tivoli.dk

📜 Historical scan 2026-06-18 05:13:35  ·  ← Latest scan
⬇ Zone File 📜 Timeline & History ⚡ Scan Now

tivoli.dk is a .dk domain served by 4 nameservers (ns1-09.azure-dns.com, ns2-09.azure-dns.net, ns3-09.azure-dns.org and 1 more). It was registered on 13 June 1996 (WHOIS) and was already in the .dk zone when our tracking began on 16 June 2026. Its website address 150.171.109.193 is hosted by Microsoft Corporation (AS8075) in United States. Mail is handled by tivoli-dk.mail.protection.outlook.com. The zone is not DNSSEC-signed, publishes a DMARC policy and has no IPv6 address. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

4 records   48ms

🌍 A Records#

1 records   50ms
IPTTLPTRASNISP / OrgCIDRCountryCity
150.171.109.193 — — AS8075 Microsoft Corporation 150.171.64.0/18 🇺🇸 United States —

📧 MX Records#

1 records   49ms

📧 Autodiscover / Autoconfig#

ServiceCNAME / IP
🔷 Autodiscoverautodiscover.outlook.com → 40.98.16.63

🔷 AAAA Records (IPv6)#

✗ No AAAA records — IPv6 not configured

🔐 HTTPS Records#

✗ No HTTPS RR — no SVCB/HTTPS service binding

🔌 SRV Records#

1 records   333ms
ServicePriorityWeightPortTarget
_sipfederationtls._tcp 100 1 5061 sipfed.online.lync.com

📝 TXT Records#

16 records   249ms
TXT Record
_globalsign-domain-verification=NEpZHcc7eobRoONoW7Lw6mBlGrpSieHWmpTre64xll
1password-site-verification=UVTANQIJZJEOPI2ODWDZUHQDSA
975ED2F033F413EDB0219B161570A5AB32CCAD7610D33E0196BE02BDEAC8E469
adobe-idp-site-verification=a8146f8b385147c8bbf82b135bdc4541be58539f30ed50de0c5ee5c21d56c603
apple-domain-verification=OYQps7c7ysuGd27b
d365mktkey=FKHaDgv2yTd1aCLQpnE1NCfBvoLlX0BoFXXWSDyWT1Ux
docusign=648dc02d-9a4f-4f50-be3f-eb36e8304c83
docusign=c5d82d8e-8cb9-4ee9-9df3-4d0b49d0e46f
globalsign-domain-verification=BpC3_VbbVFbtqnwzjodPQ4RT6Bho434ln7zOt7SFgj
google-site-verification=TS76DBejTrOLeTO9YdJum1E7v6y__QoeE8sI0BK2IFA
have-i-been-pwned-verification=2f57a977140f0415148acf1d08d9c5e1
monday-com-verification=cu5zU5k4xVNbUAF2o9xuXYxvDFJMTPc_qbmSiU2T9Sc
MS=ms41708572
nY2DaDcWRvhw4++OEMMNf525le3KwtSJcpOpMv33Tis=
v=spf1 ip4:87.54.4.250 ip4:87.54.4.228 ip4:199.7.204.247 include:carmamail.com include:sendgrid.net include:bulk.decipherinc.com include:spf.protection.outlook.com ip4:195.178.14.0/24 ip4:185.20.207.0/24 ip4:94.231.96.0/20 ip4:91.197.248.0/22 ip4:195.41.131.0/24 ip4:185.21.40.0/22 ip4:185.25.140.0/22 ip4:212.237.248.0/23 include:speedadmin.dk ip4:3.127.146.164 ip4:18.156.75.184 ip4:18.193.148.51 ip4:185.109.198.126 ip4:152.115.53.50 ip4:40.113.173.32/28 ip4:80.196.101.0/24 ip4:129.41.222.87 ip4:185.92.121.141 include:esaas.inmoment.eu -all
ZGfRFkdbiRssVs5+wxhS7PxEdNCgY5DYG/cXcY3N26kxW5S0nWO1BSOTzVU6t273ILcq9SHE4CjToEEiFkqH3g==

