crystalcandle.dk

Records from scan: 2026-09-21 00:30:42 · 1542ms total · last checked 2026-10-16 10:32 (unchanged)

⬇ Zone File 📜 Timeline & History ⚡ Scan Now

crystalcandle.dk is a .dk domain served by 3 nameservers (ns1.websupport.cz, ns2.websupport.cz, ns3.websupport.eu). It was already in the .dk zone when our tracking began on 16 June 2026. Its website address 37.9.175.212 is hosted by WebSupport s.r.o. (AS51013) in Slovakia. Mail is handled by mx10.active24.cz, mx20.active24.cz. The zone is DNSSEC-signed and validates, publishes a DMARC policy and is reachable over IPv6. Below are all of its DNS records from our latest scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

3 records 191ms

Nameserver	IP addresses	PTR	ASN / ISP
ns1.websupport.cz	2a10:bbc0::11 45.10.97.11	ns1.websupport.eu ns1.websupport.eu	AS25234 ACTIVE 24, s.r.o. AS25234 ACTIVE 24, s.r.o.
ns2.websupport.cz	185.71.159.12 2a02:250:3::12	ns2.websupport.eu ns2.websupport.eu	AS25234 ACTIVE 24, s.r.o. AS25234 ACTIVE 24, s.r.o.
ns3.websupport.eu	2a10:bbc0::13 45.10.97.13	ns3.websupport.eu ns3.websupport.eu	AS25234 ACTIVE 24, s.r.o. AS25234 ACTIVE 24, s.r.o.

🌍 A Records#

1 records 129ms

IP	TTL	PTR	ASN	ISP / Org	CIDR	Country	City
37.9.175.212	600s	ing.r4.websupport.cz	AS51013	WebSupport s.r.o.	37.9.168.0/21	🇸🇰 Slovakia	—

📧 MX Records#

2 records 119ms

Priority	TTL	Mail Server	IP addresses	PTR	ASN
10	600s	mx10.active24.cz	2a00:4b40:aaaa:2101:45:13:137:85 2a00:4b40:aaaa:2101:45:13:137:86 45.13.137.85 45.13.137.86	m1-u6-mx.active24.cz m1-u7-mx.active24.cz m1-u6-mx.active24.cz m1-u7-mx.active24.cz	AS51013 WebSupport s.r.o. AS51013 WebSupport s.r.o. AS51013 WebSupport s.r.o. AS51013 WebSupport s.r.o.
100	600s	mx20.active24.cz	2a00:4b40:aaaa:2101:45:13:137:85 2a00:4b40:aaaa:2101:45:13:137:86 45.13.137.85 45.13.137.86	m1-u6-mx.active24.cz m1-u7-mx.active24.cz m1-u6-mx.active24.cz m1-u7-mx.active24.cz	AS51013 WebSupport s.r.o. AS51013 WebSupport s.r.o. AS51013 WebSupport s.r.o. AS51013 WebSupport s.r.o.

📧 Autodiscover / Autoconfig#

Service	CNAME / IP
🔷 Autodiscover	web.prod.bts.websupport.sk → 37.9.169.173
🔶 Autoconfig	web.prod.bts.websupport.sk → 37.9.169.173

🔷 AAAA Records (IPv6)#

1 records 337ms

IPv6 Address	TTL	PTR	ASN	ISP / Org	CIDR	Country	City
2a00:4b40:aaaa:2011::7	600s	—	AS51013	WebSupport s.r.o.	2a00:4b40:0:0:0:0:0:0/32	🇸🇰 Slovakia	—

🔐 HTTPS Records#

✗ No HTTPS RR — no SVCB/HTTPS service binding

🔌 SRV Records#

1 records 374ms

Service	Priority	Weight	Port	Target
_autodiscover._tcp	0	0	443	web.prod.bts.websupport.sk

📝 TXT Records#

1 records 351ms

TXT Record
v=spf1 a mx include:_spf.websupport.cz -all

✉️ SPF#

Policy	Record (crystalcandle.dk)
-all (hard fail)	v=spf1 a mx include:_spf.websupport.cz -all

📨 DMARC#

Policy	Record (_dmarc.crystalcandle.dk)
p=quarantine	v=DMARC1; p=quarantine

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

✗ No CAA records — any CA may issue certificates

🧩 Web & zone#

checked 2026-10-08 00:21:45

www	37.9.175.212 2a00:4b40:aaaa:2011::7 (AS51013) (address records, no CNAME)
www vs bare domain	Same network crystalcandle.dk: 37.9.175.212 2a00:4b40:aaaa:2011::7 (AS51013) www.crystalcandle.dk: 37.9.175.212 2a00:4b40:aaaa:2011::7 (AS51013)
Wildcard	Yes: any name under the zone resolves
Denial of existence	NSEC3 · 0 iterations · 8-byte salt RFC 9276 recommends 0 iterations and no salt
CDS / CDNSKEY	None 0 CDS, 0 CDNSKEY

🔎 SPF check#

zone-wide SPF report

DNS lookups: 4/10 · policy: -all

No problems found

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

186ms

Check	Result
Validation Status	🔒 Secure
AD Flag (resolver validates)	✓ Set
DS Record	✓ Found
DNSKEY Record	✓ Found
Flags	fully validated

🏷️ SOA#

0ms

Field	Value
Serial	1764412737
Primary NS (MNAME)	ns1.websupport.cz
Responsible (RNAME)	admin@websupport.cz
Refresh	7200s
Retry	2048s
Expire	1048576s
Minimum (neg-cache TTL)	2560s

📋 Registration#

✗ No registration data yet — queued for a WHOIS lookup

📋 WHOIS#

⏱️ Lookup Timing#

191ms

129ms

119ms

AAAA

337ms

TXT

351ms

CAA

132ms

HTTPS

143ms

TLSA

266ms

SOA

0ms

MTA-STS

117ms

DNSSEC

186ms

SRV

374ms

Total

1542ms

🕐 Scan History#

Scanned At	Duration	Records	DNSSEC
2026-09-21 00:30:42 shown	1542ms	3 NS 1 A 2 MX	🔒 Secure
2026-08-26 13:58:50	3005ms	3 NS 1 A 2 MX	🔒 Secure
2026-08-08 04:08:38	1368ms	3 NS 1 A 2 MX	🔒 Secure
2026-07-03 11:43:24	2012ms	3 NS 1 A 2 MX	🔒 Secure
2026-06-26 17:48:02	1249ms	3 NS 1 A 2 MX	🔒 Secure
2026-06-16 23:59:58	65535ms	3 NS 1 A 2 MX	🔒 Secure
2026-06-16 23:05:16	943ms	3 NS 1 A 2 MX	🔒 Secure