pluxee.be

Checked 22 October 2026, 07:01 UTC · via 8.8.8.8
!Passed with warnings
21 passed 1 warning 0 failed 7 info

Registration

info

.be country-code

Found

TLD
.be (country-code)
ICANN policies apply
no

Checks

  • i
    .be is a country-code TLD (ccTLD)
    Country-code TLD: governed by its local registry under national policy, not by an ICANN contract. Registrar accreditation, dispute resolution and RDAP/WHOIS rules are set by the registry.
    #1
  • ✓ TLD delegated and signed #2
    .be is delegated in the root zone and DNSSEC-signed.
  • i
    Registration data not available
    No registration data via RDAP: the registry of .be offers no RDAP service. Many ccTLD registries don't offer RDAP; check the registry's WHOIS instead.
    #3

Delegation

info

dns1.cscdns.net, dns2.cscdns.net

Found

Parent zone
be
Delegation from
a.nsset.be (194.0.6.1)
NS at the parent
dns1.cscdns.net, dns2.cscdns.net
NS in the zone
dns1.cscdns.net, dns2.cscdns.net
NameserverAddressesNetwork (AS)Glue
dns1.cscdns.net156.154.130.100 2610:a1:1022::100AS12008 VERCARA - Vercara, LLC, US AS12008 VERCARA - Vercara, LLC, US-
dns2.cscdns.net156.154.131.100 2610:a1:1023::100AS12008 VERCARA - Vercara, LLC, US AS12008 VERCARA - Vercara, LLC, US-

Checks

  • i
    2 nameservers
    Two nameservers meet the minimum; RFC 2182 recommends three or more for important zones: dns1.cscdns.net, dns2.cscdns.net.
    #6
  • ✓ Parent and zone agree #7
    The parent delegation and the zone's NS records list the same nameservers.
  • ✓ No glue needed #8
    All nameservers are outside the zone, so no glue records are needed.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 2 IPv4 /24s and 2 IPv6 /48s.
  • i
    All nameservers in one AS
    All nameserver addresses are announced by one network operator (AS12008 (VERCARA - Vercara, LLC, US): 4 addresses). An outage or attack on that network affects all nameservers; large anycast providers mitigate this, but a secondary DNS provider adds independence.
    #11
  • i
    All nameserver names under .net
    All nameserver names are under one TLD, so a problem with that TLD also makes the nameservers unreachable. Some operators use names under two TLDs for extra resilience.
    #12
  • ✓ All reachable over IPv6 #13
    Every nameserver has an IPv6 address.

Nameservers

info

4 of 4 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
dns1.cscdns.net 156.154.130.100NOERROR, 32 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver
dns1.cscdns.net 2610:a1:1022::100NOERROR, 13 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver
dns2.cscdns.net 156.154.131.100NOERROR, 4 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver
dns2.cscdns.net 2610:a1:1023::100NOERROR, 4 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver

Checks

  • ✓ All respond #14
    All 4 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • i
    Identifying string disclosed
    These nameservers answer version queries with a string that is not a version number: dns1.cscdns.net: "UltraDNS Nameserver"; dns2.cscdns.net: "UltraDNS Nameserver".
    #17
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

pass

serial 2022111183 · primary dns1.cscdns.net

Found

Primary (MNAME)
dns1.cscdns.net
Contact (RNAME)
hostmaster.cscdns.net
Serial
2022111183
Refresh / retry
28800 s / 7200 s
Expire
604800 s
Negative TTL
14400 s

Serial per nameserver

NameserverSerial
dns1.cscdns.net (156.154.130.100)2022111183
dns1.cscdns.net (2610:a1:1022::100)2022111183
dns2.cscdns.net (156.154.131.100)2022111183
dns2.cscdns.net (2610:a1:1023::100)2022111183

Checks

  • ✓ Serial 2022111183 everywhere #22
    All nameservers serve the same version of the zone.
  • ✓ Timers within recommendations #23
    SOA refresh 8h, retry 2h, expire 7d, negative TTL 4h.
  • ✓ Primary is a public nameserver #24
    The primary nameserver dns1.cscdns.net is one of the listed nameservers.
  • ✓ Contact hostmaster@cscdns.net #25
    The SOA RNAME hostmaster.cscdns.net means hostmaster@cscdns.net.
  • ✓ Date-based serial #26
    The serial 2022111183 follows the YYYYMMDDnn convention (2022-11-11).

