Domain report: pinkpop.nl

Registration

info

.nl country-code

Found

TLD: .nl (country-code)
ICANN policies apply: no

Lookup error: https://rdap.sidn.nl/domain/pinkpop.nl returned HTTP 429

Checks

i

.nl is a country-code TLD (ccTLD)

Country-code TLD: governed by its local registry under national policy, not by an ICANN contract. Registrar accreditation, dispute resolution and RDAP/WHOIS rules are set by the registry.

#1
✓ TLD delegated and signed #2

.nl is delegated in the root zone and DNSSEC-signed.
i

Could not be checked

The RDAP lookup failed, so this could not be checked: https://rdap.sidn.nl/domain/pinkpop.nl returned HTTP 429

#3

Delegation

info

ns-1454.awsdns-53.org, ns-17.awsdns-02.com, ns-1751.awsdns-26.co.uk, ns-796.awsdns-35.net

Found

Parent zone: nl
Delegation from: ns1.dns.nl (194.0.28.53)
NS at the parent: ns-1454.awsdns-53.org, ns-17.awsdns-02.com, ns-1751.awsdns-26.co.uk, ns-796.awsdns-35.net
NS in the zone: ns-1454.awsdns-53.org, ns-17.awsdns-02.com, ns-1751.awsdns-26.co.uk, ns-796.awsdns-35.net

Nameserver	Addresses	Network (AS)	Glue
ns-1454.awsdns-53.org	205.251.197.174 2600:9000:5305:ae00::1	AS16509 AMAZON-02 - Amazon.com, Inc., US AS16509 AMAZON-02 - Amazon.com, Inc., US	-
ns-17.awsdns-02.com	205.251.192.17 2600:9000:5300:1100::1	AS16509 AMAZON-02 - Amazon.com, Inc., US AS16509 AMAZON-02 - Amazon.com, Inc., US	-
ns-1751.awsdns-26.co.uk	205.251.198.215 2600:9000:5306:d700::1	AS16509 AMAZON-02 - Amazon.com, Inc., US AS16509 AMAZON-02 - Amazon.com, Inc., US	-
ns-796.awsdns-35.net	205.251.195.28 2600:9000:5303:1c00::1	AS16509 AMAZON-02 - Amazon.com, Inc., US AS16509 AMAZON-02 - Amazon.com, Inc., US	-

Checks

✓ 4 nameservers #6

Delegated to ns-1454.awsdns-53.org, ns-17.awsdns-02.com, ns-1751.awsdns-26.co.uk, ns-796.awsdns-35.net.
✓ Parent and zone agree #7

The parent delegation and the zone's NS records list the same nameservers.
✓ No glue needed #8

All nameservers are outside the zone, so no glue records are needed.
✓ All names resolve #9

Every nameserver name has an address and is not an alias.
✓ Nameservers in different networks #10

The nameservers are spread over 4 IPv4 /24s and 4 IPv6 /48s.
i

All nameservers in one AS

All nameserver addresses are announced by one network operator (AS16509 (AMAZON-02 - Amazon.com, Inc., US): 8 addresses). An outage or attack on that network affects all nameservers; large anycast providers mitigate this, but a secondary DNS provider adds independence.

#11
✓ Nameserver names under 4 TLDs #12

Nameserver names use the TLDs .com, .net, .org, .uk.
✓ All reachable over IPv6 #13

Every nameserver has an IPv6 address.

Nameservers

pass

8 of 8 addresses answer authoritatively

Found

Nameserver	Answer	Recursion	TCP / EDNS	AXFR	Version
ns-1454.awsdns-53.org 205.251.197.174	NOERROR, 3 ms, authoritative	no	yes / yes	refused	-
ns-1454.awsdns-53.org 2600:9000:5305:ae00::1	NOERROR, 4 ms, authoritative	no	yes / yes	refused	-
ns-17.awsdns-02.com 205.251.192.17	NOERROR, 9 ms, authoritative	no	yes / yes	refused	-
ns-17.awsdns-02.com 2600:9000:5300:1100::1	NOERROR, 10 ms, authoritative	no	yes / yes	refused	-
ns-1751.awsdns-26.co.uk 205.251.198.215	NOERROR, 9 ms, authoritative	no	yes / yes	refused	-
ns-1751.awsdns-26.co.uk 2600:9000:5306:d700::1	NOERROR, 9 ms, authoritative	no	yes / yes	refused	-
ns-796.awsdns-35.net 205.251.195.28	NOERROR, 3 ms, authoritative	no	yes / yes	refused	-
ns-796.awsdns-35.net 2600:9000:5303:1c00::1	NOERROR, 4 ms, authoritative	no	yes / yes	refused	-

Checks

✓ All respond #14

All 8 nameserver addresses answered.
✓ All authoritative #15

Every responding nameserver answers authoritatively for the zone.
✓ No recursion #16

The nameservers do not answer recursive queries for other domains.
✓ No version disclosed #17

The nameservers don't reveal their software version.
✓ Zone transfers refused #18

No nameserver allows a zone transfer to the public.
✓ TCP supported #19

All nameservers answer over TCP.
✓ EDNS supported #20

All nameservers support EDNS(0).
✓ Public addresses #21

All nameserver addresses are publicly routable.

