kxmgroup.dk

📜 Historical scan 2026-09-25 20:30:55  ·  ← Latest scan
⬇ Zone File 📜 Timeline & History ⚡ Scan Now

kxmgroup.dk is a .dk domain served by 2 nameservers (alice.ns.cloudflare.com, yadiel.ns.cloudflare.com). It was already in the .dk zone when our tracking began on 16 June 2026. Its website address 104.21.15.41 is hosted by Cloudflare, Inc. (AS13335). Mail is handled by mx1.mailchannels.net, mx2.mailchannels.net. The zone is not DNSSEC-signed, publishes a DMARC policy and is reachable over IPv6. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

2 records   47ms
NameserverIP addressesPTRASN / ISP
alice.ns.cloudflare.com 108.162.192.60
172.64.32.60
173.245.58.60
2606:4700:50::adf5:3a3c
2803:f800:50::6ca2:c03c
2a06:98c1:50::ac40:203c		 alice.ns.cloudflare.com
alice.ns.cloudflare.com
alice.ns.cloudflare.com
alice.ns.cloudflare.com
alice.ns.cloudflare.com
alice.ns.cloudflare.com		 AS13335 Cloudflare, Inc.
AS13335 Cloudflare, Inc.
AS13335 Cloudflare, Inc.
AS13335 Cloudflare, Inc.
AS13335 Cloudflare, Inc.
AS13335 Cloudflare, Inc.
yadiel.ns.cloudflare.com 108.162.195.4
162.159.44.4
172.64.35.4
2606:4700:58::a29f:2c04
2803:f800:50::6ca2:c304
2a06:98c1:50::ac40:2304		 yadiel.ns.cloudflare.com
yadiel.ns.cloudflare.com
yadiel.ns.cloudflare.com
yadiel.ns.cloudflare.com
yadiel.ns.cloudflare.com
yadiel.ns.cloudflare.com		 AS13335 Cloudflare, Inc.
AS13335 Cloudflare, Inc.
AS13335 Cloudflare, Inc.
AS13335 Cloudflare, Inc.
AS13335 Cloudflare, Inc.
AS13335 Cloudflare, Inc.

🌍 A Records#

2 records   39ms
IPTTLPTRASNISP / OrgCIDRCountryCity
104.21.15.41 300s — AS13335 Cloudflare, Inc. 104.21.0.0/17 — —
172.67.161.102 300s — AS13335 Cloudflare, Inc. 172.67.128.0/17 — —

📧 MX Records#

2 records   40ms
PriorityTTLMail ServerIP addressesPTRASN
0 300s mx1.mailchannels.net 54.187.177.89 ec2-54-187-177-89.us-west-2.compute.amazonaws.com AS16509 Amazon.com, Inc.
0 300s mx2.mailchannels.net 54.69.1.140 ec2-54-69-1-140.us-west-2.compute.amazonaws.com AS16509 Amazon.com, Inc.

📧 Autodiscover / Autoconfig#

ServiceCNAME / IP
🔶 Autoconfig104.21.15.41

🔷 AAAA Records (IPv6)#

2 records   48ms
IPv6 AddressTTLPTRASNISP / OrgCIDRCountryCity
2606:4700:3032::6815:f29 300s — AS13335 Cloudflare, Inc. 2606:4700:3000:0:0:0:0:0/42 — —
2606:4700:3032::ac43:a166 300s — AS13335 Cloudflare, Inc. 2606:4700:3000:0:0:0:0:0/42 — —

🔐 HTTPS Records#

1 records   42ms
PriorityTargetSvcParams
1 service . alpn="h3,h2" ipv4hint=104.21.15.41,172.67.161.102 ech=AEX+DQBBkwAgACB2w4vfa+M9HHlOZHTJfrR3J8XZyEh+mfsimKlmhHUyJwAEAAEAAQASY2xvdWRmbGFyZS1lY2guY29tAAA= ipv6hint=2606:4700:3032::6815:f29,2606:4700:3032::ac43:a166

🔌 SRV Records#

1 records   68ms
ServicePriorityWeightPortTarget
_autodiscover._tcp 5 0 443 autoconfig.dreamhost.com

