starttal.dk is a .dk domain served by 2 nameservers (cruz.ns.cloudflare.com, gabriel.ns.cloudflare.com). Its website address 104.21.38.126 is hosted by Cloudflare, Inc. (AS13335). Mail is handled by starttal-dk.mail.protection.outlook.com. The zone is not DNSSEC-signed, publishes a DMARC policy and is reachable over IPv6. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.
| IP | TTL | PTR | ASN | ISP / Org | CIDR | Country | City |
|---|---|---|---|---|---|---|---|
| 104.21.38.126 | 300s | — | AS13335 | Cloudflare, Inc. | 104.21.0.0/17 | — | — |
| 172.67.222.167 | 300s | — | AS13335 | Cloudflare, Inc. | 172.67.128.0/17 | — | — |
| Service | CNAME / IP |
|---|---|
| 🔷 Autodiscover | autodiscover.outlook.com → 40.104.116.56 |
| IPv6 Address | TTL | PTR | ASN | ISP / Org | CIDR | Country | City |
|---|---|---|---|---|---|---|---|
| 2606:4700:3035::ac43:dea7 | 300s | — | AS13335 | Cloudflare, Inc. | 2606:4700:3000:0:0:0:0:0/42 | — | — |
| 2606:4700:3037::6815:267e | 300s | — | AS13335 | Cloudflare, Inc. | 2606:4700:3000:0:0:0:0:0/42 | — | — |
| Priority | Target | SvcParams |
|---|---|---|
| 1 service | . | alpn="h3,h2" ipv4hint=104.21.38.126,172.67.222.167 ech=AEX+DQBBHAAgACDnWMn0+i0V5WmO/VfYupDsp3htBVtCJUyRgIyyLolrVAAEAAEAAQASY2xvdWRmbGFyZS1lY2guY29tAAA= ipv6hint=2606:4700:3035::ac43:dea7,2606:4700:3037::6815:267e |
| TXT Record |
|---|
| MS=ms77612093 |
| v=spf1 include:spf.protection.outlook.com -all |
| Policy | Record (starttal.dk) |
|---|---|
| -all (hard fail) | v=spf1 include:spf.protection.outlook.com -all |
| Policy | Record (_dmarc.starttal.dk) |
|---|---|
| p=reject | v=DMARC1; p=reject; sp=reject; adkim=s; aspf=s; rua=mailto:17aecfee47574557aa5c0777ca742998@dmarc-reports.cloudflare.net,mailto:dmarc@bondit.dk |
| Flags | Tag | Value |
|---|---|---|
| 0 | iodef | mailto:certificates@bondit.dk |
| 0 | issue | comodoca.com |
| 0 | issue | digicert.com; cansignhttpexchanges=yes |
| 0 | issue | letsencrypt.org |
| 0 | issue | pki.goog; cansignhttpexchanges=yes |
| 0 | issue | ssl.com |
| 0 | issuewild | comodoca.com |
| 0 | issuewild | digicert.com; cansignhttpexchanges=yes |
| 0 | issuewild | letsencrypt.org |
| 0 | issuewild | pki.goog; cansignhttpexchanges=yes |
| 0 | issuewild | ssl.com |
| www | Address record (no CNAME) |
| Wildcard | No |
| Selector | CNAME | Key |
|---|---|---|
| selector1 | selector1-starttal-dk._domainkey.bonditdk.p-v1.dkim.mail.microsoft | RSA · ~2048 bit |
| selector2 | selector2-starttal-dk._domainkey.bonditdk.p-v1.dkim.mail.microsoft | RSA · ~2048 bit |
DKIM selectors can't be listed, so we check the common ones (Microsoft 365, Google, Mailchimp, SendGrid, generic). Keys under other selectors aren't shown.
DNS lookups: 1/10 · policy: -all
No problems found| Check | Result |
|---|---|
| Validation Status | 🔓 Insecure |
| AD Flag (resolver validates) | ✗ Not set |
| DS Record | ✗ Not found |
| DNSKEY Record | ✗ Not found |
| Flags | unsigned answer |
| Field | Value |
|---|---|
| Serial | 2415460195 |
| Primary NS (MNAME) | cruz.ns.cloudflare.com |
| Responsible (RNAME) | dns@cloudflare.com |
| Refresh | 10000s |
| Retry | 2400s |
| Expire | 604800s |
| Minimum (neg-cache TTL) | 1800s |
| Scanned At | Duration | Records | DNSSEC |
|---|---|---|---|
| 2026-09-27 14:06:31 | 1527ms | 2 NS 2 A 1 MX | 🔓 Insecure |
| 2026-09-23 16:24:30 shown | 1966ms | 2 NS 2 A 1 MX | 🔓 Insecure |
| 2026-09-20 09:41:06 | 2341ms | 2 NS 2 A 1 MX | 🔓 Insecure |