tivoli.dk

Records from scan: 2026-09-30 08:35:29  ·  1574ms total  ·  last checked 2026-10-21 18:53 (unchanged)
⬇ Zone File 📜 Timeline & History ⚡ Scan Now

tivoli.dk is a .dk domain served by 4 nameservers (ns1-09.azure-dns.com, ns2-09.azure-dns.net, ns3-09.azure-dns.org and 1 more). It was registered on 13 June 1996 (WHOIS) and was already in the .dk zone when our tracking began on 16 June 2026. Its website address 150.171.109.194 is hosted by Microsoft Corporation (AS8075) in United States. Mail is handled by tivoli-dk.mail.protection.outlook.com. The zone is not DNSSEC-signed, publishes a DMARC policy and has no IPv6 address. Below are all of its DNS records from our latest scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

4 records   38ms

🌍 A Records#

1 records   28ms
IPTTLPTRASNISP / OrgCIDRCountryCity
150.171.109.194 300s — AS8075 Microsoft Corporation 150.171.64.0/18 🇺🇸 United States —

📧 MX Records#

1 records   27ms

📧 Autodiscover / Autoconfig#

ServiceCNAME / IP
🔷 Autodiscoverautodiscover.outlook.com → 40.104.116.24

🔷 AAAA Records (IPv6)#

✗ No AAAA records — IPv6 not configured

🔐 HTTPS Records#

✗ No HTTPS RR — no SVCB/HTTPS service binding

🔌 SRV Records#

1 records   905ms
ServicePriorityWeightPortTarget
_sipfederationtls._tcp 100 1 5061 sipfed.online.lync.com

📝 TXT Records#

17 records   177ms
TXT Record
_globalsign-domain-verification=NEpZHcc7eobRoONoW7Lw6mBlGrpSieHWmpTre64xll
1password-site-verification=UVTANQIJZJEOPI2ODWDZUHQDSA
975ED2F033F413EDB0219B161570A5AB32CCAD7610D33E0196BE02BDEAC8E469
adobe-idp-site-verification=a8146f8b385147c8bbf82b135bdc4541be58539f30ed50de0c5ee5c21d56c603
anthropic-domain-verification-68j9yr=9xlFoiJJT4qbEWN7zdPyizPGO
apple-domain-verification=OYQps7c7ysuGd27b
d365mktkey=FKHaDgv2yTd1aCLQpnE1NCfBvoLlX0BoFXXWSDyWT1Ux
docusign=648dc02d-9a4f-4f50-be3f-eb36e8304c83
docusign=c5d82d8e-8cb9-4ee9-9df3-4d0b49d0e46f
globalsign-domain-verification=BpC3_VbbVFbtqnwzjodPQ4RT6Bho434ln7zOt7SFgj
google-site-verification=TS76DBejTrOLeTO9YdJum1E7v6y__QoeE8sI0BK2IFA
have-i-been-pwned-verification=2f57a977140f0415148acf1d08d9c5e1
monday-com-verification=cu5zU5k4xVNbUAF2o9xuXYxvDFJMTPc_qbmSiU2T9Sc
MS=ms41708572
nY2DaDcWRvhw4++OEMMNf525le3KwtSJcpOpMv33Tis=
v=spf1 ip4:87.54.4.250 ip4:87.54.4.228 ip4:199.7.204.247 include:carmamail.com include:sendgrid.net include:bulk.decipherinc.com include:spf.protection.outlook.com ip4:195.178.14.0/24 ip4:185.20.207.0/24 ip4:94.231.96.0/20 ip4:91.197.248.0/22 ip4:195.41.131.0/24 ip4:185.21.40.0/22 ip4:185.25.140.0/22 ip4:212.237.248.0/23 include:speedadmin.dk ip4:3.127.146.164 ip4:18.156.75.184 ip4:18.193.148.51 ip4:185.109.198.126 ip4:152.115.53.50 ip4:40.113.173.32/28 ip4:80.196.101.0/24 ip4:129.41.222.87 ip4:185.92.121.141 include:esaas.inmoment.eu -all
ZGfRFkdbiRssVs5+wxhS7PxEdNCgY5DYG/cXcY3N26kxW5S0nWO1BSOTzVU6t273ILcq9SHE4CjToEEiFkqH3g==

