bernafon.dk is a .dk domain served by 4 nameservers (ns1-04.azure-dns.com, ns2-04.azure-dns.net, ns3-04.azure-dns.org and 1 more). It was already in the .dk zone when our tracking began on 16 June 2026. Its website address 76.76.21.21 is hosted by Amazon.com, Inc. (AS16509) in United States. Mail is handled by bernafon-dk.mail.protection.outlook.com. The zone is DNSSEC-signed and validates, publishes a DMARC policy and has no IPv6 address. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.
| Nameserver | IP addresses | PTR | ASN / ISP |
|---|---|---|---|
| ns1-04.azure-dns.com | — | — | — |
| ns2-04.azure-dns.net | — | — | — |
| ns3-04.azure-dns.org | — | — | — |
| ns4-04.azure-dns.info | — | — | — |
| IP | TTL | PTR | ASN | ISP / Org | CIDR | Country | City |
|---|---|---|---|---|---|---|---|
| 76.76.21.21 | — | — | AS16509 | Amazon.com, Inc. | 76.76.21.0/24 | 🇺🇸 United States | — |
| TXT Record |
|---|
| agoOXkxDqe5Dh9Sz3DAUvBlrKyXxObbv4Q69J+HKdrHCaZ1j3ofT03gLNdjnock0xFhFE4s2whrz6PZtCVQkgQ== |
| apple-domain-verification=WVoBlvmjWW58oqA7 |
| google-site-verification=SEi7gZH_cs77dMqEx6ghmKhl0tWl7jqYDuqPGbAYA-A |
| MS=ms40354648 |
| v=spf1 a:mailout.demant.com include:spf.protection.outlook.com include:customers.clickdimensions.com -all |
| Policy | Record (bernafon.dk) |
|---|---|
| -all (hard fail) | v=spf1 a:mailout.demant.com include:spf.protection.outlook.com include:customers.clickdimensions.com -all |
| Policy | Record (_dmarc.bernafon.dk) |
|---|---|
| p=quarantine | v=DMARC1; p=quarantine; rua=mailto:fd786552eac8174@rep.dmarcanalyzer.com; ruf=mailto:fd786552eac8174@for.dmarcanalyzer.com; pct=100; fo=1; |
| www CNAME | 8b6f378a2e9ea636.vercel-dns-013.com (all on vercel-dns-013.com) |
| www vs bare domain | Same network |
| Wildcard | No |
| Denial of existence | Compact NSEC (RFC 9824, "black lies") not walkable |
| CDS / CDNSKEY | None 0 CDS, 0 CDNSKEY |
| Selector | CNAME | Key |
|---|---|---|
| s1 | s1.domainkey.u22639183.wl184.sendgrid.net | RSA · ~2048 bit |
| s2 | s2.domainkey.u22639183.wl184.sendgrid.net | RSA · ~2048 bit |
| selector1 | selector1-bernafon-dk._domainkey.demant.onmicrosoft.com | RSA · ~2048 bit |
| selector2 | selector2-bernafon-dk._domainkey.demant.onmicrosoft.com | RSA · ~2048 bit |
DKIM selectors can't be listed, so we check the common ones (Microsoft 365, Google, Mailchimp, SendGrid, generic). Keys under other selectors aren't shown.
DNS lookups: 5/10 · policy: -all
No problems found| Check | Result |
|---|---|
| Validation Status | 🔒 Secure |
| AD Flag (resolver validates) | ✓ Set |
| DS Record | ✓ Found |
| DNSKEY Record | ✓ Found |
| Flags | fully validated |
| Field | Value |
|---|---|
| Serial | 2000112102 |
| Primary NS (MNAME) | ns1-04.azure-dns.com |
| Responsible (RNAME) | dnsmaster@demant.com |
| Refresh | 900s |
| Retry | 600s |
| Expire | 86400s |
| Minimum (neg-cache TTL) | 3600s |
| Scanned At | Duration | Records | DNSSEC |
|---|---|---|---|
| 2026-09-05 19:25:59 | 2745ms | 4 NS 1 A 1 MX | 🔒 Secure |
| 2026-06-21 07:50:56 | 2414ms | 4 NS 1 A 1 MX | 🔒 Secure |
| 2026-06-16 14:22:24 shown | 705ms | 4 NS 1 A 1 MX | 🔒 Secure |