baess-lehmann.dk

📜 Historical scan 2026-06-16 14:01:14  ·  ← Latest scan
⬇ Zone File 📜 Timeline & History ⚡ Scan Now

baess-lehmann.dk is a .dk domain served by 2 nameservers (meg.ns.cloudflare.com, mustafa.ns.cloudflare.com). It was registered on 6 November 2019 (WHOIS) and was already in the .dk zone when our tracking began on 16 June 2026. Its website address 104.21.18.229 is hosted by Cloudflare, Inc. (AS13335). Mail is handled by mail.protonmail.ch, mailsec.protonmail.ch and 3 more. The zone is DNSSEC-signed and validates, has no DMARC policy and is reachable over IPv6. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

2 records   72ms
NameserverIP addressesPTRASN / ISP
meg.ns.cloudflare.com — — —
mustafa.ns.cloudflare.com — — —

🌍 A Records#

2 records   68ms
IPTTLPTRASNISP / OrgCIDRCountryCity
104.21.18.229 — — AS13335 Cloudflare, Inc. 104.21.0.0/17 — —
172.67.183.222 — — AS13335 Cloudflare, Inc. 172.67.128.0/17 — —

📧 MX Records#

5 records   66ms
PriorityTTLMail ServerIP addressesPTRASN
10 — mail.protonmail.ch 176.119.200.128
185.205.70.128
185.70.42.128		 mail.protonmail.ch
mail.protonmail.ch
mail.protonmail.ch		 AS62371 Proton AG
AS62371 Proton AG
AS62371 Proton AG
20 — mailsec.protonmail.ch 176.119.200.129
185.205.70.129
185.70.42.129		 mailsec.protonmail.ch
mailsec.protonmail.ch
mailsec.protonmail.ch		 AS62371 Proton AG
AS62371 Proton AG
AS62371 Proton AG
30 — mx1.pub.mailpod8-cph3.one.com 185.164.14.102 mx1.pub.mailpod8-cph3.one.com AS51468 One.com A/S
30 — mx2.pub.mailpod8-cph3.one.com 185.164.14.103 mx2.pub.mailpod8-cph3.one.com AS51468 One.com A/S
30 — mx3.pub.mailpod8-cph3.one.com 185.164.14.104 mx3.pub.mailpod8-cph3.one.com AS51468 One.com A/S

🔷 AAAA Records (IPv6)#

2 records   67ms
IPv6 AddressTTLPTRASNISP / OrgCIDRCountryCity
2606:4700:3033::6815:12e5 — — AS13335 Cloudflare, Inc. 2606:4700:3000:0:0:0:0:0/42 — —
2606:4700:3036::ac43:b7de — — AS13335 Cloudflare, Inc. 2606:4700:3000:0:0:0:0:0/42 — —

🔐 HTTPS Records#

1 records   69ms
PriorityTargetSvcParams
1 service . alpn="h3,h2" ipv4hint=104.21.18.229,172.67.183.222 ech=AEX+DQBBlwAgACA41AMgc1sbai2CoOVhilCbC1JktSaHjQMIOv4l671bLwAEAAEAAQASY2xvdWRmbGFyZS1lY2guY29tAAA= ipv6hint=2606:4700:3033::6815:12e5,2606:4700:3036::ac43:b7de

📝 TXT Records#

2 records   205ms
TXT Record
protonmail-verification=fcd95152adfc6833d83c93fde0f446d0daacbc50
v=spf1 include:_spf.protonmail.ch mx ~all

✉️ SPF#

PolicyRecord (baess-lehmann.dk)
~all (soft fail) v=spf1 include:_spf.protonmail.ch mx ~all

📨 DMARC#

✗ No DMARC record — mail spoofing not restricted

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

✗ No CAA records — any CA may issue certificates

🧩 Web & zone#

latest probe, not this scan · checked 2026-10-16 06:45:51
www104.21.18.229 172.67.183.222 2606:4700:3031::ac43:b7de 2606:4700:3034::6815:12e5 (AS13335) (address records, no CNAME)
www vs bare domainSame network
WildcardYes: any name under the zone resolves
CDS / CDNSKEYPublished: key rollovers can be automated with the registry (RFC 7344/8078) 1 CDS, 1 CDNSKEY

