xkeys.dk

Records from scan: 2026-10-20 22:57:05  ·  662ms total  ·  last checked 2026-10-22 11:11 (unchanged)
⬇ Zone File 📜 Timeline & History ⚡ Scan Now

xkeys.dk is a .dk domain served by 2 nameservers (princess.ns.cloudflare.com, rudy.ns.cloudflare.com). It was already in the .dk zone when our tracking began on 16 June 2026. Its website address 104.21.87.10 is hosted by Cloudflare, Inc. (AS13335). Mail is handled by mail.xkeys.dk. The zone is not DNSSEC-signed, publishes a DMARC policy and is reachable over IPv6. Below are all of its DNS records from our latest scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

2 records   31ms

🌍 A Records#

2 records   46ms
IPTTLPTRASNISP / OrgCIDRCountryCity
104.21.87.10 300s — AS13335 Cloudflare, Inc. 104.21.0.0/17 — —
172.67.139.33 300s — AS13335 Cloudflare, Inc. 172.67.128.0/17 — —

📧 MX Records#

1 records   36ms
PriorityTTLMail ServerIP addressesPTRASN
10 300s mail.xkeys.dk 95.217.113.161 web01.prod.pineriver.dk AS24940 Hetzner Online GmbH

🔷 AAAA Records (IPv6)#

2 records   30ms

🔐 HTTPS Records#

1 records   39ms
PriorityTargetSvcParams
1 service . alpn="h3,h2" ipv4hint=104.21.87.10,172.67.139.33 ech=AEX+DQBBvQAgACCxHbzMEiwrKnDlt/rfqt7J98khnzl/iGurVJu8dCnFRAAEAAEAAQASY2xvdWRmbGFyZS1lY2guY29tAAA= ipv6hint=2606:4700:3032::ac43:8b21,2606:4700:3033::6815:570a

📝 TXT Records#

2 records   180ms
TXT Record
google-site-verification=Q8oHN6_pMOnZ9zNwD7eNW5FG3qaSE4daBa4xKFbritU
v=spf1 +a +mx +a:web01.prod.pineriver.dk -all

✉️ SPF#

PolicyRecord (xkeys.dk)
-all (hard fail) v=spf1 +a +mx +a:web01.prod.pineriver.dk -all

📨 DMARC#

PolicyRecord (_dmarc.xkeys.dk)
p=quarantine v=DMARC1; p=quarantine; adkim=r; aspf=r

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

✗ No CAA records — any CA may issue certificates

🧩 Web & zone#

checked 2026-10-20 22:57:05

✍️ DKIM keys#

1 found
SelectorCNAMEKey
default — RSA · ~2048 bit

DKIM selectors can't be listed, so we check the common ones (Microsoft 365, Google, Mailchimp, SendGrid, generic). Keys under other selectors aren't shown.

🔎 SPF check#

zone-wide SPF report

DNS lookups: 3/10 · policy: -all

No problems found

🔏 ACME Challenge#

TypeNameValue
TXT _acme-challenge.xkeys.dk KMQT173Jnlu3NaNA_g_fQaWVCBtco-sB3yVKSdYtyw4
TXT _acme-challenge.xkeys.dk nxdzbfx6Ck51UF86MDS8BAdaqtX4My-eHToJ5V2r-8g

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

63ms
CheckResult
Validation Status🔓 Insecure
AD Flag (resolver validates)✗ Not set
DS Record✗ Not found
DNSKEY Record✗ Not found
Flagsunsigned answer

🏷️ SOA#

34ms
FieldValue
Serial2417920924
Primary NS (MNAME)princess.ns.cloudflare.com
Responsible (RNAME)dns@cloudflare.com
Refresh10000s
Retry2400s
Expire604800s
Minimum (neg-cache TTL)1800s

📋 Registration#

✗ No registration data yet — queued for a WHOIS lookup
📋 WHOIS#

⏱️ Lookup Timing#

NS
31ms
A
46ms
MX
36ms
AAAA
30ms
TXT
180ms
CAA
36ms
HTTPS
39ms
TLSA
70ms
SOA
34ms
MTA-STS
43ms
DNSSEC
63ms
SRV
61ms
Total
662ms

🕐 Scan History#

Scanned AtDurationRecordsDNSSEC
2026-10-20 22:57:05 shown 662ms 2 NS 2 A 1 MX 🔓 Insecure
2026-10-08 06:32:15 561ms 2 NS 2 A 1 MX 🔓 Insecure
2026-10-07 04:17:33 2137ms 2 NS 2 A 1 MX 🔓 Insecure
2026-09-30 00:01:32 1163ms 2 NS 2 A 1 MX 🔓 Insecure
2026-09-26 23:20:30 734ms 2 NS 2 A 1 MX 🔓 Insecure
2026-08-30 17:02:19 776ms 2 NS 2 A 1 MX 🔓 Insecure
2026-08-09 16:49:22 1266ms 2 NS 2 A 1 MX 🔓 Insecure
2026-08-04 13:49:52 10271ms 2 NS 2 A 1 MX 🔓 Insecure
2026-06-29 06:49:37 1133ms 2 NS 2 A 1 MX 🔓 Insecure
2026-06-25 16:17:21 1162ms 2 NS 2 A 1 MX 🔓 Insecure
2026-06-23 09:53:22 1168ms 0 NS 0 A 0 MX ❓ Unknown
2026-06-18 03:12:27 2186ms 2 NS 2 A 1 MX 🔓 Insecure
dhd.dk [/] search Domains, Hosts & DNS — .dk zone