tui-card.dk

📜 Historical scan 2026-08-25 17:43:38 · ← Latest scan

⬇ Zone File 📜 Timeline & History ⚡ Scan Now

tui-card.dk is a .dk domain served by 2 nameservers (ns01.brandshelter.com, ns02.brandshelter.net). It was registered on 20 May 2016 (WHOIS) and was already in the .dk zone when our tracking began on 16 June 2026. Its website address 5.9.53.27 is hosted by Hetzner Online GmbH (AS24940) in Germany. Mail is handled by .. The zone is not DNSSEC-signed, publishes a DMARC policy and has no IPv6 address. Below are all of its DNS records from this scan: nameservers, A/AAAA, MX, TXT, SPF, DMARC, CAA, TLSA/DANE, MTA-STS, SRV and more.

🖥️ Nameservers#

2 records 56ms

Nameserver	IP addresses	PTR	ASN / ISP
ns01.brandshelter.com	2a04:2b00:14cc::15	ns15.i.centralnic-dns.com	AS1921 ipcom GmbH
ns02.brandshelter.net	2a04:2b00:14dd::16	ns16.j.centralnic-dns.com	AS1921 ipcom GmbH

🌍 A Records#

1 records 51ms

IP	TTL	PTR	ASN	ISP / Org	CIDR	Country	City
5.9.53.27	3600s	static.27.53.9.5.clients.your-server.de	AS24940	Hetzner Online GmbH	5.9.0.0/16	🇩🇪 Germany	Falkenstein

📧 MX Records#

1 records 54ms

Priority	TTL	Mail Server	IP addresses	PTR	ASN
0	300s	. Null MX — domain accepts no email (RFC 7505)

🔷 AAAA Records (IPv6)#

✗ No AAAA records — IPv6 not configured

🔐 HTTPS Records#

✗ No HTTPS RR — no SVCB/HTTPS service binding

📝 TXT Records#

1 records 245ms

TXT Record
v=spf1 -all

✉️ SPF#

Policy	Record (tui-card.dk)
-all (hard fail)	v=spf1 -all

📨 DMARC#

Policy	Record (_dmarc.tui-card.dk)
p=reject	v=DMARC1;p=reject ;pct=100;rua=mailto:2256e681@inbox.ondmarc.com;ruf=mailto:2256e681@inbox.ondmarc.com

📬 MTA-STS#

✗ No MTA-STS policy — SMTP TLS not enforced

📈 TLSRPT#

✗ No TLSRPT record — no SMTP TLS failure reporting

📜 CAA Records#

2 records 56ms

Flags	Tag	Value
0	iodef	mailto:domain@tui.com
0	issue	digicert.com

🧩 Web & zone#

latest probe, not this scan · checked 2026-10-14 18:29:17

www	5.9.53.27 (AS24940) (address records, no CNAME)
www vs bare domain	Same network tui-card.dk: 5.9.53.27 (AS24940) www.tui-card.dk: 5.9.53.27 (AS24940)
Wildcard	No

🔎 SPF check#

zone-wide SPF report

DNS lookups: 0/10 · policy: -all

No problems found

🔗 TLSA / DANE#

✗ No TLSA records — DANE not configured for HTTPS (_443) or MX (_25)

🔐 DNSSEC#

2067ms

Check	Result
Validation Status	🔓 Insecure
AD Flag (resolver validates)	✗ Not set
DS Record	✗ Not found
DNSKEY Record	✗ Not found
Flags	unsigned answer

🏷️ SOA#

0ms

Field	Value
Serial	2026072101
Primary NS (MNAME)	ns01.brandshelter.com
Responsible (RNAME)	tech@brandshelter.com
Refresh	10800s
Retry	3600s
Expire	604800s
Minimum (neg-cache TTL)	300s

📋 Registration#

WHOIS fetched 2026-10-05 13:30:24

Field	Value
Registrar	1API GmbH
Registered	2016-05-20
Expires	2027-05-31 (220d)

📋 WHOIS#

⏱️ Lookup Timing#

56ms

51ms

54ms

AAAA

59ms

TXT

245ms

CAA

56ms

HTTPS

49ms

TLSA

277ms

SOA

0ms

MTA-STS

63ms

DNSSEC

2067ms

SRV

66ms

Total

2648ms

🕐 Scan History#

Scanned At	Duration	Records	DNSSEC
2026-09-30 17:16:37	756ms	2 NS 1 A 1 MX	🔓 Insecure
2026-09-25 17:00:06	658ms	2 NS 1 A 1 MX	🔓 Insecure
2026-08-25 17:43:38 shown	2648ms	2 NS 1 A 1 MX	🔓 Insecure
2026-07-21 14:10:10	703ms	2 NS 1 A 1 MX	🔓 Insecure
2026-06-24 07:20:41	1870ms	3 NS 2 A 0 MX	🔓 Insecure
2026-06-23 04:53:42	968ms	0 NS 0 A 0 MX	❓ Unknown
2026-06-18 05:43:46	3169ms	3 NS 2 A 0 MX	🔓 Insecure