SOA

pass

serial 1 · primary ns-1454.awsdns-53.org

Found

Primary (MNAME): ns-1454.awsdns-53.org
Contact (RNAME): awsdns-hostmaster.amazon.com
Serial: 1
Refresh / retry: 7200 s / 900 s
Expire: 1209600 s
Negative TTL: 86400 s

Serial per nameserver

Nameserver	Serial
ns-1454.awsdns-53.org (205.251.197.174)	1
ns-1454.awsdns-53.org (2600:9000:5305:ae00::1)	1
ns-17.awsdns-02.com (205.251.192.17)	1
ns-17.awsdns-02.com (2600:9000:5300:1100::1)	1
ns-1751.awsdns-26.co.uk (205.251.198.215)	1
ns-1751.awsdns-26.co.uk (2600:9000:5306:d700::1)	1
ns-796.awsdns-35.net (205.251.195.28)	1
ns-796.awsdns-35.net (2600:9000:5303:1c00::1)	1

Checks

✓ Serial 1 everywhere #22

All nameservers serve the same version of the zone.
✓ Timers within recommendations #23

SOA refresh 2h, retry 15m, expire 14d, negative TTL 1d.
✓ Primary is a public nameserver #24

The primary nameserver ns-1454.awsdns-53.org is one of the listed nameservers.
✓ Contact awsdns-hostmaster@amazon.com #25

The SOA RNAME awsdns-hostmaster.amazon.com means awsdns-hostmaster@amazon.com.
✓ Counter serial #26

The serial 1 is a plain counter.

DNSSEC

warn

Not signed

Found

Validated by resolver: no

Checks

!

Not signed

The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.

#27

Records

info

27 records at the apex

Found

Read from: 205.251.197.174:53

Type	Value	TTL
SOA	ns-1454.awsdns-53.org. awsdns-hostmaster.amazon.com. 1 7200 900 1209600 86400	900
NS	ns-1454.awsdns-53.org.	172800
NS	ns-17.awsdns-02.com.	172800
NS	ns-1751.awsdns-26.co.uk.	172800
NS	ns-796.awsdns-35.net.	172800
A	31.7.6.9	3600
A	31.7.0.9	3600
A	185.144.225.9	3600
AAAA	2a03:9700::31	3600
AAAA	2a03:9700::30	3600
AAAA	2a03:9700::32	3600
MX	10 mxa-002d0101.gslb.pphosted.com.	300
MX	10 mxb-002d0101.gslb.pphosted.com.	300
TXT	"MS=ms84051463"	3600
TXT	"ZOOM_verify_SDGCdMAUTG2pJwaMYQR-5g"	3600
TXT	"adobe-idp-site-verification=8afa8369ac12bcc044a7b99a167517c746c7613b2bd363dc0e39ec93a59e70a8"	3600
TXT	"airtable-verification=d3956929bc0bb300e071f6aed2fc3564"	3600
TXT	"anthropic-domain-verification-d36bm3=K6Y5ci9m6A8sQUOMX9BW8UltI"	3600
TXT	"asv_domain=f68156523b7121492e2df595bba305be"	3600
TXT	"box-domain-verification=2e07f66b3d7048c830213c300471ecbe491b400783834c188fb8f28be7ddf578"	3600
TXT	"facebook-domain-verification=aiwa716r5zgcmnurrpnvaxq1uvcafu"	3600
TXT	"openai-domain-verification=dv-eTLMoCvvN59JoAtFnANvBnJO"	3600
TXT	"trend-micro-v1-domain-verification.a654b1036be8f95d625ccbf872c373d2=c045d858-c7fb-477e-b8db-d3050ff8afba"	3600
TXT	"turbo-smtp._domainkey.email.pinkpop.nl k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDT3MWLni6so1q9eQggRYBCLHFjohZkCnYHH8gZNDBm6zRrodRVpWpJQW7x3cWWiuBhS1X0IfBB80l5tqFa"	3600
TXT	"turbo-smtp._domainkey.pinkpop.nl.nl k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDT3MWLni6so1q9eQggRYBCLHFjohZkCnYHH8gZNDBm6zRrodRVpWpJQW7x3cWWiuBhS1X0IfBB80l5tqFa"	3600
TXT	"v=spf1 mx include:servers.mcsv.net include:eu.mailgun.org include:spf.protection.outlook.com include:spf-002d0101.pphosted.com -all"	3600
TXT	"zscaler-verification-101843-26012026-6vki3d13pS"	3600

Checks

✓ TTLs within range #32

TTLs: A 1h, AAAA 1h, MX 5m, NS 2d. The NS TTL at the parent is 1h and in the zone 2d; resolvers may use either.
✓ No CNAME at the apex #33

The zone apex has no CNAME record.
✓ No wildcard #34

Names that don't exist return NXDOMAIN.
i

No CAA records

Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.

#35