klarna.dk

📜 Historical scan 2026-09-17 22:39:23 · ← Latest scan

⬇ Zone File 📜 Timeline & History ⚡ Scan Now

klarna.dk is a .dk domain served by 6 nameservers (a1-74.akam.net, a12-65.akam.net, a20-66.akam.net and 3 more). It was registered on 6 May 2009 (WHOIS) and was already in the .dk zone when our tracking began on 16 June 2026. Its website address 3.173.21.37 is hosted by Amazon.com, Inc. (AS16509) in United States. Mail is handled by mxz1.klarna.com, mxz2.klarna.com and 2 more. The zone is not DNSSEC-signed, publishes a DMARC policy and has no IPv6 address. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

6 records 101ms

Nameserver	IP addresses	PTR	ASN / ISP
a1-74.akam.net	193.108.91.74 2600:1401:2::4a	ns1-74.akam.net a1-74.akam.net	AS21342 Akamai International B.V. AS21342 Akamai International B.V.
a12-65.akam.net	184.26.160.65 2600:1480:f000::41	a12-65.akam.net a12-65.akam.net	AS21342 Akamai International B.V. AS21342 Akamai International B.V.
a20-66.akam.net	2a02:26f0:67::42 95.100.175.66	a20-66.akam.net a20-66.akam.net	AS21342 Akamai International B.V. AS21342 Akamai International B.V.
a5-64.akam.net	2600:1480:b000::40 95.100.168.64	ns6-64.akam.net ns6-64.akam.net	AS21342 Akamai International B.V. AS21342 Akamai International B.V.
edns7.ultradns.com	2001:502:f3ff::207 204.74.66.7	edns7.ultradns.com edns7.ultradns.com	AS12008 Vercara, LLC AS12008 Vercara, LLC
edns7.ultradns.org	2001:502:4612::207 204.74.111.7	edns7.ultradns.org edns7.ultradns.org	AS12008 Vercara, LLC AS12008 Vercara, LLC

🌍 A Records#

3 records 123ms

IP	TTL	PTR	ASN	ISP / Org	CIDR	Country	City
3.173.21.37	1800s	—	AS16509	Amazon.com, Inc.	3.128.0.0/10	🇺🇸 United States	—
3.173.22.37	1800s	—	AS16509	Amazon.com, Inc.	3.128.0.0/10	🇺🇸 United States	—
3.173.23.37	1800s	—	AS16509	Amazon.com, Inc.	3.128.0.0/10	🇺🇸 United States	—

📧 MX Records#

4 records 90ms

Priority	TTL	Mail Server	IP addresses	PTR	ASN
10	3600s	mxz1.klarna.com	52.30.236.203	ec2-52-30-236-203.eu-west-1.compute.amazonaws.com	AS16509 Amazon.com, Inc.
10	3600s	mxz2.klarna.com	54.73.174.245	ec2-54-73-174-245.eu-west-1.compute.amazonaws.com	AS16509 Amazon.com, Inc.
10	3600s	mxz3.klarna.com	3.73.181.240	ec2-3-73-181-240.eu-central-1.compute.amazonaws.com	AS16509 Amazon.com, Inc.
10	3600s	mxz4.klarna.com	35.156.176.213	ec2-35-156-176-213.eu-central-1.compute.amazonaws.com	AS16509 Amazon.com, Inc.

🔷 AAAA Records (IPv6)#

✗ No AAAA records — IPv6 not configured

🔐 HTTPS Records#

✗ No HTTPS RR — no SVCB/HTTPS service binding

📝 TXT Records#

4 records 276ms

TXT Record
apple-domain-verification=G6Vyn269gq89l7INJSlRXM1QlXuW5kjfFYG0JupUa9E
google-site-verification=b_Yj8NBwTnq0bFA2a71AXYFEgfDYvDezMN4UfcBdBNA
google-site-verification=Hurtk1mTPbzJ6ZOzPLHsbs9mqjP_jfefImsyulVMiQM
v=spf1 include:klarna.com -all

✉️ SPF#

Policy	Record (klarna.dk)
-all (hard fail)	v=spf1 include:klarna.com -all

📨 DMARC#

Policy	Record (_dmarc.klarna.dk)
p=reject	v=DMARC1; p=reject; adkim=r; aspf=r; fo=1; rua=mailto:dmarc-reports@klarna.com

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

5 records 90ms

Flags	Tag	Value
0	iodef	mailto:dns-admin@klarna.com
0	issue	amazonaws.com
0	issue	digicert.com
0	issuewild	amazonaws.com
0	issuewild	digicert.com

🧩 Web & zone#

latest probe, not this scan · checked 2026-10-15 19:34:55

www CNAME	d1o2zx760sxd53.cloudfront.net (all on cloudfront.net) → 3.173.21.37 (AS16509)
www vs bare domain	Same network klarna.dk: 3.173.21.37 3.173.22.37 3.173.23.37 (AS16509) www.klarna.dk: 3.173.21.37 (AS16509)
Wildcard	No
BIMI	v=BIMI1;l=https://x.klarnacdn.net/bimi/klarna_bank_ab.svg;a=https://x.klarnacdn.net/bimi/klarna_bank_ab.pem

✍️ DKIM keys#

2 found

Selector	CNAME	Key
s1	s1.domainkey.u310735.wl236.sendgrid.net	RSA · ~2048 bit
s2	s2.domainkey.u310735.wl236.sendgrid.net	RSA · ~1024 bit below 2048 bit

DKIM selectors can't be listed, so we check the common ones (Microsoft 365, Google, Mailchimp, SendGrid, generic). Keys under other selectors aren't shown.

🔎 SPF check#

zone-wide SPF report

DNS lookups: 7/10 · policy: -all

No problems found

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

186ms

Check	Result
Validation Status	🔓 Insecure
AD Flag (resolver validates)	✗ Not set
DS Record	✗ Not found
DNSKEY Record	✗ Not found
Flags	unsigned answer

🏷️ SOA#

0ms

Field	Value
Serial	2017062161
Primary NS (MNAME)	a1-74.akam.net
Responsible (RNAME)	dns-admin@klarna.com
Refresh	3600s
Retry	1200s
Expire	1209600s
Minimum (neg-cache TTL)	600s

📋 Registration#

WHOIS fetched 2026-10-01 00:12:48

Field	Value
Registrar	CSC Digital Brand Service, Inc
Registered	2009-05-06
Expires	2027-05-31 (222d)

📋 WHOIS#

⏱️ Lookup Timing#

101ms

123ms

90ms

AAAA

117ms

TXT

276ms

CAA

90ms

HTTPS

110ms

TLSA

354ms

SOA

0ms

MTA-STS

111ms

DNSSEC

186ms

SRV

145ms

Total

4058ms

🕐 Scan History#

Scanned At	Duration	Records	DNSSEC
2026-10-15 19:34:55	1073ms	6 NS 3 A 4 MX	🔓 Insecure
2026-09-30 23:58:00	1438ms	6 NS 3 A 4 MX	🔓 Insecure
2026-09-27 06:20:23	2241ms	6 NS 3 A 4 MX	🔓 Insecure
2026-09-17 22:39:23 shown	4058ms	6 NS 3 A 4 MX	🔓 Insecure
2026-08-26 15:37:07	1962ms	6 NS 3 A 4 MX	🔓 Insecure
2026-06-24 02:41:40	1396ms	6 NS 3 A 4 MX	🔓 Insecure
2026-06-23 22:05:26	1893ms	6 NS 3 A 4 MX	🔓 Insecure
2026-06-17 23:31:26	1397ms	6 NS 3 A 4 MX	🔓 Insecure