✉️ SPF#

PolicyRecord (tivoli.dk)
-all (hard fail) v=spf1 ip4:87.54.4.250 ip4:87.54.4.228 ip4:199.7.204.247 include:carmamail.com include:sendgrid.net include:bulk.decipherinc.com include:spf.protection.outlook.com ip4:195.178.14.0/24 ip4:185.20.207.0/24 ip4:94.231.96.0/20 ip4:91.197.248.0/22 ip4:195.41.131.0/24 ip4:185.21.40.0/22 ip4:185.25.140.0/22 ip4:212.237.248.0/23 include:speedadmin.dk ip4:3.127.146.164 ip4:18.156.75.184 ip4:18.193.148.51 ip4:185.109.198.126 ip4:152.115.53.50 ip4:40.113.173.32/28 ip4:80.196.101.0/24 ip4:129.41.222.87 ip4:185.92.121.141 include:esaas.inmoment.eu -all

📨 DMARC#

PolicyRecord (_dmarc.tivoli.dk)
p=quarantine v=DMARC1; p=quarantine; rua=mailto:dmarc_reports@TIVOLI.DK; ruf=mailto:dmarc_reports@TIVOLI.DK; fo=1

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

✗ No CAA records — any CA may issue certificates

🧩 Web & zone#

latest probe, not this scan · checked 2026-10-08 11:54:26
www CNAMEwebsite-beh9d8bmfmfyfrhv.a01.azurefd.net (all on azurefd.net)
www vs bare domainSame network
WildcardNo
BIMIv=BIMI1; l=https://bimi.tivoli.dk/logo.svg; a=https://bimi.tivoli.dk/vmc.pem; avp=brand;

✍️ DKIM keys#

3 found
SelectorCNAMEKey
s1 s1.domainkey.u4036504.wl005.sendgrid.net RSA · ~2048 bit
s2 s2.domainkey.u4036504.wl005.sendgrid.net RSA · ~1024 bit below 2048 bit
selector2 selector2-tivoli-dk._domainkey.tivolinet.onmicrosoft.com RSA · ~1024 bit below 2048 bit

DKIM selectors can't be listed, so we check the common ones (Microsoft 365, Google, Mailchimp, SendGrid, generic). Keys under other selectors aren't shown.

🔎 SPF check#

zone-wide SPF report

DNS lookups: 9/10 · policy: -all

  • warn 9 of the 10 allowed DNS lookups used: one more include can break SPF
  • info Record is 545 bytes: long SPF records risk UDP truncation

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

196ms
CheckResult
Validation Status🔓 Insecure
AD Flag (resolver validates)✗ Not set
DS Record✗ Not found
DNSKEY Record✗ Not found
Flagsunsigned answer

🏷️ SOA#

49ms
FieldValue
Serial1
Primary NS (MNAME)ns1-09.azure-dns.com
Responsible (RNAME)azuredns-hostmaster@microsoft.com
Refresh3600s
Retry300s
Expire2419200s
Minimum (neg-cache TTL)300s

📋 Registration#

WHOIS fetched 2026-10-23 17:51:59
FieldValue
RegistrarPunktum dk A/S (direct)
Registered1996-06-13
Expires2031-06-30 (1710d)

🔗 Same registrant#

32 domains
📋 WHOIS#

⏱️ Lookup Timing#

NS
48ms
A
50ms
MX
49ms
AAAA
45ms
TXT
249ms
CAA
47ms
HTTPS
49ms
TLSA
2137ms
SOA
49ms
MTA-STS
66ms
DNSSEC
196ms
SRV
333ms
Total
3022ms

🕐 Scan History#

Scanned AtDurationRecordsDNSSEC
2026-09-30 08:35:29 1574ms 4 NS 1 A 1 MX 🔓 Insecure
2026-08-26 05:03:36 10300ms 4 NS 1 A 1 MX 🔓 Insecure
2026-06-18 05:13:35 shown 3022ms 4 NS 1 A 1 MX 🔓 Insecure
dhd.dk [/] search Domains, Hosts & DNS — .dk zone