kirkeweb.dk

Records from scan: 2026-10-09 11:12:11 · 1206ms total · last checked 2026-10-25 04:40 (unchanged)

⬇ Zone File 📜 Timeline & History ⚡ Scan Now

kirkeweb.dk is a .dk domain served by 2 nameservers (fay.ns.cloudflare.com, jake.ns.cloudflare.com). It was registered on 2 March 1999 (WHOIS) and was already in the .dk zone when our tracking began on 16 June 2026. Its website address 104.21.5.104 is hosted by Cloudflare, Inc. (AS13335). Mail is handled by aspmx.l.google.com, alt1.aspmx.l.google.com and 3 more. The zone is not DNSSEC-signed, has no DMARC policy and is reachable over IPv6. Below are all of its DNS records from our latest scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

2 records 33ms

Nameserver	IP addresses	PTR	ASN / ISP
fay.ns.cloudflare.com	108.162.192.115 172.64.32.115 173.245.58.115 2606:4700:50::adf5:3a73 2803:f800:50::6ca2:c073 2a06:98c1:50::ac40:2073	fay.ns.cloudflare.com fay.ns.cloudflare.com fay.ns.cloudflare.com fay.ns.cloudflare.com fay.ns.cloudflare.com fay.ns.cloudflare.com	AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc.
jake.ns.cloudflare.com	108.162.193.122 172.64.33.122 173.245.59.122 2606:4700:58::adf5:3b7a 2803:f800:50::6ca2:c17a 2a06:98c1:50::ac40:217a	jake.ns.cloudflare.com jake.ns.cloudflare.com jake.ns.cloudflare.com jake.ns.cloudflare.com jake.ns.cloudflare.com jake.ns.cloudflare.com	AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc.

🌍 A Records#

2 records 32ms

IP	TTL	PTR	ASN	ISP / Org	CIDR	Country	City
104.21.5.104	300s	—	AS13335	Cloudflare, Inc.	104.21.0.0/17	—	—
172.67.133.74	300s	—	AS13335	Cloudflare, Inc.	172.67.128.0/17	—	—

📧 MX Records#

5 records 32ms

Priority	TTL	Mail Server	IP addresses	PTR	ASN
1	300s	aspmx.l.google.com	173.194.221.27 2a00:1450:4010:c03::1a 2a00:1450:4010:c03::1a	lm-in-f27.1e100.net lr-in-x1a.1e100.net lr-in-f26.1e100.net	AS15169 Google LLC AS15169 Google LLC AS15169 Google LLC
5	300s	alt1.aspmx.l.google.com	192.178.158.26 2404:6800:4013:813::1b	lcdels-in-f26.1e100.net lcdels-in-f27.1e100.net	AS15169 Google LLC AS15169 Google LLC
5	300s	alt2.aspmx.l.google.com	173.194.41.27 173.194.41.27 2404:6800:4001:c01::1a	yukulwh-in-f27.1e100.net mad01s14-in-f27.1e100.net yukulwh-in-f26.1e100.net	AS15169 Google LLC AS15169 Google LLC AS15169 Google LLC
10	300s	aspmx2.googlemail.com	192.178.158.27 2404:6800:4013:813::1b	lcdels-in-f27.1e100.net lcdels-in-f27.1e100.net	AS15169 Google LLC AS15169 Google LLC
10	300s	aspmx3.googlemail.com	173.194.41.27 173.194.41.27 2404:6800:4001:c01::1b	yukulwh-in-f27.1e100.net mad01s14-in-f27.1e100.net yukulwh-in-f27.1e100.net	AS15169 Google LLC AS15169 Google LLC AS15169 Google LLC

📧 Autodiscover / Autoconfig#

Service	CNAME / IP
🔷 Autodiscover	aegir.churchdesk.com
🔶 Autoconfig	aegir.churchdesk.com

🔷 AAAA Records (IPv6)#

2 records 39ms

IPv6 Address	TTL	PTR	ASN	ISP / Org	CIDR	Country	City
2606:4700:3030::6815:568	300s	—	AS13335	Cloudflare, Inc.	2606:4700:3000:0:0:0:0:0/42	—	—
2606:4700:3030::ac43:854a	300s	—	AS13335	Cloudflare, Inc.	2606:4700:3000:0:0:0:0:0/42	—	—

🔐 HTTPS Records#

1 records 48ms

Priority	Target	SvcParams
1 service	.	alpn="h3,h2" ipv4hint=104.21.5.104,172.67.133.74 ech=AEX+DQBB8gAgACCIZ8uQXidaAaC48rHXa9UK3cXHkpyHTn9GHoptCod4GAAEAAEAAQASY2xvdWRmbGFyZS1lY2guY29tAAA= ipv6hint=2606:4700:3030::6815:568,2606:4700:3030::ac43:854a

