baloise.be

Checked 22 October 2026, 06:10 UTC · via 8.8.8.8
!Passed with warnings
24 passed 1 warning 0 failed 4 info

Registration

info

.be country-code

Found

TLD
.be (country-code)
ICANN policies apply
no

Checks

  • i
    .be is a country-code TLD (ccTLD)
    Country-code TLD: governed by its local registry under national policy, not by an ICANN contract. Registrar accreditation, dispute resolution and RDAP/WHOIS rules are set by the registry.
    #1
  • ✓ TLD delegated and signed #2
    .be is delegated in the root zone and DNSSEC-signed.
  • i
    Registration data not available
    No registration data via RDAP: the registry of .be offers no RDAP service. Many ccTLD registries don't offer RDAP; check the registry's WHOIS instead.
    #3

Delegation

info

ch.ch-inter.net, ns1.basler.ch, ns2.basler.ch

Found

Parent zone
be
Delegation from
a.nsset.be (194.0.6.1)
NS at the parent
ch.ch-inter.net, ns1.basler.ch, ns2.basler.ch
NS in the zone
ch.ch-inter.net, ns1.basler.ch, ns2.basler.ch
NameserverAddressesNetwork (AS)Glue
ch.ch-inter.net80.74.136.136 2a00:1128:1:1::136:136AS21069 ASN-METANET - METANET AG, CH AS21069 ASN-METANET - METANET AG, CH-
ns1.basler.ch193.134.75.33AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH-
ns2.basler.ch193.134.75.34AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH-

Checks

  • ✓ 3 nameservers #6
    Delegated to ch.ch-inter.net, ns1.basler.ch, ns2.basler.ch.
  • ✓ Parent and zone agree #7
    The parent delegation and the zone's NS records list the same nameservers.
  • ✓ No glue needed #8
    All nameservers are outside the zone, so no glue records are needed.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 2 IPv4 /24s and 1 IPv6 /48.
  • ✓ 2 autonomous systems #11
    The nameservers are spread over: AS21069 (ASN-METANET - METANET AG, CH): 2 addresses; AS48857 (BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH): 2 addresses.
  • ✓ Nameserver names under 2 TLDs #12
    Nameserver names use the TLDs .ch, .net.
  • i
    Partly IPv6
    These nameservers have no IPv6 address: ns1.basler.ch, ns2.basler.ch.
    #13

Nameservers

info

4 of 4 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
ch.ch-inter.net 80.74.136.136NOERROR, 15 ms, authoritativenoyes / yesrefused[SECURED]
ch.ch-inter.net 2a00:1128:1:1::136:136NOERROR, 15 ms, authoritativenoyes / yesrefused[SECURED]
ns1.basler.ch 193.134.75.33NOERROR, 27 ms, authoritativenoyes / yesrefused-
ns2.basler.ch 193.134.75.34NOERROR, 27 ms, authoritativenoyes / yesrefused-

Checks

  • ✓ All respond #14
    All 4 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • i
    Identifying string disclosed
    These nameservers answer version queries with a string that is not a version number: ch.ch-inter.net: "[SECURED]".
    #17
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

pass

serial 2026100101 · primary ns1.basler.ch

Found

Primary (MNAME)
ns1.basler.ch
Contact (RNAME)
dnsadmin.baloise.com
Serial
2026100101
Refresh / retry
10800 s / 3600 s
Expire
604800 s
Negative TTL
10800 s

Serial per nameserver

NameserverSerial
ch.ch-inter.net (80.74.136.136)2026100101
ch.ch-inter.net (2a00:1128:1:1::136:136)2026100101
ns1.basler.ch (193.134.75.33)2026100101
ns2.basler.ch (193.134.75.34)2026100101

Checks

  • ✓ Serial 2026100101 everywhere #22
    All nameservers serve the same version of the zone.
  • ✓ Timers within recommendations #23
    SOA refresh 3h, retry 1h, expire 7d, negative TTL 3h.
  • ✓ Primary is a public nameserver #24
    The primary nameserver ns1.basler.ch is one of the listed nameservers.
  • ✓ Contact dnsadmin@baloise.com #25
    The SOA RNAME dnsadmin.baloise.com means dnsadmin@baloise.com.
  • ✓ Date-based serial #26
    The serial 2026100101 follows the YYYYMMDDnn convention (2026-10-01).