📝 TXT Records#

5 records   163ms
TXT Record
brevo-code:116fe1634ebeea102cba47013455f193
google-site-verification=t-SL_uI9ybhFWWT3zjKin7V4T4oWxSIQ83RU-jXAIBU
google-site-verification=uyHxkmoZpyUn3vNvLUpVCEpceNSthUDOTDKoSeKHseo
v=spf1 include:_spf.google.com ~all
v=spf1 mx include:netblocks.dreamhost.com include:relay.mailchannels.net -all

✉️ SPF#

⚠ Multiple SPF records — RFC 7208 §4.5 violation (receivers must treat this as permerror)
PolicyRecord (kxmgroup.dk)
~all (soft fail) v=spf1 include:_spf.google.com ~all
-all (hard fail) v=spf1 mx include:netblocks.dreamhost.com include:relay.mailchannels.net -all

📨 DMARC#

PolicyRecord (_dmarc.kxmgroup.dk)
p=none (monitor only) v=DMARC1; p=none; rua=mailto:rua@dmarc.brevo.com

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

✗ No CAA records — any CA may issue certificates

🧩 Web & zone#

latest probe, not this scan · checked 2026-10-23 02:16:54
www104.21.15.41 172.67.161.102 2606:4700:3032::6815:f29 2606:4700:3032::ac43:a166 (AS13335) (address records, no CNAME)
www vs bare domainSame network
WildcardNo

✍️ DKIM keys#

2 found
SelectorCNAMEKey
s1 s1.domainkey.u27798156.wl157.sendgrid.net RSA · ~2048 bit
s2 s2.domainkey.u27798156.wl157.sendgrid.net RSA · ~2048 bit

DKIM selectors can't be listed, so we check the common ones (Microsoft 365, Google, Mailchimp, SendGrid, generic). Keys under other selectors aren't shown.

🔎 SPF check#

zone-wide SPF report

DNS lookups: 1/10 · policy: ~all

  • error 2 SPF records: receivers must treat that as a permanent error (RFC 7208 §4.5)

🔏 ACME Challenge#

TypeNameValue
TXT _acme-challenge.kxmgroup.dk dWk9u0YTk_2Y2ZiiPJIvOaCV7p2RwfoG6m0xZKx-gjk
TXT _acme-challenge.kxmgroup.dk zl5ePjlelDt3zRIOxLdic8Ug8TZ9Go9HDlZFFbpcASk

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

116ms
CheckResult
Validation Status🔓 Insecure
AD Flag (resolver validates)✗ Not set
DS Record✗ Not found
DNSKEY Record✗ Not found
Flagsunsigned answer

🏷️ SOA#

0ms
FieldValue
Serial2415828728
Primary NS (MNAME)alice.ns.cloudflare.com
Responsible (RNAME)dns@cloudflare.com
Refresh10000s
Retry2400s
Expire604800s
Minimum (neg-cache TTL)1800s

📋 Registration#

✗ No registration data yet — queued for a WHOIS lookup
📋 WHOIS#

⏱️ Lookup Timing#

NS
47ms
A
39ms
MX
40ms
AAAA
48ms
TXT
163ms
CAA
38ms
HTTPS
42ms
TLSA
184ms
SOA
0ms
MTA-STS
51ms
DNSSEC
116ms
SRV
68ms
Total
920ms

🕐 Scan History#

Scanned AtDurationRecordsDNSSEC
2026-10-23 02:16:54 1101ms 2 NS 2 A 2 MX 🔓 Insecure
2026-10-09 14:07:37 849ms 2 NS 2 A 2 MX 🔓 Insecure
2026-09-30 21:51:22 711ms 2 NS 2 A 2 MX 🔓 Insecure
2026-09-26 20:53:27 879ms 2 NS 2 A 2 MX 🔓 Insecure
2026-09-25 20:30:55 shown 920ms 2 NS 2 A 2 MX 🔓 Insecure
2026-09-23 19:00:01 1443ms 2 NS 2 A 2 MX 🔓 Insecure
2026-07-30 19:59:15 905ms 2 NS 2 A 2 MX 🔓 Insecure
2026-07-20 04:34:35 1269ms 2 NS 2 A 2 MX 🔓 Insecure
2026-06-20 05:03:17 698ms 2 NS 2 A 2 MX 🔓 Insecure
2026-06-18 01:19:35 2978ms 2 NS 2 A 2 MX 🔓 Insecure
dhd.dk [/] search Domains, Hosts & DNS — .dk zone