📝 TXT Records#

4 records 234ms

TXT Record
google-site-verification=vOzx_3e9oDVaBwUX7SYvR5EUBtxIoYg8tlXw5NE3fSY
k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPtW5iwpXVPiH5FzJ7Nrl8USzuY9zqqzjE0D1r04xDN6qwziDnmgcFNNfMewVKN2D1O+2J9N14hRprzByFwfQW76yojh54Xu3uSbQ3JP0A7k8o8GutRF8zbFUA8n0ZH2y0cIEjMliXY4W4LwPA7m4q0ObmvSjhd63O9d8z1XkUBwIDAQAB
smtpapi._domainkey.kirkeweb.dk
v=spf1 include:spf.mailjet.com a mx ip4:195.158.243.153 ip4:176.9.46.79 mx:alt1.aspmx.l.google.com mx:alt2.aspmx.l.google.com mx:aspmx.l.google.com mx:aspmx2.googlemail.com mx:aspmx3.googlemail.com ip4:46.30.127.12 include:amazonses.com include:_spf.google.com ~all

✉️ SPF#

Policy	Record (kirkeweb.dk)
~all (soft fail)	v=spf1 include:spf.mailjet.com a mx ip4:195.158.243.153 ip4:176.9.46.79 mx:alt1.aspmx.l.google.com mx:alt2.aspmx.l.google.com mx:aspmx.l.google.com mx:aspmx2.googlemail.com mx:aspmx3.googlemail.com ip4:46.30.127.12 include:amazonses.com include:_spf.google.com ~all

📨 DMARC#

✗ No DMARC record — mail spoofing not restricted

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

✗ No CAA records — any CA may issue certificates

🧩 Web & zone#

checked 2026-10-09 11:12:11

www	104.21.5.104 172.67.133.74 2606:4700:3030::6815:568 2606:4700:3030::ac43:854a (AS13335) (address records, no CNAME)
www vs bare domain	Same network kirkeweb.dk: 104.21.5.104 172.67.133.74 2606:4700:3030::6815:568 2606:4700:3030::ac43:854a (AS13335) www.kirkeweb.dk: 104.21.5.104 172.67.133.74 2606:4700:3030::6815:568 2606:4700:3030::ac43:854a (AS13335)
Wildcard	Yes: any name under the zone resolves

🔎 SPF check#

zone-wide SPF report

DNS lookups: 10/10 · policy: ~all

warn 10 of the 10 allowed DNS lookups used: one more include can break SPF

🔏 ACME Challenge#

Type	Name	Value
CNAME	_acme-challenge.kirkeweb.dk	aegir.churchdesk.com

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

62ms

Check	Result
Validation Status	🔓 Insecure
AD Flag (resolver validates)	✗ Not set
DS Record	✗ Not found
DNSKEY Record	✗ Not found
Flags	unsigned answer

🏷️ SOA#

34ms

Field	Value
Serial	2415036277
Primary NS (MNAME)	fay.ns.cloudflare.com
Responsible (RNAME)	dns@cloudflare.com
Refresh	10000s
Retry	2400s
Expire	604800s
Minimum (neg-cache TTL)	1800s

📋 Registration#

WHOIS fetched 2026-10-13 18:15:33

Field	Value
Registrar	Punktum dk A/S (direct)
Registered	1999-03-02
Expires	2027-03-31 (156d)

🔗 Same registrant#

0 domains

Other .dk domains whose WHOIS registrant has the same name and postal address. Matched on a keyed hash: the registrant's details are not stored or shown. Covers only domains whose WHOIS we have fetched (refreshed about monthly).

No other domain with this registrant in our WHOIS data yet

📋 WHOIS#

⏱️ Lookup Timing#

33ms

32ms

AAAA

39ms

TXT

234ms

CAA

45ms

HTTPS

48ms

TLSA

82ms

SOA

34ms

MTA-STS

84ms

DNSSEC

62ms

SRV

156ms

Total

1206ms

🕐 Scan History#

Scanned At	Duration	Records	DNSSEC
2026-10-09 11:12:11 shown	1206ms	2 NS 2 A 5 MX	🔓 Insecure
2026-10-08 03:18:33	711ms	2 NS 2 A 5 MX	🔓 Insecure
2026-09-27 05:39:11	9760ms	2 NS 2 A 5 MX	🔓 Insecure
2026-09-21 11:57:57	1642ms	2 NS 2 A 5 MX	🔓 Insecure
2026-09-16 09:33:06	2261ms	2 NS 2 A 5 MX	🔓 Insecure
2026-08-31 23:11:42	864ms	2 NS 2 A 5 MX	🔓 Insecure
2026-08-25 04:57:21	1575ms	2 NS 2 A 5 MX	🔓 Insecure
2026-07-19 22:59:21	9897ms	2 NS 2 A 5 MX	🔓 Insecure
2026-07-17 14:39:18	10466ms	2 NS 2 A 5 MX	🔓 Insecure
2026-06-27 22:53:42	1223ms	2 NS 2 A 5 MX	🔓 Insecure
2026-06-22 16:04:37	1208ms	2 NS 2 A 5 MX	🔓 Insecure
2026-06-19 16:41:49	1229ms	2 NS 2 A 5 MX	🔓 Insecure
2026-06-18 01:37:42	3661ms	2 NS 2 A 5 MX	🔓 Insecure