Domain report: nivon.nl

Registration

info

.nl country-code

Lookup error: https://rdap.sidn.nl/domain/nivon.nl returned HTTP 429

i

.nl is a country-code TLD (ccTLD)

Country-code TLD: governed by its local registry under national policy, not by an ICANN contract. Registrar accreditation, dispute resolution and RDAP/WHOIS rules are set by the registry.

#1
✓ TLD delegated and signed #2

.nl is delegated in the root zone and DNSSEC-signed.
i

Could not be checked

The RDAP lookup failed, so this could not be checked: https://rdap.sidn.nl/domain/nivon.nl returned HTTP 429

#3

pass

ns1.linqhost.nl, ns2.linqhost.eu, ns3.linqhost.net

Nameserver	Addresses	Network (AS)	Glue
ns1.linqhost.nl	37.252.122.80 2a02:2770:8:0:21a:4aff:fe50:7676	AS196752 TILAA - Tilaa B.V., NL AS196752 TILAA - Tilaa B.V., NL	37.252.122.80 2a02:2770:8:0:21a:4aff:fe50:7676
ns2.linqhost.eu	5.79.113.3 2001:1af8:4700:a134:1::53	AS60781 LEASEWEB-NL-AMS-01 - LeaseWeb Netherlands B.V., NL AS60781 LEASEWEB-NL-AMS-01 - LeaseWeb Netherlands B.V., NL	-
ns3.linqhost.net	149.210.135.43 2a01:7c8:aab2:1c5::1	AS20857 TRANSIP-AS - Signet B.V., NL AS20857 TRANSIP-AS - Signet B.V., NL	-

✓ 3 nameservers #6

Delegated to ns1.linqhost.nl, ns2.linqhost.eu, ns3.linqhost.net.
✓ Parent and zone agree #7

The parent delegation and the zone's NS records list the same nameservers.
✓ No glue needed #8

All nameservers are outside the zone, so no glue records are needed.
✓ All names resolve #9

Every nameserver name has an address and is not an alias.
✓ Nameservers in different networks #10

The nameservers are spread over 3 IPv4 /24s and 3 IPv6 /48s.
✓ 3 autonomous systems #11

The nameservers are spread over: AS196752 (TILAA - Tilaa B.V., NL): 2 addresses; AS20857 (TRANSIP-AS - Signet B.V., NL): 2 addresses; AS60781 (LEASEWEB-NL-AMS-01 - LeaseWeb Netherlands B.V., NL): 2 addresses.
✓ Nameserver names under 3 TLDs #12

Nameserver names use the TLDs .eu, .net, .nl.
✓ All reachable over IPv6 #13

Every nameserver has an IPv6 address.

info

6 of 6 addresses answer authoritatively

Nameserver	Answer	Recursion	TCP / EDNS	AXFR	Version
ns1.linqhost.nl 37.252.122.80	NOERROR, 9 ms, authoritative	no	yes / yes	refused	LinQhost Authoritive Nameserver - Make it resolv!
ns1.linqhost.nl 2a02:2770:8:0:21a:4aff:fe50:7676	NOERROR, 10 ms, authoritative	no	yes / yes	refused	LinQhost Authoritive Nameserver - Make it resolv!
ns2.linqhost.eu 5.79.113.3	NOERROR, 13 ms, authoritative	no	yes / yes	refused	LinQhost Authoritive Nameserver - Make it resolv!
ns2.linqhost.eu 2001:1af8:4700:a134:1::53	NOERROR, 13 ms, authoritative	no	yes / yes	refused	LinQhost Authoritive Nameserver - Make it resolv!
ns3.linqhost.net 149.210.135.43	NOERROR, 11 ms, authoritative	no	yes / yes	refused	LinQhost Authoritive Nameserver - Make it resolv!
ns3.linqhost.net 2a01:7c8:aab2:1c5::1	NOERROR, 12 ms, authoritative	no	yes / yes	refused	LinQhost Authoritive Nameserver - Make it resolv!

✓ All respond #14

All 6 nameserver addresses answered.
✓ All authoritative #15

Every responding nameserver answers authoritatively for the zone.
✓ No recursion #16

The nameservers do not answer recursive queries for other domains.
i

Identifying string disclosed

These nameservers answer version queries with a string that is not a version number: ns1.linqhost.nl: "LinQhost Authoritive Nameserver - Make it resolv!"; ns2.linqhost.eu: "LinQhost Authoritive Nameserver - Make it resolv!"; ns3.linqhost.net: "LinQhost Authoritive Nameserver - Make it resolv!".

#17
✓ Zone transfers refused #18

No nameserver allows a zone transfer to the public.
✓ TCP supported #19

All nameservers answer over TCP.
✓ EDNS supported #20

All nameservers support EDNS(0).
✓ Public addresses #21

All nameserver addresses are publicly routable.

pass

serial 1792670444 · primary ns1.linqhost.nl

✓ Serial 1792670444 everywhere #22

All nameservers serve the same version of the zone.
✓ Timers within recommendations #23

SOA refresh 4h, retry 1h, expire 7d, negative TTL 23h13m24s.
✓ Primary is a public nameserver #24

The primary nameserver ns1.linqhost.nl is one of the listed nameservers.
✓ Contact hostmaster@linqhost.net #25

The SOA RNAME hostmaster.linqhost.net means hostmaster@linqhost.net.
✓ Timestamp serial #26

The serial 1792670444 is a Unix timestamp (2026-10-22 12:00 UTC).

warn

Not signed

info

14 records at the apex

Type	Value	TTL
SOA	ns1.linqhost.nl. hostmaster.linqhost.net. 1792670444 14400 3600 604800 83604	10800
NS	ns1.linqhost.nl.	10800
NS	ns3.linqhost.net.	10800
NS	ns2.linqhost.eu.	10800
A	178.128.139.214	1800
MX	30 mx3-eu.mtaroutes.com.	3600
MX	40 mx4-eu.mtaroutes.com.	3600
MX	20 mx2-eu.mtaroutes.com.	3600
MX	10 mx1-eu.mtaroutes.com.	3600
TXT	"v=spf1 include:spf.protection.outlook.com include:_spf.tommybookingsupport.com include:_spf.linqhost.nl a:_spf.tommybookingsupport.com include:spf.eprov.nl include:spf.mandrillapp.com ~all"	10800
TXT	"_b78zg1jpeewv2gk1d0v8f5zehvymigz"	10800
TXT	"google-site-verification=rAKus8VKudGe4k4hR_6s4sGytHEGDp-hFII9Z8fZmJo"	10800
TXT	"google-site-verification=8k865KtdqLFZLJz2RgfL2XKHQizA3AR6aGKsq6yfxww"	10800
TXT	"MS=ms27378503"	10800

✓ TTLs within range #32

TTLs: A 30m, MX 1h, NS 3h. The NS TTL at the parent is 1h and in the zone 3h; resolvers may use either.
✓ No CNAME at the apex #33

The zone apex has no CNAME record.
i

Wildcard record

A random name under the zone resolves, so there is a wildcard (*) record. Typos and non-existent hosts resolve too, which can confuse mail and certificate checks.

#34
i

No CAA records

Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.

#35