celestialsecrets.dk DNS records

🖥️ Nameservers2 records 63ms

Nameserver	IP addresses	PTR	ASN / ISP
hasslo.ns.cloudflare.com	—	—	—
jule.ns.cloudflare.com	—	—	—

🌍 A Records2 records 42ms

IP	TTL	PTR	ASN	ISP / Org	CIDR	Country	City
104.21.19.57	—	—	AS13335	Cloudflare, Inc.	104.21.0.0/17	—	—
172.67.185.69	—	—	AS13335	Cloudflare, Inc.	172.67.128.0/17	—	—

📧 MX Records1 records 59ms

Priority	TTL	Mail Server	IP addresses	PTR	ASN
10	—	mail.celestialsecrets.dk	159.198.79.160	—	AS22612 Namecheap, Inc.

🔷 AAAA Records (IPv6)2 records 54ms

IPv6 Address	TTL	PTR	ASN	ISP / Org	CIDR	Country	City
2a06:98c1:3120::1	—	—	AS13335	Cloudflare, Inc.	2a06:98c1:3120::/46	—	—
2a06:98c1:3121::1	—	—	AS13335	Cloudflare, Inc.	2a06:98c1:3120::/46	—	—

🔐 HTTPS Records1 records 35ms

Priority	Target	SvcParams
1 service	.	alpn="h3,h2" ipv4hint=104.21.19.57,172.67.185.69 ech=AEX+DQBBFgAgACCwNFLgRRTjCPoQPifC2po/IvrwYwTTzGDqxOmWREutYwAEAAEAAQASY2xvdWRmbGFyZS1lY2guY29tAAA= ipv6hint=2606:4700:3032::ac43:b945,2606:4700:3033::6815:1339

📝 TXT Records2 records 131ms

TXT Record
v=spf1 +a +mx +ip4:159.198.79.160 ~all
v=spf1 a mx ip4:159.198.79.160 ~all

✉️ SPF

⚠ Multiple SPF records — RFC 7208 §4.5 violation (receivers must treat this as permerror)

Policy	Record (celestialsecrets.dk)
~all (soft fail)	v=spf1 +a +mx +ip4:159.198.79.160 ~all
~all (soft fail)	v=spf1 a mx ip4:159.198.79.160 ~all

📨 DMARC

Policy	Record (_dmarc.celestialsecrets.dk)
p=quarantine	v=DMARC1; p=quarantine; adkim=s; aspf=s

📬 MTA-STS

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records

✗ No CAA records — any CA may issue certificates

🔗 TLSA / DANE

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC88ms

Check	Result
Validation Status	🔓 Insecure
AD Flag (resolver validates)	✗ Not set
DS Record	✗ Not found
DNSKEY Record	✗ Not found
Flags	unsigned answer

🏷️ SOA54ms

Field	Value
Serial	2406009063
Primary NS (MNAME)	hasslo.ns.cloudflare.com
Responsible (RNAME)	dns@cloudflare.com
Refresh	10000s
Retry	2400s
Expire	604800s
Minimum (neg-cache TTL)	1800s

📋 Registration

✗ No registration data — collected automatically when SOA serial changes

📋 WHOIS

⏱️ Lookup Timing

NS

63ms

A

42ms

MX

59ms

AAAA

54ms

TXT

131ms

CAA

97ms

HTTPS

35ms

TLSA

75ms

SOA

54ms

MTA-STS

59ms

DNSSEC

88ms

SRV

0ms

Total

843ms

🕐 Scan History

Scanned At	Duration	Records	DNSSEC
2026-08-21 22:04:06	6368ms	2 NS 2 A 1 MX	🔓 Insecure	View
2026-08-18 20:57:55	2699ms	2 NS 2 A 1 MX	🔓 Insecure	View
2026-08-15 16:18:26	1800ms	2 NS 2 A 1 MX	🔓 Insecure	View
2026-08-01 10:40:52	1434ms	2 NS 2 A 1 MX	🔓 Insecure	View
2026-07-21 02:19:05	1754ms	2 NS 2 A 1 MX	🔓 Insecure	View
2026-06-23 22:21:46	1909ms	2 NS 2 A 1 MX	🔓 Insecure	View
2026-06-22 23:16:08	916ms	0 NS 0 A 0 MX	❓ Unknown	View
2026-06-16 20:21:24	10494ms	2 NS 2 A 1 MX	🔓 Insecure	View
2026-06-16 20:11:08	1538ms	2 NS 2 A 1 MX	🔓 Insecure	View
2026-06-16 20:02:15	843ms	2 NS 2 A 1 MX	🔓 Insecure	View
2026-06-16 20:01:07	793ms	2 NS 2 A 1 MX	🔓 Insecure	View