delft.nl
!Passed with warnings
29 passed
1 warning
0 failed
5 info
Registration
info.nl country-code · Registrar.eu
Found
- TLD
- .nl (country-code)
- ICANN policies apply
- no
- Registrar
- Registrar.eu
- Registered
- 26 September 1996
- Last changed
- 11 July 2025
- Status
- active
- Registry nameservers
- ns.delft.nl, ns1.as41887.nl, ns2.as41887.eu, ns3.as41887.io, ns4.as41887.it
- RDAP server
- https://rdap.sidn.nl/
Checks
-
i#1.nl is a country-code TLD (ccTLD)
-
✓ TLD delegated and signed #2
-
i#3Expiry date not published
-
i#4No transfer lock
-
✓ Registry and delegation match #5
Delegation
infons.delft.nl, ns1.as41887.nl, ns2.as41887.eu, ns3.as41887.io, ns4.as41887.it
Found
- Parent zone
- nl
- Delegation from
- ns1.dns.nl (194.0.28.53)
- NS at the parent
- ns.delft.nl, ns1.as41887.nl, ns2.as41887.eu, ns3.as41887.io, ns4.as41887.it
- NS in the zone
- ns.delft.nl, ns1.as41887.nl, ns2.as41887.eu, ns3.as41887.io, ns4.as41887.it
| Nameserver | Addresses | Network (AS) | Glue |
|---|---|---|---|
| ns.delft.nl | 145.32.97.4 | AS34108 BREEDBANDDELFT - Stichting Breedband Delft, NL | 145.32.97.4 |
| ns1.as41887.nl | 94.228.129.129 2a00:d00:ff:129:94:228:129:129 | AS41887 PROLOCATION - Prolocation B.V., NL AS41887 PROLOCATION - Prolocation B.V., NL | 94.228.129.129 2a00:d00:ff:129:94:228:129:129 |
| ns2.as41887.eu | 65.108.92.144 2a01:4f9:c012:6c08::1 | AS24940 HETZNER-AS - Hetzner Online GmbH, DE AS24940 HETZNER-AS - Hetzner Online GmbH, DE | - |
| ns3.as41887.io | 165.227.154.158 2a03:b0c0:3:d0::50d:6001 | AS14061 DIGITALOCEAN-ASN - DigitalOcean, LLC, US AS14061 DIGITALOCEAN-ASN - DigitalOcean, LLC, US | - |
| ns4.as41887.it | 94.228.142.168 2a00:d01:ff:905:94:228:142:168 | AS41887 PROLOCATION - Prolocation B.V., NL AS41887 PROLOCATION - Prolocation B.V., NL | - |
Checks
-
✓ 5 nameservers #6
-
✓ Parent and zone agree #7
-
✓ Glue present and correct #8
-
✓ All names resolve #9
-
✓ Nameservers in different networks #10
-
✓ 4 autonomous systems #11
-
✓ Nameserver names under 4 TLDs #12
-
i#13Partly IPv6
Nameservers
info9 of 9 addresses answer authoritatively
Found
| Nameserver | Answer | Recursion | TCP / EDNS | AXFR | Version |
|---|---|---|---|---|---|
| ns.delft.nl 145.32.97.4 | NOERROR, 13 ms, authoritative | no | yes / yes | refused | - |
| ns1.as41887.nl 94.228.129.129 | NOERROR, 9 ms, authoritative | no | yes / yes | refused | Not disclosed - unix@prolocation.net |
| ns1.as41887.nl 2a00:d00:ff:129:94:228:129:129 | NOERROR, 10 ms, authoritative | no | yes / yes | refused | Not disclosed - unix@prolocation.net |
| ns2.as41887.eu 65.108.92.144 | NOERROR, 24 ms, authoritative | no | yes / yes | refused | Not disclosed - unix@prolocation.net |
| ns2.as41887.eu 2a01:4f9:c012:6c08::1 | NOERROR, 24 ms, authoritative | no | yes / yes | refused | Not disclosed - unix@prolocation.net |
| ns3.as41887.io 165.227.154.158 | NOERROR, 5 ms, authoritative | no | yes / yes | refused | Not disclosed - unix@prolocation.net |
| ns3.as41887.io 2a03:b0c0:3:d0::50d:6001 | NOERROR, 5 ms, authoritative | no | yes / yes | refused | Not disclosed - unix@prolocation.net |
| ns4.as41887.it 94.228.142.168 | NOERROR, 10 ms, authoritative | no | yes / yes | refused | Not disclosed - unix@prolocation.net |
| ns4.as41887.it 2a00:d01:ff:905:94:228:142:168 | NOERROR, 11 ms, authoritative | no | yes / yes | refused | Not disclosed - unix@prolocation.net |
Checks
-