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

pass

25 records at the apex

Found

Read from
80.74.136.136:53
TypeValueTTL
SOAns1.basler.ch. dnsadmin.baloise.com. 2026100101 10800 3600 604800 10800300
NSns1.basler.ch.86400
NSns2.basler.ch.86400
NSch.ch-inter.net.86400
A193.134.74.95300
MX10 baloise-be.mail.protection.outlook.com.300
TXT"miro-verification=5a6edc53af172002f9cbdf084b9377277589471b"300
TXT"adobe-idp-site-verification=0001b0b85821d0f3a6ecd57105c1b04ccfd793775457e1a40a12b68bf9a60f1b"300
TXT"MS=ms53738502"300
TXT"amazonses:3P/aJ+SFf+v36UFSjf6gHw04RlGaIPaMYyHlFIQryV4="300
TXT"C241579DD1C6A02D1F88A5859D87B4C3EA2A4DD05327C798B7E7916730BBF18C"300
TXT"canva-site-verification=N2QvOZCQDI4DpePnqhmaTA"300
TXT"swisssign-check=93zmfBEGizf-M-YpNs_mIoWksOg"300
TXT"atlassian-domain-verification=EzQ/erg6G9Jz1CifR5tMgSWspBuGkpNaX78ujkLuXmEDAdEa6w7Fau7IaPh4VBRI"300
TXT"anthropic-domain-verification-db6enb=1T01OwOOSd3rl8AYpW1Rvnu8D"300
TXT"google-site-verification=En120XIhtkXPjkZH1GDuAQCzVO45YwpJUEScgH72UVY"300
TXT"globalsign-domain-verification=nesfX_iPmwWfyLxtA4xJO-J9yeE5oLrbwnfNBnuPhR"300
TXT"v=spf1 ip4:193.134.73.20 ip4:193.134.73.21 ip4:194.11.129.253 ip4:194.11.129.224 ip4:85.158.111.74 ip4:85.158.111.73 ip4:131.207.55.52 ip4:131.207.55.53 ip4:198.37.153.132 ip4:203.31.103.8 ip4:131.189.130.176 ip4:141.193.32.0/23 ip4:159.135.140.80/29 ip4:" "159.135.132.128/25 ip4:161.38.204.0/22 ip4:87.253.232.0/21 ip4:185.189.236.0/22 ip4:185.211.120.0/22 ip4:185.250.236.0/22 ip4:46.253.113.116 include:spf.mandrillapp.com include:spf.mailjet.com include:amazonses.com include:spf.flexmail.eu include:spf-0018" "1c02.pphosted.com include:_spf.twikey.com include:spf.protection.outlook.com -all"300
TXT"J013iPSvKm/XqnGHtloQE1k/y6TQvU5I04JNe0tX9Is="300
TXT"tWXew/g13tyugdmhMt+H+ktcsCvuoYYbhV+2FHqiafWrkzXKi27OEEkibbebufjyKNqY6/vA3xMMIhOzu5jCaQ=="300
TXT"docker-verification=f2744465-f9f3-4a61-b126-dfea0b70f44a"300
CAA0 issue "swisssign.com"300
CAA0 issue "globalsign.com"300
CAA0 issue "digicert.com"300
CAA0 issue "letsencrypt.org"300

Checks

  • ✓ TTLs within range #32
    TTLs: A 5m, MX 5m, NS 1d.
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • ✓ CAA restricts issuance #35
    Certificates may be issued by: swisssign.com, globalsign.com, digicert.com, letsencrypt.org.