rechtspraak.nl
!Passed with warnings
26 passed
2 warnings
0 failed
7 info
Registration
info.nl country-code · team.blue nl B.V.
Found
- TLD
- .nl (country-code)
- ICANN policies apply
- no
- Registrar
- team.blue nl B.V.
- Registered
- 4 November 1999
- Last changed
- 24 November 2025
- Status
- active
- Registry nameservers
- a1-22.akam.net, a2-66.akam.net, a24-64.akam.net, a3-65.akam.net, a8-67.akam.net, a9-66.akam.net
- RDAP server
- https://rdap.sidn.nl/
Checks
-
i#1.nl is a country-code TLD (ccTLD)
-
✓ TLD delegated and signed #2
-
i#3Expiry date not published
-
i#4No transfer lock
-
✓ Registry and delegation match #5
Delegation
infoa1-22.akam.net, a2-66.akam.net, a24-64.akam.net, a3-65.akam.net, a8-67.akam.net, a9-66.akam.net
Found
- Parent zone
- nl
- Delegation from
- ns1.dns.nl (194.0.28.53)
- NS at the parent
- a1-22.akam.net, a2-66.akam.net, a24-64.akam.net, a3-65.akam.net, a8-67.akam.net, a9-66.akam.net
- NS in the zone
- a1-22.akam.net, a2-66.akam.net, a24-64.akam.net, a3-65.akam.net, a8-67.akam.net, a9-66.akam.net
| Nameserver | Addresses | Network (AS) | Glue |
|---|---|---|---|
| a1-22.akam.net | 193.108.91.22 2600:1401:2::16 | AS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL | - |
| a2-66.akam.net | 95.100.174.66 2600:1480:7000::42 | AS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL | - |
| a24-64.akam.net | 2.16.130.64 2600:1480:9800::40 | AS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL | - |
| a3-65.akam.net | 96.7.49.65 2600:1408:1c::41 | AS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL | - |
| a8-67.akam.net | 2.16.40.67 2600:1403:a::43 | AS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL | - |
| a9-66.akam.net | 184.85.248.66 2a02:26f0:117::42 | AS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL | - |
Checks
-
✓ 6 nameservers #6
-
✓ Parent and zone agree #7
-
✓ No glue needed #8
-
✓ All names resolve #9
-
✓ Nameservers in different networks #10
-
i#11All nameservers in one AS
-
i#12All nameserver names under .net
-
✓ All reachable over IPv6 #13
Nameservers
warn12 of 12 addresses answer authoritatively
Found
| Nameserver | Answer | Recursion | TCP / EDNS | AXFR | Version |
|---|---|---|---|---|---|
| a1-22.akam.net 193.108.91.22 | NOERROR, 3 ms, authoritative | no | yes / yes | refused | 41824.6 |
| a1-22.akam.net 2600:1401:2::16 | NOERROR, 5 ms, authoritative | no | yes / yes | refused | 41824.7 |
| a2-66.akam.net 95.100.174.66 | NOERROR, 4 ms, authoritative | no | yes / yes | refused | 48878.32 |
| a2-66.akam.net 2600:1480:7000::42 | NOERROR, 5 ms, authoritative | no | yes / yes | refused | 48878.33 |
| a24-64.akam.net 2.16.130.64 | NOERROR, 6 ms, authoritative | no | yes / yes | refused | 48878.27 |
| a24-64.akam.net 2600:1480:9800::40 | NOERROR, 6 ms, authoritative | no | yes / yes | refused | 48878.26 |
| a3-65.akam.net 96.7.49.65 | NOERROR, 4 ms, authoritative | no | yes / yes | refused | 41824.6 |
| a3-65.akam.net 2600:1408:1c::41 | NOERROR, 4 ms, authoritative | no | yes / yes | refused | 41824.7 |
| a8-67.akam.net 2.16.40.67 | NOERROR, 5 ms, authoritative | no | yes / yes | refused | 48878.32 |
| a8-67.akam.net 2600:1403:a::43 | NOERROR, 6 ms, authoritative | no | yes / yes | refused | 48878.29 |
| a9-66.akam.net 184.85.248.66 | NOERROR, 3 ms, authoritative | no | yes / yes | refused | 41824.10 |
| a9-66.akam.net 2a02:26f0:117::42 | NOERROR, 4 ms, authoritative | no | yes / yes | refused | 41824.7 |
Checks
-
✓ All respond #14
-
✓ All authoritative #15
-
✓ No recursion #16
-
!#17Software version disclosed