✓ All respond #14
-
✓ All authoritative #15
-
✓ No recursion #16
-
i#17Identifying string disclosed
-
✓ Zone transfers refused #18
-
✓ TCP supported #19
-
✓ EDNS supported #20
-
✓ Public addresses #21
SOA
passserial 2025102768 · primary ns.delft.nl
Found
- Primary (MNAME)
- ns.delft.nl
- Contact (RNAME)
- postmaster.delft.nl
- Serial
- 2025102768
- Refresh / retry
- 3600 s / 600 s
- Expire
- 1814400 s
- Negative TTL
- 3600 s
Serial per nameserver
| Nameserver | Serial |
|---|---|
| ns.delft.nl (145.32.97.4) | 2025102768 |
| ns1.as41887.nl (94.228.129.129) | 2025102768 |
| ns1.as41887.nl (2a00:d00:ff:129:94:228:129:129) | 2025102768 |
| ns2.as41887.eu (65.108.92.144) | 2025102768 |
| ns2.as41887.eu (2a01:4f9:c012:6c08::1) | 2025102768 |
| ns3.as41887.io (165.227.154.158) | 2025102768 |
| ns3.as41887.io (2a03:b0c0:3:d0::50d:6001) | 2025102768 |
| ns4.as41887.it (94.228.142.168) | 2025102768 |
| ns4.as41887.it (2a00:d01:ff:905:94:228:142:168) | 2025102768 |
Checks
-
✓ Serial 2025102768 everywhere #22
-
✓ Timers within recommendations #23
-
✓ Primary is a public nameserver #24
-
✓ Contact postmaster@delft.nl #25
-
✓ Date-based serial #26
DNSSEC
warnSigned, DS published at parent
Found
- Validated by resolver
- yes
- Denial of existence
- NSEC3
- NSEC3
- 0 iterations, 8-byte salt
- Signatures valid until
- 18 November 2026
DS at the parent
| Key tag | Algorithm | Digest | Matches a key |
|---|---|---|---|
| 28456 | RSASHA256 (8) | SHA256 D03546AC9A347483… | yes |
DNSKEY in the zone
| Key tag | Role | Algorithm |
|---|---|---|
| 28456 | KSK (257) | RSASHA256 (8) |
| 2304 | ZSK (256) | RSASHA256 (8) |
Checks
-
✓ Signed and validated #27
-
✓ DS matches a key #28
-
✓ Modern algorithms #29
-
✓ Signatures valid until 2026-11-18 #30
-
!#31NSEC3 with extra iterations or salt
Records
pass26 records at the apex
Found
- Read from
- 145.32.97.4:53
| Type | Value | TTL |
|---|---|---|
| SOA | ns.delft.nl. postmaster.delft.nl. 2025102768 3600 600 1814400 3600 | 86400 |
| NS | ns2.as41887.eu. | 1800 |
| NS | ns3.as41887.io. | 1800 |
| NS | ns4.as41887.it. | 1800 |
| NS | ns.delft.nl. | 1800 |
| NS | ns1.as41887.nl. | 1800 |
| A | 185.135.13.93 | 300 |
| AAAA | 2a06:efc0:0:103::32 | 300 |
| MX | 10 m2.delft.nl. | 300 |
| MX | 10 m1.delft.nl. | 300 |
| TXT | "MS=ms74175590" | 1800 |
| TXT | "aanmelder.nl-user=77019" | 1800 |
| TXT | "apple-domain-verification=2N2enosjOT0WBjSQ" | 1800 |
| TXT | "v=spf1 include:spf.delft.nl.eu-zs8zcn3l.e1.dspf.app -all" | 1800 |
| TXT | "google-site-verification=JNeIvNiTg54U3_SxlnaF4PewtREYbCH2b9J1OK2x5No" | 1800 |
| TXT | "apple-domain-verification=g4nAJELetkJQ5T_7Y_za-qo0oOpN8irJ0pR7hytsaZI" | 1800 |
| TXT | "DomainVerification=VD2UQY8Z0RK72I1EMN5GLDRFMJJS3R8NBA82B5HQY8049QKE1Q6IOMSTD7K033Y8" | 1800 |
| TXT | "0Oqz3r8awxvvy0UG5RirvHpYrETl8prkAqlYixtqu5fQeKmNpXx9M16EsJdD2AlCalUGzGoAgkDNr/wZAZHFrg==" | 1800 |
| TXT | "atlassian-domain-verification=SZUUqzakeQ8baYevTUahpkRcB/a3bZpnf8VQoKTk4RE5zDTNjqgUhIoqKW/CxP4O" | 1800 |
| CAA | 0 issue "sectigo.com" | 1800 |
| CAA | 0 issue "comodoca.com" | 1800 |
| CAA | 0 issue "letsencrypt.org" | 1800 |
| CAA | 0 issue "www.pkioverheid.nl" | 1800 |
| CAA | 0 issue "Digicert.com" | 1800 |
| CAA | 0 iodef "mailto:netdelft@delft.nl" | 1800 |
| CAA | 0 issue "kpn.com" | 1800 |
Checks
-
✓ TTLs within range #32
-
✓ No CNAME at the apex #33
-
✓ No wildcard #34
-
✓ CAA restricts issuance #35