xkeys.dk DNS records

🖥️ Nameservers2 records 34ms

Nameserver	IP addresses	PTR	ASN / ISP
princess.ns.cloudflare.com	108.162.194.17 162.159.38.17 172.64.34.17 2606:4700:50::a29f:2611 2803:f800:50::6ca2:c211 2a06:98c1:50::ac40:2211	princess.ns.cloudflare.com princess.ns.cloudflare.com princess.ns.cloudflare.com princess.ns.cloudflare.com princess.ns.cloudflare.com princess.ns.cloudflare.com	AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc.
rudy.ns.cloudflare.com	108.162.193.229 172.64.33.229 173.245.59.229 2606:4700:58::adf5:3be5 2803:f800:50::6ca2:c1e5 2a06:98c1:50::ac40:21e5	rudy.ns.cloudflare.com rudy.ns.cloudflare.com rudy.ns.cloudflare.com rudy.ns.cloudflare.com rudy.ns.cloudflare.com rudy.ns.cloudflare.com	AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc. AS13335 Cloudflare, Inc.

🌍 A Records2 records 22ms

IP	TTL	PTR	ASN	ISP / Org	CIDR	Country	City
104.21.87.10	300s	—	AS13335	Cloudflare, Inc.	104.21.0.0/17	—	—
172.67.139.33	300s	—	AS13335	Cloudflare, Inc.	172.67.128.0/17	—	—

📧 MX Records1 records 35ms

Priority	TTL	Mail Server	IP addresses	PTR	ASN
10	300s	mail.xkeys.dk	95.217.113.161	web01.prod.pineriver.dk	AS24940 Hetzner Online GmbH

🔷 AAAA Records (IPv6)2 records 36ms

IPv6 Address	TTL	PTR	ASN	ISP / Org	CIDR	Country	City
2606:4700:3032::ac43:8b21	300s	—	AS13335	Cloudflare, Inc.	2606:4700:3000:0:0:0:0:0/42	—	—
2606:4700:3033::6815:570a	300s	—	AS13335	Cloudflare, Inc.	2606:4700:3000:0:0:0:0:0/42	—	—

🔐 HTTPS Records1 records 23ms

Priority	Target	SvcParams
1 service	.	alpn="h3,h2" ipv4hint=104.21.87.10,172.67.139.33 ech=AEX+DQBBgQAgACB92BwhmEuJqoQuhfPEk0bOxiFHjsBjkbC7eU2Nq31uJwAEAAEAAQASY2xvdWRmbGFyZS1lY2guY29tAAA= ipv6hint=2606:4700:3032::ac43:8b21,2606:4700:3033::6815:570a

📝 TXT Records3 records 141ms

TXT Record
google-site-verification=Q8oHN6_pMOnZ9zNwD7eNW5FG3qaSE4daBa4xKFbritU
v=spf1 +a +mx +a:web01.prod.pineriver.dk -all
v=spf1 include:spf.onesignal.email include:mailgun.org ~all

✉️ SPF

⚠ Multiple SPF records — RFC 7208 §4.5 violation (receivers must treat this as permerror)

Policy	Record (xkeys.dk)
-all (hard fail)	v=spf1 +a +mx +a:web01.prod.pineriver.dk -all
~all (soft fail)	v=spf1 include:spf.onesignal.email include:mailgun.org ~all

📨 DMARC

Policy	Record (_dmarc.xkeys.dk)
p=quarantine	v=DMARC1; p=quarantine; adkim=s; aspf=s

📬 MTA-STS

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records

✗ No CAA records — any CA may issue certificates

🔏 ACME Challenge

Type	Name	Value
TXT	_acme-challenge.xkeys.dk	KMQT173Jnlu3NaNA_g_fQaWVCBtco-sB3yVKSdYtyw4
TXT	_acme-challenge.xkeys.dk	nxdzbfx6Ck51UF86MDS8BAdaqtX4My-eHToJ5V2r-8g

🔗 TLSA / DANE

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC94ms

Check	Result
Validation Status	🔓 Insecure
AD Flag (resolver validates)	✗ Not set
DS Record	✗ Not found
DNSKEY Record	✗ Not found
Flags	unsigned answer

🏷️ SOA0ms

Field	Value
Serial	2413482605
Primary NS (MNAME)	princess.ns.cloudflare.com
Responsible (RNAME)	dns@cloudflare.com
Refresh	10000s
Retry	2400s
Expire	604800s
Minimum (neg-cache TTL)	1800s

📋 Registration

✗ No registration data — collected automatically when SOA serial changes

📋 WHOIS

⏱️ Lookup Timing

NS

34ms

A

22ms

MX

35ms

AAAA

36ms

TXT

141ms

CAA

27ms

HTTPS

23ms

TLSA

50ms

SOA

0ms

MTA-STS

54ms

DNSSEC

94ms

SRV

46ms

Total

776ms

🕐 Scan History

Scanned At	Duration	Records	DNSSEC
2026-08-30 17:02:19	776ms	2 NS 2 A 1 MX	🔓 Insecure	View
2026-08-09 16:49:22	1266ms	2 NS 2 A 1 MX	🔓 Insecure	View
2026-08-04 13:49:52	10271ms	2 NS 2 A 1 MX	🔓 Insecure	View
2026-06-29 06:49:37	1133ms	2 NS 2 A 1 MX	🔓 Insecure	View
2026-06-25 16:17:21	1162ms	2 NS 2 A 1 MX	🔓 Insecure	View
2026-06-23 09:53:22	1168ms	0 NS 0 A 0 MX	❓ Unknown	View
2026-06-18 03:12:27	2186ms	2 NS 2 A 1 MX	🔓 Insecure	View