SurfaceMap › c › cbr.nl

cbr.nl

Checked 2026-10-21 21:00 UTC · first added 2026-10-21
!Check could not complete

Domain & DNS

error

28 passed 1 warn 0 failed 1 errors

lookups failed for rdap; results are incomplete

Areas

iRegistration iDelegation !Nameservers ✓SOA ✓DNSSEC iRecords

Problems

  • !
    Software version disclosed
    Nameservers · These nameservers report their software version via version.bind/version.server, which helps attackers find known vulnerabilities: a1-26.akam.net: "41824.7"; a1-26.akam.net: "41824.5"; a11-66.akam.net: "41824.7"; a11-66.akam.net: "41824.8"; a22-67.akam.net: "48878.33"; a22-67.akam.net: "48878.27"; a4-66.akam.net: "48878.30"; a4-66.akam.net: "48878.31"; a6-66.akam.net: "48878.32"; a6-66.akam.net: "48878.26"; a7-65.akam.net: "41824.6"; a7-65.akam.net: "41824.9". Hide or replace the version string.
    #17

Recent checks

!

Full report

Domain & DNS report for cbr.nl ›

Mail

fail

29 passed 4 warn 1 failed

Areas

✓SPF ✓DMARC !DKIM !DNSSEC !MX ✗TLS iBIMI

Problems

  • ✗
    Invalid TLS-RPT record
    TLS · Senders ignore the TLS-RPT record because of: the rua= tag with at least one report address is missing.
    #35
  • !
    Hosts without IPv6
    MX · The following MX hosts could not be resolved to IPv6 addresses: smtp.cbr.nl, smtp2.cbr.nl
    #11
  • !
    Signatures expire in 61h0m0s
    DNSSEC · DNSKEY signatures expire at 2026-10-24T10:19:44Z (in 61h0m0s). Check that re-signing works.
    #21
  • !
    1024-bit DKIM key
    DKIM · 1024-bit RSA keys are the minimum and are considered weak today: mail (1024 bits), selector1 (1024 bits), selector2 (1024 bits). Rotate to a 2048-bit key.
    #23
  • !
    Policy in testing mode
    TLS · With mode: testing, senders only report TLS problems (via TLS-RPT) and still deliver without TLS. Switch to mode: enforce once reports are clean.
    #33

Recent checks

✗

Full report

Mail report for cbr.nl ›