norstat.dk is a .dk domain served by 2 nameservers (ernest.ns.cloudflare.com, rihana.ns.cloudflare.com). It was already in the .dk zone when our tracking began on 16 June 2026. Mail is handled by norstat-dk.mail.protection.outlook.com. The zone is not DNSSEC-signed, publishes a DMARC policy and is reachable over IPv6. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.
| IP | TTL | PTR | ASN | ISP / Org | CIDR | Country | City |
|---|---|---|---|---|---|---|---|
| 104.21.25.161 | — | — | AS13335 | — | — | — | — |
| 172.67.134.95 | — | — | AS13335 | — | — | — | — |
| Service | CNAME / IP |
|---|---|
| 🔷 Autodiscover | 172.67.134.95 |
| IPv6 Address | TTL | PTR | ASN | ISP / Org | CIDR | Country | City |
|---|---|---|---|---|---|---|---|
| 2606:4700:3030::6815:19a1 | — | — | AS13335 | — | — | — | — |
| 2606:4700:3037::ac43:865f | — | — | AS13335 | — | — | — | — |
| Priority | Target | SvcParams |
|---|---|---|
| 1 service | . | alpn="h3,h2" ipv4hint=104.21.25.161,172.67.134.95 ech=AEX+DQBBXgAgACBYdqEg9t+ceUEOewqh+wmq9pQHyffrmdwg5FCZq2THbwAEAAEAAQASY2xvdWRmbGFyZS1lY2guY29tAAA= ipv6hint=2606:4700:3030::6815:19a1,2606:4700:3037::ac43:865f |
| Service | Priority | Weight | Port | Target |
|---|---|---|---|---|
| _sipfederationtls._tcp | 100 | 1 | 5061 | sipfed.online.lync.com |
| TXT Record |
|---|
| atlassian-domain-verification=zNvg82Di0MqHdt4k3sit3DGBggCCXjw1EPjTtS6k5aQAaLMBD6i7HMljrvHU5c7T |
| google-site-verification=-Ad6j0QKi7MbY8Fcmfpa-du863Rs8kJXFlkJLabqmUo |
| google-site-verification=0X5lW4Pt1rDvCQ6TeL3mwpFKLJlleRr9IYx6il2vDw8 |
| google-site-verification=extdgCsa8fiwpT-wHq-zEXUSZDyZ-jjnce2qW7gXcoA |
| v=spf1 include:spf.norstat.no -all |
| Policy | Record (norstat.dk) |
|---|---|
| -all (hard fail) | v=spf1 include:spf.norstat.no -all |
| Policy | Record (_dmarc.norstat.dk) |
|---|---|
| p=reject | v=DMARC1; p=reject; sp=reject; rua=mailto:ipm1c70@ar.glockapps.com; ruf=mailto:ipm1c70@fr.glockapps.com; fo=1; pct=100; |
| www | 104.21.25.161 172.67.134.95 2606:4700:3035::6815:19a1 2606:4700:3036::ac43:865f (AS13335) (address records, no CNAME) |
| www vs bare domain | Same network |
| Wildcard | No |
| Selector | CNAME | Key |
|---|---|---|
| selector1 | selector1-norstat-dk._domainkey.norstat.onmicrosoft.com | RSA · ~2048 bit |
| selector2 | selector2-norstat-dk._domainkey.norstat.onmicrosoft.com | RSA · ~2048 bit |
DKIM selectors can't be listed, so we check the common ones (Microsoft 365, Google, Mailchimp, SendGrid, generic). Keys under other selectors aren't shown.
DNS lookups: 9/10 · policy: -all
| Check | Result |
|---|---|
| Validation Status | 🔓 Insecure |
| AD Flag (resolver validates) | ✗ Not set |
| DS Record | ✗ Not found |
| DNSKEY Record | ✗ Not found |
| Flags | unsigned answer |
| Field | Value |
|---|---|
| Serial | 2403092622 |
| Primary NS (MNAME) | ernest.ns.cloudflare.com |
| Responsible (RNAME) | dns@cloudflare.com |
| Refresh | 10000s |
| Retry | 2400s |
| Expire | 604800s |
| Minimum (neg-cache TTL) | 1800s |
| Scanned At | Duration | Records | DNSSEC |
|---|---|---|---|
| 2026-09-24 02:50:12 | 1117ms | 2 NS 2 A 1 MX | 🔓 Insecure |
| 2026-09-23 02:02:46 | 1821ms | 2 NS 2 A 1 MX | 🔓 Insecure |
| 2026-08-27 18:40:13 | 1282ms | 2 NS 2 A 1 MX | 🔓 Insecure |
| 2026-08-26 18:11:30 | 10230ms | 2 NS 2 A 1 MX | 🔓 Insecure |
| 2026-07-21 22:34:16 | 10437ms | 2 NS 2 A 1 MX | 🔓 Insecure |
| 2026-07-03 10:10:18 | 8276ms | 2 NS 2 A 1 MX | 🔓 Insecure |
| 2026-06-18 07:28:07 shown | 2158ms | 2 NS 2 A 1 MX | 🔓 Insecure |