baht.dk is a .dk domain served by 2 nameservers (ns.scannet2.dk, ns2.scannet2.dk). It was already in the .dk zone when our tracking began on 16 June 2026. Mail is handled by ASPMX.L.google.com, ALT1.ASPMX.L.google.com and 5 more. The zone is DNSSEC-signed and validates, has no DMARC policy and has no IPv6 address. Below are all of its DNS records from our latest scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.
| TXT Record |
|---|
| v=spf1 include:_spf.google.com ~all |
| Policy | Record (baht.dk) |
|---|---|
| ~all (soft fail) | v=spf1 include:_spf.google.com ~all |
| www CNAME | ghs.google.com (all on google.com) |
| www vs bare domain | Only www resolves (all like this) |
| Wildcard | No |
| Denial of existence | NSEC3 · 1 iteration · 1-byte salt RFC 9276 recommends 0 iterations and no salt |
| CDS / CDNSKEY | None 0 CDS, 0 CDNSKEY |
| Selector | CNAME | Key |
|---|---|---|
| — | RSA · ~1024 bit below 2048 bit |
DKIM selectors can't be listed, so we check the common ones (Microsoft 365, Google, Mailchimp, SendGrid, generic). Keys under other selectors aren't shown.
DNS lookups: 1/10 · policy: ~all
No problems found| Check | Result |
|---|---|
| Validation Status | 🔒 Secure |
| AD Flag (resolver validates) | ✓ Set |
| DS Record | ✓ Found |
| DNSKEY Record | ✓ Found |
| Flags | resolution failed: ncache nxrrset |
| Field | Value |
|---|---|
| Serial | 2003012201 |
| Primary NS (MNAME) | ns.scannet2.dk |
| Responsible (RNAME) | hostmaster@scannet.dk |
| Refresh | 14400s |
| Retry | 3600s |
| Expire | 1209600s |
| Minimum (neg-cache TTL) | 300s |
| Scanned At | Duration | Records | DNSSEC |
|---|---|---|---|
| 2026-07-02 00:38:43 shown | 801ms | 2 NS 0 A 7 MX | 🔒 Secure |
| 2026-06-16 14:02:33 | 922ms | 2 NS 0 A 7 MX | 🔒 Secure |