yojh54Xu3uSbQ3JP0A7k8o8GutRF8zbFUA8n0ZH2y0cIEjMliXY4W4LwPA7m4q0ObmvSjhd63O9d8z1XkUBwIDAQAB
smtpapi._domainkey.kirkeweb.dk
v=spf1 include:spf.mailjet.com a mx ip4:195.158.243.153 ip4:176.9.46.79 mx:alt1.aspmx.l.google.com mx:alt2.aspmx.l.google.com mx:aspmx.l.google.com mx:aspmx2.googlemail.com mx:aspmx3.googlemail.com ip4:46.30.127.12 include:amazonses.com include:_spf.google.com ~all

✉️ SPF#

Policy	Record (kirkeweb.dk)
~all (soft fail)	v=spf1 include:spf.mailjet.com a mx ip4:195.158.243.153 ip4:176.9.46.79 mx:alt1.aspmx.l.google.com mx:alt2.aspmx.l.google.com mx:aspmx.l.google.com mx:aspmx2.googlemail.com mx:aspmx3.googlemail.com ip4:46.30.127.12 include:amazonses.com include:_spf.google.com ~all

📨 DMARC#

✗ No DMARC record — mail spoofing not restricted

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

✗ No CAA records — any CA may issue certificates

🧩 Web & zone#

latest probe, not this scan · checked 2026-10-09 11:12:11

www	104.21.5.104 172.67.133.74 2606:4700:3030::6815:568 2606:4700:3030::ac43:854a (AS13335) (address records, no CNAME)
www vs bare domain	Same network kirkeweb.dk: 104.21.5.104 172.67.133.74 2606:4700:3030::6815:568 2606:4700:3030::ac43:854a (AS13335) www.kirkeweb.dk: 104.21.5.104 172.67.133.74 2606:4700:3030::6815:568 2606:4700:3030::ac43:854a (AS13335)
Wildcard	Yes: any name under the zone resolves

🔎 SPF check#

zone-wide SPF report

DNS lookups: 10/10 · policy: ~all

warn 10 of the 10 allowed DNS lookups used: one more include can break SPF

🔏 ACME Challenge#

Type	Name	Value
CNAME	_acme-challenge.kirkeweb.dk	aegir.churchdesk.com

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

107ms

Check	Result
Validation Status	🔓 Insecure
AD Flag (resolver validates)	✗ Not set
DS Record	✗ Not found
DNSKEY Record	✗ Not found
Flags	unsigned answer

🏷️ SOA#

0ms

Field	Value
Serial	2409937883
Primary NS (MNAME)	fay.ns.cloudflare.com
Responsible (RNAME)	dns@cloudflare.com
Refresh	10000s
Retry	2400s
Expire	604800s
Minimum (neg-cache TTL)	1800s

📋 Registration#

WHOIS fetched 2026-10-13 18:15:33

Field	Value
Registrar	Punktum dk A/S (direct)
Registered	1999-03-02
Expires	2027-03-31 (156d)

🔗 Same registrant#

0 domains

Other .dk domains whose WHOIS registrant has the same name and postal address. Matched on a keyed hash: the registrant's details are not stored or shown. Covers only domains whose WHOIS we have fetched (refreshed about monthly).

No other domain with this registrant in our WHOIS data yet

📋 WHOIS#

⏱️ Lookup Timing#

47ms

38ms

50ms

AAAA

37ms

TXT

194ms

CAA

36ms

HTTPS

47ms

TLSA

108ms

SOA

0ms

MTA-STS

88ms

DNSSEC

107ms

SRV

87ms

Total

1575ms

🕐 Scan History#

Scanned At	Duration	Records	DNSSEC
2026-10-09 11:12:11	1206ms	2 NS 2 A 5 MX	🔓 Insecure
2026-10-08 03:18:33	711ms	2 NS 2 A 5 MX	🔓 Insecure
2026-09-27 05:39:11	9760ms	2 NS 2 A 5 MX	🔓 Insecure
2026-09-21 11:57:57	1642ms	2 NS 2 A 5 MX	🔓 Insecure
2026-09-16 09:33:06	2261ms	2 NS 2 A 5 MX	🔓 Insecure
2026-08-31 23:11:42	864ms	2 NS 2 A 5 MX	🔓 Insecure
2026-08-25 04:57:21 shown	1575ms	2 NS 2 A 5 MX	🔓 Insecure
2026-07-19 22:59:21	9897ms	2 NS 2 A 5 MX	🔓 Insecure
2026-07-17 14:39:18	10466ms	2 NS 2 A 5 MX	🔓 Insecure
2026-06-27 22:53:42	1223ms	2 NS 2 A 5 MX	🔓 Insecure
2026-06-22 16:04:37	1208ms	2 NS 2 A 5 MX	🔓 Insecure
2026-06-19 16:41:49	1229ms	2 NS 2 A 5 MX	🔓 Insecure
2026-06-18 01:37:42	3661ms	2 NS 2 A 5 MX	🔓 Insecure