kmit.dk

📜 Historical scan 2026-07-30 06:52:56 · ← Latest scan

kmit.dk is a .dk domain served by 4 nameservers (ns1.simply.com, ns2.simply.com, ns3.simply.com and 1 more). It was already in the .dk zone when our tracking began on 16 June 2026. The zone is DNSSEC-signed and validates, publishes a DMARC policy and has no IPv6 address. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers

4 records 41ms

Nameserver	IP addresses	PTR	ASN / ISP
ns1.simply.com	2a02:2339:1:15c::4562:4562 91.197.248.78	ns1.simply.com ns1.simply.com	AS48854 team.blue Denmark A/S AS48854 team.blue Denmark A/S
ns2.simply.com	185.25.141.15 2a02:2339:4006:101::4562:4562	ns2.simply.com ns2.simply.com	AS48854 team.blue Denmark A/S AS48854 team.blue Denmark A/S
ns3.simply.com	91.197.248.79	ns3.simply.com	AS48854 team.blue Denmark A/S
ns4.simply.com	91.197.248.80	ns4.simply.com	AS48854 team.blue Denmark A/S

🌍 A Records

🌍

No A records found

📧 MX Records

📧

No MX records found

🔷 AAAA Records (IPv6)

✗ No AAAA records — IPv6 not configured

🔐 HTTPS Records

✗ No HTTPS RR — no SVCB/HTTPS service binding

📝 TXT Records

📝

No TXT records found

✉️ SPF

✗ No SPF record — mail spoofing not restricted

📨 DMARC

Policy	Record (_dmarc.kmit.dk)
p=reject	v=DMARC1; p=reject; rua=mailto:krm@kmit.dk; ruf=mailto:krm@kmit.dk; fo=1

📬 MTA-STS

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records

✗ No CAA records — any CA may issue certificates

🧩 Web & zone

latest probe, not this scan · checked 2026-10-01 23:16:39

www	NXDOMAIN
Wildcard	No
Denial of existence	NSEC zone can be walked (all names enumerable)
CDS / CDNSKEY	Published: key rollovers can be automated with the registry (RFC 7344/8078) 1 CDS, 1 CDNSKEY

✍️ DKIM keys

3 found

Selector	CNAME	Key
k1	dkim.mcsv.net	RSA · ~1024 bit below 2048 bit
selector1	selector1-kmit-dk._domainkey.kmit331.w-v1.dkim.mail.microsoft	RSA · ~2048 bit
selector2	selector2-kmit-dk._domainkey.kmit331.w-v1.dkim.mail.microsoft	RSA · ~2048 bit

DKIM selectors can't be listed, so we check the common ones (Microsoft 365, Google, Mailchimp, SendGrid, generic). Keys under other selectors aren't shown.

🔗 TLSA / DANE

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC

9067ms

Check	Result
Validation Status	🔒 Secure
AD Flag (resolver validates)	✓ Set
DS Record	✗ Not found
DNSKEY Record	✗ Not found
Flags	resolution failed: ncache nxrrset

🏷️ SOA

✗ No SOA record found

📋 Registration

✗ No registration data — collected automatically when SOA serial changes

📋 WHOIS

⏱️ Lookup Timing

41ms

4029ms

AAAA

4030ms

TXT

4131ms

CAA

4029ms

HTTPS

2054ms

TLSA

33ms

SOA

4029ms

MTA-STS

4037ms

DNSSEC

9067ms

SRV

4030ms

Total

13800ms

🕐 Scan History

Scanned At	Duration	Records	DNSSEC
2026-10-01 23:16:39	1153ms	4 NS 0 A 1 MX	🔒 Secure
2026-09-27 22:35:36	701ms	4 NS 0 A 1 MX	🔒 Secure
2026-09-05 14:33:33	832ms	4 NS 0 A 1 MX	🔒 Secure
2026-08-10 00:07:37	17498ms	4 NS 0 A 1 MX	🔒 Secure
2026-08-02 08:58:51	1229ms	4 NS 0 A 1 MX	🔒 Secure
2026-07-30 06:52:56 shown	13800ms	4 NS 0 A 0 MX	🔒 Secure
2026-07-03 05:28:08	1141ms	4 NS 0 A 1 MX	🔒 Secure
2026-06-21 08:43:14	1261ms	4 NS 0 A 1 MX	🔒 Secure
2026-06-20 16:46:18	735ms	4 NS 0 A 1 MX	🔒 Secure
2026-06-18 04:33:13	3165ms	4 NS 0 A 1 MX	🔒 Secure