🔎 SPF check#

zone-wide SPF report

DNS lookups: 3/10 · policy: ~all

No problems found

🔗 TLSA / DANE#

7 records   120ms
Service / OwnerTypeCert association
SMTP _25._tcp.mail.protonmail.ch DANE-EE · SPKI · SHA-256 6111A5698D23C89E09C36FF833C1487E…
SMTP _25._tcp.mail.protonmail.ch DANE-EE · SPKI · SHA-256 76BB66711DA416433CA890A5B2E5A053…
SMTP _25._tcp.mailsec.protonmail.ch DANE-EE · SPKI · SHA-256 6111A5698D23C89E09C36FF833C1487E…
SMTP _25._tcp.mailsec.protonmail.ch DANE-EE · SPKI · SHA-256 76BB66711DA416433CA890A5B2E5A053…
SMTP _25._tcp.mx1.pub.mailpod8-cph3.one.com DANE-EE · SPKI · SHA-256 026A3DCAF3804B72DA8C105B5ADC0C7D…
SMTP _25._tcp.mx2.pub.mailpod8-cph3.one.com DANE-EE · SPKI · SHA-256 026A3DCAF3804B72DA8C105B5ADC0C7D…
SMTP _25._tcp.mx3.pub.mailpod8-cph3.one.com DANE-EE · SPKI · SHA-256 026A3DCAF3804B72DA8C105B5ADC0C7D…

🔐 DNSSEC#

172ms
CheckResult
Validation Status🔒 Secure
AD Flag (resolver validates)✓ Set
DS Record✓ Found
DNSKEY Record✓ Found
Flagsfully validated

🏷️ SOA#

65ms
FieldValue
Serial2405066936
Primary NS (MNAME)meg.ns.cloudflare.com
Responsible (RNAME)dns@cloudflare.com
Refresh10000s
Retry2400s
Expire604800s
Minimum (neg-cache TTL)1800s

📋 Registration#

WHOIS fetched 2026-10-05 17:47:35
FieldValue
RegistrarDNS Platform ApS
Registered2019-11-06
Expires2026-11-30 (44d)
📋 WHOIS#

⏱️ Lookup Timing#

NS
72ms
A
68ms
MX
66ms
AAAA
67ms
TXT
205ms
CAA
67ms
HTTPS
69ms
TLSA
120ms
SOA
65ms
MTA-STS
46ms
DNSSEC
172ms
SRV
0ms
Total
1458ms

🕐 Scan History#

Scanned AtDurationRecordsDNSSEC
2026-10-16 06:45:51 1067ms 2 NS 2 A 5 MX 🔒 Secure
2026-10-05 17:19:35 1215ms 2 NS 2 A 5 MX 🔒 Secure
2026-09-30 17:03:07 851ms 2 NS 2 A 5 MX 🔒 Secure
2026-09-26 02:18:35 1727ms 2 NS 2 A 5 MX 🔒 Secure
2026-09-25 02:03:36 1106ms 2 NS 2 A 5 MX 🔒 Secure
2026-09-24 01:29:38 941ms 2 NS 2 A 5 MX 🔒 Secure
2026-09-13 14:54:19 1924ms 2 NS 2 A 5 MX 🔒 Secure
2026-08-28 03:45:27 905ms 2 NS 2 A 5 MX 🔒 Secure
2026-08-06 10:38:55 1751ms 2 NS 2 A 5 MX 🔒 Secure
2026-07-26 18:43:34 1885ms 2 NS 2 A 5 MX 🔒 Secure
2026-07-15 16:21:23 2526ms 2 NS 2 A 5 MX 🔒 Secure
2026-07-12 19:14:33 9642ms 2 NS 2 A 5 MX 🔒 Secure
2026-06-26 17:15:25 2374ms 2 NS 2 A 5 MX 🔒 Secure
2026-06-21 13:34:31 2909ms 2 NS 2 A 5 MX 🔒 Secure
2026-06-16 14:01:14 shown 1458ms 2 NS 2 A 5 MX 🔒 Secure
dhd.dk [/] search Domains, Hosts & DNS — .dk zone