-
✓ Zone transfers refused #18
-
✓ TCP supported #19
-
✓ EDNS supported #20
-
✓ Public addresses #21
SOA
infoserial 2021103188 · primary a1-21.akam.net
Found
- Primary (MNAME)
- a1-21.akam.net
- Contact (RNAME)
- hostmaster.argeweb.nl
- Serial
- 2021103188
- Refresh / retry
- 10800 s / 3600 s
- Expire
- 604800 s
- Negative TTL
- 3600 s
Serial per nameserver
| Nameserver | Serial |
|---|---|
| a1-22.akam.net (193.108.91.22) | 2021103188 |
| a1-22.akam.net (2600:1401:2::16) | 2021103188 |
| a2-66.akam.net (95.100.174.66) | 2021103188 |
| a2-66.akam.net (2600:1480:7000::42) | 2021103188 |
| a24-64.akam.net (2.16.130.64) | 2021103188 |
| a24-64.akam.net (2600:1480:9800::40) | 2021103188 |
| a3-65.akam.net (96.7.49.65) | 2021103188 |
| a3-65.akam.net (2600:1408:1c::41) | 2021103188 |
| a8-67.akam.net (2.16.40.67) | 2021103188 |
| a8-67.akam.net (2600:1403:a::43) | 2021103188 |
| a9-66.akam.net (184.85.248.66) | 2021103188 |
| a9-66.akam.net (2a02:26f0:117::42) | 2021103188 |
Checks
-
✓ Serial 2021103188 everywhere #22
-
✓ Timers within recommendations #23
-
i#24Hidden master
-
✓ Contact hostmaster@argeweb.nl #25
-
✓ Date-based serial #26
DNSSEC
passSigned, DS published at parent
Found
- Validated by resolver
- yes
- Denial of existence
- NSEC3
- NSEC3
- 0 iterations, 0-byte salt
- Signatures valid until
- 24 October 2026
DS at the parent
| Key tag | Algorithm | Digest | Matches a key |
|---|---|---|---|
| 15801 | ECDSAP256SHA256 (13) | SHA256 267B1DFB26CBC3D6… | yes |
DNSKEY in the zone
| Key tag | Role | Algorithm |
|---|---|---|
| 1753 | ZSK (256) | ECDSAP256SHA256 (13) |
| 59642 | ZSK (256) | ECDSAP256SHA256 (13) |
| 15801 | KSK (257) | ECDSAP256SHA256 (13) |
Checks
-
✓ Signed and validated #27
-
✓ DS matches a key #28
-
✓ Modern algorithms #29
-
✓ Short-lived signatures (online signing) #30
-
✓ NSEC3 as recommended #31
Records
warn25 records at the apex
Found
- Read from
- 193.108.91.22:53
| Type | Value | TTL |
|---|---|---|
| SOA | a1-21.akam.net. hostmaster.argeweb.nl. 2021103188 10800 3600 604800 3600 | 600 |
| NS | a3-65.akam.net. | 600 |
| NS | a2-66.akam.net. | 600 |
| NS | a8-67.akam.net. | 600 |
| NS | a1-22.akam.net. | 600 |
| NS | a9-66.akam.net. | 600 |
| NS | a24-64.akam.net. | 600 |
| A | 2.16.204.12 | 20 |
| A | 2.16.204.19 | 20 |
| AAAA | 2a02:26f0:b700:5::210:cc13 | 20 |
| AAAA | 2a02:26f0:b700:5::210:cc0c | 20 |
| MX | 10 mail2.minjenv.nl. | 3600 |
| MX | 10 mail1.minjenv.nl. | 3600 |
| TXT | "v=NTA7516-1;startdate=2023-12;enddate=2027-12;provider=Zivver" | 3600 |
| TXT | "__ytaamjqhgrhzzx4h46gue9xc8v59k1z" | 3600 |
| TXT | "3UUEpAjHqeKvEvh0rbWLq2bAabLmD34wLR3gV1IMc5PY5f7jH8vvtI2m5O83EqTSXxPWTfMYkWHxvpacqUacGA==" | 3600 |
| TXT | "qjei8j26g1qocg4a51upnqse2b" | 3600 |
| TXT | "google-site-verification=iVW2yqoyOfaAsS9w81kLlKUR57sm6YpTgQ-phZ4XQ9o" | 3600 |
| TXT | "fac9c66d76fe5daff676db1afefc43505b70a17381bde63ab3cea3b467398b75" | 3600 |
| TXT | "apple-domain-verification=pMiEorRSYsn0tVZk" | 3600 |
| TXT | "v=spf1 a:outmail.hireserve.nl include:_spf-jb3.minjenv.nl include:_spf.zivver.com include:u1868029.wl030.sendgrid.net include:spf.protection.outlook.com -all" | 3600 |
| TXT | "have-i-been-pwned-verification=f3832dd9480ec54c6c284d48ee903a28" | 3600 |
| TXT | "d0aoelnej7rab22nmv0gnmjvll" | 3600 |
| TXT | "psvaymju9mxNk37U9JW7bdIuvbgcZPsoILJr5vyE1b8=" | 3600 |
| TXT | "48c15042b0b3cab5f7c952cda311fefd11546e10ccd1aa92b33a3629d4d0cdb9" | 3600 |
Checks
-
!#32Very low TTLs
-
✓ No CNAME at the apex #33
-
✓ No wildcard #34
-
i#35No CAA records