saxion.nl
!Passed with warnings
29 passed
1 warning
0 failed
5 info
Registration
info.nl country-code · SURF B.V.
Found
- TLD
- .nl (country-code)
- ICANN policies apply
- no
- Registrar
- SURF B.V.
- Registered
- 13 April 2000
- Last changed
- 1 October 2026
- Status
- active
- Registry nameservers
- ns1.saxion.nl, ns1.surfnet.nl, ns1.zurich.surf.net, ns2.saxion.nl, ns2.surfnet.nl, ns3.surfnet.nl
- RDAP server
- https://rdap.sidn.nl/
Checks
-
i#1.nl is a country-code TLD (ccTLD)
-
✓ TLD delegated and signed #2
-
i#3Expiry date not published
-
i#4No transfer lock
-
✓ Registry and delegation match #5
Delegation
infons1.saxion.nl, ns1.surfnet.nl, ns1.zurich.surf.net, ns2.saxion.nl, ns2.surfnet.nl, ns3.surfnet.nl
Found
- Parent zone
- nl
- Delegation from
- ns1.dns.nl (194.0.28.53)
- NS at the parent
- ns1.saxion.nl, ns1.surfnet.nl, ns1.zurich.surf.net, ns2.saxion.nl, ns2.surfnet.nl, ns3.surfnet.nl
- NS in the zone
- ns1.saxion.nl, ns1.surfnet.nl, ns1.zurich.surf.net, ns2.saxion.nl, ns2.surfnet.nl, ns3.surfnet.nl
| Nameserver | Addresses | Network (AS) | Glue |
|---|---|---|---|
| ns1.saxion.nl | 145.76.2.75 | AS1103 SURFNET-NL - SURF B.V., NL | 145.76.2.75 |
| ns1.surfnet.nl | 192.87.106.101 2001:610:1:800a:192:87:106:101 | AS1103 SURFNET-NL - SURF B.V., NL AS1103 SURFNET-NL - SURF B.V., NL | 192.87.106.101 2001:610:1:800a:192:87:106:101 |
| ns1.zurich.surf.net | 195.176.255.9 2001:620:0:9::1103 | AS559 Switch - SWITCH, CH AS559 Switch - SWITCH, CH | - |
| ns2.saxion.nl | 145.76.2.85 | AS1103 SURFNET-NL - SURF B.V., NL | 145.76.2.85 |
| ns2.surfnet.nl | 192.87.36.2 2001:610:3:200a:192:87:36:2 | AS1103 SURFNET-NL - SURF B.V., NL AS1103 SURFNET-NL - SURF B.V., NL | 192.87.36.2 2001:610:3:200a:192:87:36:2 |
| ns3.surfnet.nl | 195.169.124.71 2001:610:0:800c:195:169:124:71 | AS1103 SURFNET-NL - SURF B.V., NL AS1103 SURFNET-NL - SURF B.V., NL | 195.169.124.71 2001:610:0:800c:195:169:124:71 |
Checks
-
✓ 6 nameservers #6
-
✓ Parent and zone agree #7
-
✓ Glue present and correct #8
-
✓ All names resolve #9
-
✓ Nameservers in different networks #10
-
✓ 2 autonomous systems #11
-
✓ Nameserver names under 2 TLDs #12
-
i#13Partly IPv6
Nameservers
info10 of 10 addresses answer authoritatively
Found
| Nameserver | Answer | Recursion | TCP / EDNS | AXFR | Version |
|---|---|---|---|---|---|
| ns1.saxion.nl 145.76.2.75 | NOERROR, 12 ms, authoritative | no | yes / yes | refused | - |
| ns1.surfnet.nl 192.87.106.101 | NOERROR, 10 ms, authoritative | no | yes / yes | refused | This is a SURFnet nameserver - dns-beheer@surfnet.nl |
| ns1.surfnet.nl 2001:610:1:800a:192:87:106:101 | NOERROR, 10 ms, authoritative | no | yes / yes | refused | This is a SURFnet nameserver - dns-beheer@surfnet.nl |
| ns1.zurich.surf.net 195.176.255.9 | NOERROR, 9 ms, authoritative | no | yes / yes | refused | This is a SURFnet nameserver - dns-beheer@surf.nl |
| ns1.zurich.surf.net 2001:620:0:9::1103 | NOERROR, 9 ms, authoritative | no | yes / yes | refused | This is a SURFnet nameserver - dns-beheer@surf.nl |
| ns2.saxion.nl 145.76.2.85 | NOERROR, 13 ms, authoritative | no | yes / yes | refused | - |
| ns2.surfnet.nl 192.87.36.2 | NOERROR, 13 ms, authoritative | no | yes / yes | refused | This is a SURFnet nameserver - dns-beheer@surfnet.nl |
| ns2.surfnet.nl 2001:610:3:200a:192:87:36:2 | NOERROR, 12 ms, authoritative | no | yes / yes | refused | This is a SURFnet nameserver - dns-beheer@surfnet.nl |
| ns3.surfnet.nl 195.169.124.71 | NOERROR, 10 ms, authoritative | no | yes / yes | refused | This is a SURFnet nameserver - dns-beheer@surfnet.nl |
| ns3.surfnet.nl 2001:610:0:800c:195:169:124:71 | NOERROR, 10 ms, authoritative | no | yes / yes | refused | This is a SURFnet nameserver - dns-beheer@surfnet.nl |
Checks
-
✓ All respond #14
-
✓ All authoritative #15
-
✓ No recursion #16
-
i#17Identifying string disclosed
-
✓ Zone transfers refused #18
-
✓ TCP supported #19
-
✓ EDNS supported #20
-
✓ Public addresses #21
SOA
passserial 2024074577 · primary ns1.surfnet.nl
Found
- Primary (MNAME)
- ns1.surfnet.nl
- Contact (RNAME)
- hostmaster.saxion.nl
- Serial
- 2024074577
- Refresh / retry
- 28800 s / 1800 s
- Expire
- 691200 s
- Negative TTL
- 300 s
Serial per nameserver
| Nameserver | Serial |
|---|---|
| ns1.saxion.nl (145.76.2.75) | 2024074577 |
| ns1.surfnet.nl (192.87.106.101) | 2024074577 |
| ns1.surfnet.nl (2001:610:1:800a:192:87:106:101) | 2024074577 |
| ns1.zurich.surf.net (195.176.255.9) | 2024074577 |
| ns1.zurich.surf.net (2001:620:0:9::1103) | 2024074577 |
| ns2.saxion.nl (145.76.2.85) | 2024074577 |
| ns2.surfnet.nl (192.87.36.2) | 2024074577 |
| ns2.surfnet.nl (2001:610:3:200a:192:87:36:2) | 2024074577 |
| ns3.surfnet.nl (195.169.124.71) | 2024074577 |
| ns3.surfnet.nl (2001:610:0:800c:195:169:124:71) | 2024074577 |
Checks
-
✓ Serial 2024074577 everywhere #22
-
✓ Timers within recommendations #23
-
✓ Primary is a public nameserver #24
-
✓ Contact hostmaster@saxion.nl #25
-
✓ Timestamp serial #26
DNSSEC
warnSigned, DS published at parent
Found
- Validated by resolver
- yes
- Denial of existence
- NSEC3
- NSEC3
- 10 iterations, 9-byte salt
- Signatures valid until
- 25 October 2026
DS at the parent
| Key tag | Algorithm | Digest | Matches a key |
|---|---|---|---|
| 42566 | ECDSAP256SHA256 (13) | SHA256 91D32934E9CC82A3… | yes |
DNSKEY in the zone
| Key tag | