legalxtract.dk DNS records

🖥️ Nameservers2 records 58ms

Nameserver	IP addresses	PTR	ASN / ISP
ns0.wixdns.net	216.239.32.101	ns-cloud-g1.googledomains.com	AS15169 Google LLC
ns1.wixdns.net	216.239.34.101	ns-cloud-g2.googledomains.com	AS15169 Google LLC

🌍 A Records1 records 61ms

IP	TTL	PTR	ASN	ISP / Org	CIDR	Country	City
198.202.211.1	600s	—	AS209242	Cloudflare London, LLC	198.202.211.0/24	🇺🇸 United States	—

📧 MX Records5 records 61ms

Priority	TTL	Mail Server	IP addresses	PTR	ASN
10	3600s	aspmx.l.google.com	2a00:1450:4010:c0a::1b 2a00:1450:4010:c0a::1b 64.233.164.27	lm-in-f27.1e100.net lm-in-x1b.1e100.net lf-in-f27.1e100.net	AS15169 Google LLC AS15169 Google LLC AS15169 Google LLC
20	3600s	alt1.aspmx.l.google.com	192.178.158.27 2404:6800:4013:813::1b	lcdels-in-f27.1e100.net lcdels-in-f27.1e100.net	AS15169 Google LLC AS15169 Google LLC
30	3600s	alt2.aspmx.l.google.com	172.253.158.26 2404:6800:4003:c26::1b	so-in-f26.1e100.net so-in-f27.1e100.net	AS15169 Google LLC AS15169 Google LLC
40	3600s	alt3.aspmx.l.google.com	108.177.125.26 2404:6800:4008:c01::1b	tp-in-f26.1e100.net tp-in-f27.1e100.net	AS15169 Google LLC AS15169 Google LLC
50	3600s	alt4.aspmx.l.google.com	192.178.230.27 2404:6800:400b:c01b::1b	yunrtab-in-f27.1e100.net yunrtab-in-f27.1e100.net	AS15169 Google LLC AS15169 Google LLC

🔷 AAAA Records (IPv6)

✗ No AAAA records — IPv6 not configured

🔐 HTTPS Records

✗ No HTTPS RR — no SVCB/HTTPS service binding

📝 TXT Records3 records 394ms

TXT Record
proxy-ssl.webflow.com
v=spf1 include:_spf.google.com ~all
v=spf1 include:spf.protection.outlook.com -all

✉️ SPF

⚠ Multiple SPF records — RFC 7208 §4.5 violation (receivers must treat this as permerror)

Policy	Record (legalxtract.dk)
~all (soft fail)	v=spf1 include:_spf.google.com ~all
-all (hard fail)	v=spf1 include:spf.protection.outlook.com -all

📨 DMARC

✗ No DMARC record — mail spoofing not restricted

📬 MTA-STS

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records

✗ No CAA records — any CA may issue certificates

🔗 TLSA / DANE

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC93ms

Check	Result
Validation Status	🔓 Insecure
AD Flag (resolver validates)	✗ Not set
DS Record	✗ Not found
DNSKEY Record	✗ Not found
Flags	unsigned answer

🏷️ SOA55ms

Field	Value
Serial	2019060314
Primary NS (MNAME)	ns0.wixdns.net
Responsible (RNAME)	support@wix.com
Refresh	10800s
Retry	3600s
Expire	1209600s
Minimum (neg-cache TTL)	3600s

📋 Registration

✗ No registration data — collected automatically when SOA serial changes

📋 WHOIS

⏱️ Lookup Timing

NS

58ms

A

61ms

MX

61ms

AAAA

56ms

TXT

394ms

CAA

58ms

HTTPS

61ms

TLSA

922ms

SOA

55ms

MTA-STS

95ms

DNSSEC

93ms

SRV

96ms

Total

1813ms

🕐 Scan History

Scanned At	Duration	Records	DNSSEC
2026-07-03 01:32:14	1813ms	2 NS 1 A 5 MX	🔓 Insecure	View
2026-06-24 01:42:43	1263ms	2 NS 1 A 5 MX	🔓 Insecure	View
2026-06-23 10:55:00	1495ms	2 NS 1 A 5 MX	🔓 Insecure	View
2026-06-23 10:53:18	2552ms	2 NS 1 A 5 MX	🔓 Insecure	View
2026-06-17 15:53:05	6707ms	2 NS 1 A 5 MX	🔓 Insecure	View