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

info

107 records at the apex

Found

Read from
156.154.130.100:53
TypeValueTTL
SOAdns1.cscdns.net. hostmaster.cscdns.net. 2022111183 28800 7200 604800 1440014400
NSdns1.cscdns.net.14400
NSdns2.cscdns.net.14400
A4.210.19.241300
TXT"v=spf1 -all"300
TXT"_09y5md8wprgyhfenrvnb0dg55aj6r41"300
TXT"_0lzx3e4fo1lxvvgtu0samv72oarws7f"300
TXT"_0vi13xp3ok0zr6szs4jkro5fsw57uxq"300
TXT"_10axsrf3u68cg87p7x1rv0rv3dl3j65"300
TXT"_1r357db5tw8vsto7yjksm9euzyg3hsl"300
TXT"_1xa36cijuvn909uqq2vsbu5j4udlpe5"300
TXT"_1y07c8jd43397u8ulnmt2sdq2e3nxox"300
TXT"_2211fnm4360375dypo3n95td621uge6"300
TXT"_227pz0ieoa7fyyh8zv8uw3z91ys35x1"300
TXT"_2ap8dhi9dmluegl332unxan43q8pim9"300
TXT"_2fa5ip83xypxft77ugt29wviydkygab"300
TXT"_2fmo53nrr1sf5ph86998xw35t35nj61"300
TXT"_2uh623wu6qijr98f5q2h2mrht35ds0a"300
TXT"_2ynet5b0tironu28mzsmrsfxjfxrsbs"300
TXT"_353ow19sh4hhyxrw9y9cci753ge6wja"300
TXT"_384f9qjguswizv8ffr17oy89v9q767u"300
TXT"_3bggkg5c7p2znbaqmwaelr36cdid3wv"300
TXT"_3g80ke7pdexyzkv4wv9da0bks3jba3n"300
TXT"_3rqmsqdsmi4zdegeqzovqftggz129uu"300
TXT"_44iqjvuhtfde2ckpw76om0xhnhimstm"300
TXT"_4dhmqjsnd1blf12ungnc350himki879"300
TXT"_4fo717f4lwggopkkcon1qs63z6ah0ka"300
TXT"_4knn4p0hfbihzpz6td3p394ncfnt3vl"300
TXT"_4tuqomnz8fvn6oqmd2ez2eevscnt8lb"300
TXT"_4yo7hmjw7o9l9m7dmyufvp9m482r3r5"300
TXT"_5lwypa5u7jv23kz9qoa59zfo3wxjou5"300
TXT"_5o58w0xi4471zw2nw9qdwdsr0lwdnej"300
TXT"_5ov7or43y3r0hziankoj4jg4i9juzgi"300
TXT"_6fn17e5prbeqh701qb57ypthxbrg6cp"300
TXT"_7bsgu8vea9m6u0bzsp12tktq9b13023"300
TXT"_7ojdu0p705b6s052rod7eu82809myc1"300
TXT"_87c0jaojz1t8vpiib6dnprrgmsz2kdh"300
TXT"_8j4i5d4yufiyyesqu0yugtkbyc8fqvs"300
TXT"_92ee67vqqjxvp025ohioity4i363jv0"300
TXT"_9cqvfy3x9q1x79dtuhnuowin7ots3bo"300
TXT"_9q8z4s65i0dkegilrc8tpcndpkh33n9"300
TXT"_ai1w5rtf4dtwjo7n2ht6v7zyibekwu7"300
TXT"_ceaw9bs9523c3thni9bty2gpdg9c83s"300
TXT"_dum7gsxks5z8cs978l1h150vx3lct0s"300
TXT"_eawahyzbqpk5uqren2emy0o8yaojdsd"300
TXT"_g08ui1mt8ououtr6kimkpipze3gh297"300
TXT"_g3thrbntja2xk3itwr87h7pwqhpdgcf"300
TXT"_h30igrzj4nfu9n6oglljlexi12j1lr0"300
TXT"_h6zaanwava8p3ll6d331ukpaioucs5e"300
TXT"_ib1oktqs0mjk8xodoi7nsstscd3o7fk"300
TXT"_ierl9ssc75kkpjwe7xm067bn062bo19"300
TXT"_im2dz0kpmdyzu1giszexe3039poasny"300
TXT"_ixwjjlotyooki9krefj9kegqyuj5vyu"300
TXT"_jeeqwrnlh08bxbfupnfvo3nidqwgdg8"300
TXT"_jpcpeax472rnca17fyieqjbwdqu13do"300
TXT"_jt9suz60pe1fujuiu9nqbbpa0sa7dir"300
TXT"_k0rrmn0mqk37dcxheuca8xgf1z44imp"300
TXT"_k2mm630rla9qtgrgywrocg5yt9jzdxx"300
TXT"_k89t2bhss3ta3bsgv2wfje51mji2nsb"300
