hetcak.nl
iAll checks passed
26 passed
0 warnings
0 failed
5 info
Registration
info.nl country-code · Rijksoverheid
Found
- TLD
- .nl (country-code)
- ICANN policies apply
- no
- Registrar
- Rijksoverheid
- Registered
- 21 September 2006
- Last changed
- 31 May 2021
- Status
- active
- Registry nameservers
- ns0.rijksoverheidnl.com, ns1.rijksoverheidnl.nl, ns2.rijksoverheidnl.eu, ns3.rijksoverheidnl.org
- RDAP server
- https://rdap.sidn.nl/
Checks
-
i#1.nl is a country-code TLD (ccTLD)
-
✓ TLD delegated and signed #2
-
i#3Expiry date not published
-
i#4No transfer lock
Delegation
infofinding the parent zone of hetcak.nl: DNS query for nl failed: read udp 46.225.38.91:50838->8.8.8.8:53: i/o timeout
Found
- NS in the zone
- ns0.rijksoverheidnl.com, ns1.rijksoverheidnl.nl, ns2.rijksoverheidnl.eu, ns3.rijksoverheidnl.org
| Nameserver | Addresses | Network (AS) | Glue |
|---|---|---|---|
| ns0.rijksoverheidnl.com (zone only) | 185.136.96.82 2a06:fb00:1::1:82 | AS203391 CLOUDNSNET - Cloud DNS Ltd, BG AS203391 CLOUDNSNET - Cloud DNS Ltd, BG | - |
| ns1.rijksoverheidnl.nl (zone only) | 178.22.85.27 2a00:d00:3:6::130 | AS41887 PROLOCATION - Prolocation B.V., NL AS41887 PROLOCATION - Prolocation B.V., NL | - |
| ns2.rijksoverheidnl.eu (zone only) | 2a00:d01:3:1::20 | AS41887 PROLOCATION - Prolocation B.V., NL | - |
| ns3.rijksoverheidnl.org (zone only) | 2001:610:188:203:3:1:0:67 | AS1103 SURFNET-NL - SURF B.V., NL | - |
Checks
-
i#6Could not be checked
-
✓ All names resolve #9
-
✓ Nameservers in different networks #10
-
✓ 3 autonomous systems #11
-
✓ All reachable over IPv6 #13
Nameservers
info6 of 6 addresses answer authoritatively
Found
| Nameserver | Answer | Recursion | TCP / EDNS | AXFR | Version |
|---|---|---|---|---|---|
| ns0.rijksoverheidnl.com 185.136.96.82 | NOERROR, 5 ms, authoritative | no | yes / yes | refused | de3-3 |
| ns0.rijksoverheidnl.com 2a06:fb00:1::1:82 | NOERROR, 4 ms, authoritative | no | yes / yes | refused | de3-3 |
| ns1.rijksoverheidnl.nl 178.22.85.27 | NOERROR, 11 ms, authoritative | no | yes / yes | refused | Not disclosed - unix@prolocation.net |
| ns1.rijksoverheidnl.nl 2a00:d00:3:6::130 | NOERROR, 11 ms, authoritative | no | yes / yes | refused | Not disclosed - unix@prolocation.net |
| ns2.rijksoverheidnl.eu 2a00:d01:3:1::20 | NOERROR, 12 ms, authoritative | no | yes / yes | refused | Not disclosed - unix@prolocation.net |
| ns3.rijksoverheidnl.org 2001:610:188:203:3:1:0:67 | NOERROR, 10 ms, authoritative | no | yes / yes | refused | Not disclosed - unix@prolocation.net |
Checks
-
✓ All respond #14
-
✓ All authoritative #15
-
✓ No recursion #16
-
i#17Identifying string disclosed
-
✓ Zone transfers refused #18
-
✓ TCP supported #19
-
✓ EDNS supported #20
-
✓ Public addresses #21
SOA
passserial 2026101501 · primary ns1.rijksoverheidnl.nl
Found
- Primary (MNAME)
- ns1.rijksoverheidnl.nl
- Contact (RNAME)
- domeinnaam.minaz.nl
- Serial
- 2026101501
- Refresh / retry
- 10800 s / 3600 s
- Expire
- 604800 s