✉️ SPF#

PolicyRecord (tivoli.dk)
-all (hard fail) v=spf1 ip4:87.54.4.250 ip4:87.54.4.228 ip4:199.7.204.247 include:carmamail.com include:sendgrid.net include:bulk.decipherinc.com include:spf.protection.outlook.com ip4:195.178.14.0/24 ip4:185.20.207.0/24 ip4:94.231.96.0/20 ip4:91.197.248.0/22 ip4:195.41.131.0/24 ip4:185.21.40.0/22 ip4:185.25.140.0/22 ip4:212.237.248.0/23 include:speedadmin.dk ip4:3.127.146.164 ip4:18.156.75.184 ip4:18.193.148.51 ip4:185.109.198.126 ip4:152.115.53.50 ip4:40.113.173.32/28 ip4:80.196.101.0/24 ip4:129.41.222.87 ip4:185.92.121.141 include:esaas.inmoment.eu -all

📨 DMARC#

PolicyRecord (_dmarc.tivoli.dk)
p=quarantine v=DMARC1; p=quarantine; rua=mailto:dmarc_reports@TIVOLI.DK; ruf=mailto:dmarc_reports@TIVOLI.DK; fo=1

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

✗ No CAA records — any CA may issue certificates

🧩 Web & zone#

checked 2026-10-08 11:54:26
www CNAMEwebsite-beh9d8bmfmfyfrhv.a01.azurefd.net (all on azurefd.net)
www vs bare domainSame network
WildcardNo
BIMIv=BIMI1; l=https://bimi.tivoli.dk/logo.svg; a=https://bimi.tivoli.dk/vmc.pem; avp=brand;

✍️ DKIM keys#

3 found
SelectorCNAMEKey
s1 s1.domainkey.u4036504.wl005.sendgrid.net RSA · ~2048 bit
s2 s2.domainkey.u4036504.wl005.sendgrid.net RSA · ~1024 bit below 2048 bit
selector2 selector2-tivoli-dk._domainkey.tivolinet.onmicrosoft.com RSA · ~1024 bit below 2048 bit

DKIM selectors can't be listed, so we check the common ones (Microsoft 365, Google, Mailchimp, SendGrid, generic). Keys under other selectors aren't shown.

🔎 SPF check#

zone-wide SPF report

DNS lookups: 9/10 · policy: -all

  • warn 9 of the 10 allowed DNS lookups used: one more include can break SPF
  • info Record is 545 bytes: long SPF records risk UDP truncation

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

71ms
CheckResult
Validation Status🔓 Insecure
AD Flag (resolver validates)✗ Not set
DS Record✗ Not found
DNSKEY Record✗ Not found
Flagsunsigned answer

🏷️ SOA#

0ms
FieldValue
Serial1
Primary NS (MNAME)ns1-09.azure-dns.com
Responsible (RNAME)azuredns-hostmaster@microsoft.com
Refresh3600s
Retry300s
Expire2419200s
Minimum (neg-cache TTL)300s

📋 Registration#

WHOIS fetched 2026-10-23 17:51:59
FieldValue
RegistrarPunktum dk A/S (direct)
Registered1996-06-13
Expires2031-06-30 (1710d)

🔗 Same registrant#

31 domains
📋 WHOIS#

⏱️ Lookup Timing#

NS
38ms
A
28ms
MX
27ms
AAAA
38ms
TXT
177ms
CAA
32ms
HTTPS
31ms
TLSA
304ms
SOA
0ms
MTA-STS
47ms
DNSSEC
71ms
SRV
905ms
Total
1574ms

🕐 Scan History#

Scanned AtDurationRecordsDNSSEC
2026-09-30 08:35:29 shown 1574ms 4 NS 1 A 1 MX 🔓 Insecure
2026-08-26 05:03:36 10300ms 4 NS 1 A 1 MX 🔓 Insecure
2026-06-18 05:13:35 3022ms 4 NS 1 A 1 MX 🔓 Insecure
dhd.dk [/] search Domains, Hosts & DNS — .dk zone