bafh.dk

📜 Historical scan 2026-07-03 00:30:42 · ← Latest scan

⬇ Zone File 📜 Timeline & History ⚡ Scan Now

bafh.dk is a .dk domain served by 2 nameservers (ns01.one.com, ns02.one.com). It was registered on 8 July 2004 (WHOIS) and was already in the .dk zone when our tracking began on 16 June 2026. Mail is handled by aspmx.l.google.com, alt1.aspmx.l.google.com and 5 more. The zone is DNSSEC-signed and validates, publishes a DMARC policy and has no IPv6 address. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

2 records 24ms

Nameserver	IP addresses	PTR	ASN / ISP
ns01.one.com	195.206.121.10 2001:67c:28cc::10	ns01.one.com ns01.one.com	AS197495 One.com A/S AS197495 One.com A/S
ns02.one.com	185.10.11.10 2001:67c:3c0::10	ns02.one.com ns02.one.com	AS51468 One.com A/S AS51468 One.com A/S

🌍 A Records#

🌍

No A records found

📧 MX Records#

7 records 34ms

Priority	TTL	Mail Server	IP addresses	PTR	ASN
0	43200s	aspmx.l.google.com	173.194.221.26 2a00:1450:4010:c03::1a 2a00:1450:4010:c03::1a	lm-in-f26.1e100.net lr-in-x1a.1e100.net lr-in-f26.1e100.net	AS15169 Google LLC AS15169 Google LLC AS15169 Google LLC
10	43200s	alt1.aspmx.l.google.com	192.178.158.27 2404:6800:4013:813::1b	lcdels-in-f27.1e100.net lcdels-in-f27.1e100.net	AS15169 Google LLC AS15169 Google LLC
10	43200s	alt2.aspmx.l.google.com	172.253.158.26 2404:6800:4003:c26::1b	so-in-f26.1e100.net so-in-f27.1e100.net	AS15169 Google LLC AS15169 Google LLC
20	43200s	aspmx2.googlemail.com	192.178.158.26 2404:6800:4013:813::1b	lcdels-in-f26.1e100.net lcdels-in-f27.1e100.net	AS15169 Google LLC AS15169 Google LLC
20	43200s	aspmx3.googlemail.com	172.253.158.27 2404:6800:4003:c26::1b	so-in-f27.1e100.net so-in-f27.1e100.net	AS15169 Google LLC AS15169 Google LLC
20	43200s	aspmx4.googlemail.com	108.177.125.27 2404:6800:4008:c01::1b	tp-in-f27.1e100.net tp-in-f27.1e100.net	AS15169 Google LLC AS15169 Google LLC
20	43200s	aspmx5.googlemail.com	192.178.230.27 2404:6800:400b:c01b::1a	yunrtab-in-f27.1e100.net yunrtab-in-f26.1e100.net	AS15169 Google LLC AS15169 Google LLC

🔷 AAAA Records (IPv6)#

✗ No AAAA records — IPv6 not configured

🔐 HTTPS Records#

✗ No HTTPS RR — no SVCB/HTTPS service binding

📝 TXT Records#

1 records 228ms

TXT Record
v=spf1 include:_spf.google.com ~all

✉️ SPF#

Policy	Record (bafh.dk)
~all (soft fail)	v=spf1 include:_spf.google.com ~all

📨 DMARC#

Policy	Record (_dmarc.bafh.dk)
p=reject	v=DMARC1;p=reject;pct=100;rua=mailto:claus@bafh.dk

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

✗ No CAA records — any CA may issue certificates

🧩 Web & zone#

latest probe, not this scan · checked 2026-10-08 14:43:10

www	46.30.211.38 (AS51468) (address records, no CNAME)
www vs bare domain	Only www resolves bafh.dk: no address www.bafh.dk: 46.30.211.38 (AS51468) (all like this)
Wildcard	No
Denial of existence	NSEC3 · 0 iterations · no salt RFC 9276 ✓
CDS / CDNSKEY	None 0 CDS, 0 CDNSKEY

✍️ DKIM keys#

1 found

Selector	CNAME	Key
google	—	RSA · ~1024 bit below 2048 bit

DKIM selectors can't be listed, so we check the common ones (Microsoft 365, Google, Mailchimp, SendGrid, generic). Keys under other selectors aren't shown.

🔎 SPF check#

zone-wide SPF report

DNS lookups: 1/10 · policy: ~all

No problems found

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

58ms

Check	Result
Validation Status	🔒 Secure
AD Flag (resolver validates)	✓ Set
DS Record	✓ Found
DNSKEY Record	✓ Found
Flags	resolution failed: ncache nxrrset

🏷️ SOA#

34ms

Field	Value
Serial	2026062901
Primary NS (MNAME)	ns01.one.com
Responsible (RNAME)	hostmaster@one.com
Refresh	14400s
Retry	3600s
Expire	1209600s
Minimum (neg-cache TTL)	600s

📋 Registration#

WHOIS fetched 2026-10-15 01:38:56

Field	Value
Registrar	Punktum dk A/S (direct)
Registered	2004-07-08
Expires	2027-07-31 (285d)

🔗 Same registrant#

0 domains

Other .dk domains whose WHOIS registrant has the same name and postal address. Matched on a keyed hash: the registrant's details are not stored or shown. Covers only domains whose WHOIS we have fetched (refreshed about monthly).

No other domain with this registrant in our WHOIS data yet

📋 WHOIS#

⏱️ Lookup Timing#

24ms

37ms

34ms

AAAA

35ms

TXT

228ms

CAA

40ms

HTTPS

32ms

TLSA

56ms

SOA

34ms

MTA-STS

51ms

DNSSEC

58ms

SRV

39ms

Total

863ms

🕐 Scan History#

Scanned At	Duration	Records	DNSSEC
2026-10-08 14:43:10	520ms	2 NS 0 A 7 MX	🔒 Secure
2026-10-01 07:06:46	1023ms	2 NS 0 A 7 MX	🔒 Secure
2026-09-30 07:02:52	811ms	2 NS 0 A 7 MX	🔒 Secure
2026-09-24 02:41:24	852ms	2 NS 0 A 7 MX	🔒 Secure
2026-09-23 21:11:52	827ms	2 NS 0 A 7 MX	🔒 Secure
2026-08-31 07:53:29	3556ms	2 NS 0 A 7 MX	🔒 Secure
2026-08-05 20:29:51	1531ms	2 NS 0 A 7 MX	🔒 Secure
2026-07-03 00:30:42 shown	863ms	2 NS 0 A 7 MX	🔒 Secure
2026-06-26 00:25:56	539ms	2 NS 0 A 0 MX	🔒 Secure
2026-06-24 13:32:09	908ms	2 NS 0 A 7 MX	🔒 Secure
2026-06-16 14:01:10	847ms	2 NS 0 A 7 MX	🔒 Secure