TXT"_kxjmvrqsn20wbf7czoqlq0vswzytscn"300
TXT"_lc9l4g3n0s7wai7o464kw6q9ina9uya"300
TXT"_lep5czyuotmy7fibt8eshd7uhvtrugo"300
TXT"_lgx0ecj04apjxepggql3otg0qj7oikd"300
TXT"_lkmwwuth56kzsuxf65jd58ym90ysfbe"300
TXT"_lqyimeggu6d4sm3qoyvoeteep2nz6xi"300
TXT"_m1wkmcs8i3uc0h5ovuv7mjld7zwbt8m"300
TXT"_masozikl8wtzwtdr3nzq0piw3uz7jky"300
TXT"_mdlw3hmq94vlkzjw2o0155w8mkyu81h"300
TXT"_mhiqa3m0iec4tfsk2ht6k8dl9ugaxlh"300
TXT"_nbn07td4jj5lo0ybqfgra42ez9vhlhd"300
TXT"_nhm3kol7p30rn0ohax8mvlm0l2hpa56"300
TXT"_nrwa6rjoxhlqrbw0kjy533nzab332gz"300
TXT"_og04a56h5461arusfoq0xlsony71fhb"300
TXT"_oin4r015mob1fym33mfk1kum2bnsrou"300
TXT"_p1h01o0xcz90xkykjdjfzlguqpfq4rv"300
TXT"_pgbzg460rvgiwb5rkdwap8ove4317fw"300
TXT"_pr7rk0du2h0s7h6xzjj5abt0d5t8p1b"300
TXT"_q3tyc9zn7eaq52xhd103kuvrgy7sn53"300
TXT"_qt03w1npmp0eike6w51mfvwsvitod53"300
TXT"_qwob5u99t39u464j1n4o38xzaw4nu5u"300
TXT"_r2aaf3xivhi9jcyolzfwkkefa826kuk"300
TXT"_rltug4xs9pkfnip6pnr9io8f2nbai2x"300
TXT"_s48qd52q1pe51bjpf7tdo4ni0nn1faq"300
TXT"_svpqn0tvn2wo3w3mb58dhuzhxe5jkii"300
TXT"_t173gizwqsszcdmchsir00k8wgc73zg"300
TXT"_tw8u1qpoapu3dfei8uylteqg8s8v25d"300
TXT"_u2avennddpd88aq9enylnf5fe1ezcl2"300
TXT"_usgyavs4hpa7gdbk6j8ogjbpp3ldiv0"300
TXT"_v3ec7cy8ehv4z3c8pkzz6qcx9t07pr9"300
TXT"_v3k1225vukgl1yfm80eo6hu6plchj96"300
TXT"_vg9g8g9gaux44f81qwiqb322vs75q2j"300
TXT"_wcsd1ccpmmj2rh6s2hdwgghpbqyrpvy"300
TXT"_x6r17tvjtgzfak0prs9ttw4fw2z1sx0"300
TXT"_xqsnswbnckf54f51cd9c1ean6h6v1e0"300
TXT"_yc5knuax6y2dwgz1b3cwc1nmhburkok"300
TXT"_yme2xhoks0umci9xek1wec6ft491zxb"300
TXT"_yqamciah87dr5z41y4owp0e130tc5zm"300
TXT"_yxwvga73hepdwsxel5fa21o4m11fxd4"300
TXT"mck3d64dgjvw50dpfj9l8jz2n25zkn26"300
TXT"google-site-verification=BHkF5rbx5-13fBJy0q_PXbmghEOEHUhU729ef5ZYKbU"300
TXT"google-site-verification=vELbjmQLAZxd9RhCx_Bsu2yEnondCFOQYpPoxrhjc04"300
CAA0 issue "amazonaws.com"300
CAA0 issue "digicert.com"300
CAA0 issue "letsencrypt.org"300
CAA0 issue "pki.goog"300
CAA0 issuewild "digicert.com"300
CAA0 issuewild "letsencrypt.org"300

Checks

  • ✓ TTLs within range #32
    TTLs: A 5m, NS 4h. The NS TTL at the parent is 1d and in the zone 4h; resolvers may use either.
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • i
    Wildcard record
    A random name under the zone resolves, so there is a wildcard (*) record. Typos and non-existent hosts resolve too, which can confuse mail and certificate checks.
    #34
  • ✓ CAA restricts issuance #35
    Certificates may be issued by: amazonaws.com, digicert.com, letsencrypt.org, pki.goog.