- Negative TTL
- 86400 s
Serial per nameserver
| Nameserver | Serial |
|---|---|
| ns0.rijksoverheidnl.com (185.136.96.82) | 2026101501 |
| ns0.rijksoverheidnl.com (2a06:fb00:1::1:82) | 2026101501 |
| ns1.rijksoverheidnl.nl (178.22.85.27) | 2026101501 |
| ns1.rijksoverheidnl.nl (2a00:d00:3:6::130) | 2026101501 |
| ns2.rijksoverheidnl.eu (2a00:d01:3:1::20) | 2026101501 |
| ns3.rijksoverheidnl.org (2001:610:188:203:3:1:0:67) | 2026101501 |
Checks
-
✓ Serial 2026101501 everywhere #22
-
✓ Timers within recommendations #23
-
✓ Primary is a public nameserver #24
-
✓ Contact domeinnaam@minaz.nl #25
-
✓ Date-based serial #26
DNSSEC
passSigned, DS published at parent
Found
- Validated by resolver
- yes
- Denial of existence
- NSEC3
- NSEC3
- 0 iterations, 0-byte salt
- Signatures valid until
- 29 October 2026
DS at the parent
| Key tag | Algorithm | Digest | Matches a key |
|---|---|---|---|
| 49573 | ECDSAP256SHA256 (13) | SHA256 1482D5856D12204D… | yes |
DNSKEY in the zone
| Key tag | Role | Algorithm |
|---|---|---|
| 49573 | KSK (257) | ECDSAP256SHA256 (13) |
Checks
-
✓ Signed and validated #27
-
✓ DS matches a key #28
-
✓ Modern algorithms #29
-
✓ Signatures valid until 2026-10-29 #30
-
✓ NSEC3 as recommended #31
Records
pass24 records at the apex
Found
- Read from
- 185.136.96.82:53
| Type | Value | TTL |
|---|---|---|
| SOA | ns1.rijksoverheidnl.nl. domeinnaam.minaz.nl. 2026101501 10800 3600 604800 86400 | 10800 |
| NS | ns3.rijksoverheidnl.org. | 10800 |
| NS | ns1.rijksoverheidnl.nl. | 10800 |
| NS | ns0.rijksoverheidnl.com. | 10800 |
| NS | ns2.rijksoverheidnl.eu. | 10800 |
| A | 185.38.232.230 | 10800 |
| AAAA | 2a02:720:9:8::230 | 10800 |
| MX | 10 mail.hetcak.nl. | 10800 |
| MX | 30 fallback.hetcak.nl. | 10800 |
| MX | 20 mailbackup.hetcak.nl. | 10800 |
| TXT | "google-site-verification=tN4WAZKr599dQn1VLcodZll55_BGdtyHgAnJyXvYHC4" | 10800 |
| TXT | "vmware-cloud-verification-2f5607c8-0545-431e-bca3-88c17bad8821" | 10800 |
| TXT | "cisco-ci-domain-verification=1ce15e1b43b8710a07350aa2642c34f389da37782f39c3ba9488f9bbcd1b0bd3" | 10800 |
| TXT | "_mx44k1kyi31ml083bcqfsyfovo6j4gj" | 10800 |
| TXT | "vmware-cloud-verification-0adb587f-f3be-41bd-abae-3f82cdec92f8" | 10800 |
| TXT | "DomainVerification=R0H2MKSZ8ZXF3WXN7RX3FLCQDB8WIMABEQ9V9F3WXM5IWM4J04C49ODKG9M26FAY" | 10800 |
| TXT | "v=spf1 mx include:spf.topdesk.net include:spf.avetica.net ip4:80.84.235.70 ip4:80.84.235.65 ip6:2a06:b7c1:0:5::25 ip6:2a06:b7c1:0:5::26 -all exp=explain._spf.hetcak.mailpolicies.nl" | 10800 |
| TXT | "TS0184692" | 10800 |
| TXT | "adobe-idp-site-verification=11b65fa38aba11c57a593379c66598740f3b55b1ca62b8a64e5449684150a789" | 10800 |
| CAA | 0 issuewild ";" | 10800 |
| CAA | 128 issue "starfieldtech.com" | 10800 |
| CAA | 128 iodef "mailto:inet@hetcak.nl" | 10800 |
| CAA | 128 issue "digicert.com" | 10800 |
| CAA | 128 issue "quovadisglobal.com" | 10800 |
Checks
-
✓ TTLs within range #32
-
✓ No CNAME at the apex #33
-
✓ No wildcard #34
-
✓ CAA restricts issuance #35