crtspirits.dk

📜 Historical scan 2026-06-16 23:00:03  ·  ← Latest scan
⬇ Zone File 📜 Timeline & History ⚡ Scan Now

crtspirits.dk is a .dk domain served by 4 nameservers (ns1.simply.com, ns2.simply.com, ns3.simply.com and 1 more). It was already in the .dk zone when our tracking began on 16 June 2026. Its website address 94.231.106.4 is hosted by team.blue Denmark A/S (AS48854) in Denmark. Mail is handled by aspmx.l.google.com, alt1.aspmx.l.google.com and 3 more. The zone is DNSSEC-signed and validates, has no DMARC policy and has no IPv6 address. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

4 records   43ms
NameserverIP addressesPTRASN / ISP
ns1.simply.com — — —
ns2.simply.com — — —
ns3.simply.com — — —
ns4.simply.com — — —

🌍 A Records#

1 records   45ms

📧 MX Records#

5 records   47ms

🔷 AAAA Records (IPv6)#

✗ No AAAA records — IPv6 not configured

🔐 HTTPS Records#

✗ No HTTPS RR — no SVCB/HTTPS service binding

📝 TXT Records#

3 records   110ms
TXT Record
google-site-verification=nzrYUmv2ulL0VkWC0WXW0smmIXRnprXkaaipUxG9obE
v=spf1 a mx include:spf.simply.com include:spf.mandrillapp.com -all
v=spf1 include:_spf.google.com include:spf.simply.com ~all

✉️ SPF#

⚠ Multiple SPF records — RFC 7208 §4.5 violation (receivers must treat this as permerror)
PolicyRecord (crtspirits.dk)
-all (hard fail) v=spf1 a mx include:spf.simply.com include:spf.mandrillapp.com -all
~all (soft fail) v=spf1 include:_spf.google.com include:spf.simply.com ~all

📨 DMARC#

✗ No DMARC record — mail spoofing not restricted

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

✗ No CAA records — any CA may issue certificates

🧩 Web & zone#

latest probe, not this scan · checked 2026-10-17 23:57:06
www94.231.106.4 (AS48854) (address records, no CNAME)
www vs bare domainSame network
crtspirits.dk: 94.231.106.4 (AS48854)
www.crtspirits.dk: 94.231.106.4 (AS48854)
WildcardYes: any name under the zone resolves
Denial of existenceNSEC zone can be walked (all names enumerable)
CDS / CDNSKEYPublished: key rollovers can be automated with the registry (RFC 7344/8078) 1 CDS, 1 CDNSKEY

🔎 SPF check#

zone-wide SPF report

DNS lookups: 4/10 · policy: -all

  • error 2 SPF records: receivers must treat that as a permanent error (RFC 7208 §4.5)

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

136ms
CheckResult
Validation Status🔒 Secure
AD Flag (resolver validates)✓ Set
DS Record✓ Found
DNSKEY Record✓ Found
Flagsfully validated

🏷️ SOA#

55ms
FieldValue
Serial2025042300
Primary NS (MNAME)ns1.simply.com
Responsible (RNAME)hostmaster@simply.com
Refresh14400s
Retry3600s
Expire1209600s
Minimum (neg-cache TTL)3600s

📋 Registration#

✗ No registration data yet — queued for a WHOIS lookup
📋 WHOIS#

⏱️ Lookup Timing#

NS
43ms
A
45ms
MX
47ms
AAAA
44ms
TXT
110ms
CAA
39ms
HTTPS
50ms
TLSA
112ms
SOA
55ms
MTA-STS
120ms
DNSSEC
136ms
SRV
0ms
Total
828ms

🕐 Scan History#

Scanned AtDurationRecordsDNSSEC
2026-10-01 07:00:37 2139ms 4 NS 1 A 5 MX 🔒 Secure
2026-08-27 21:11:43 763ms 4 NS 1 A 5 MX 🔒 Secure
2026-06-19 23:56:16 729ms 4 NS 1 A 5 MX 🔒 Secure
2026-06-18 14:17:10 909ms 4 NS 1 A 5 MX 🔒 Secure
2026-06-16 23:04:03 551ms 4 NS 1 A 5 MX 🔒 Secure
2026-06-16 23:00:21 2105ms 4 NS 1 A 5 MX 🔒 Secure
2026-06-16 23:00:03 shown 828ms 4 NS 1 A 5 MX 🔒 Secure
dhd.dk [/] search Domains, Hosts & DNS — .dk zone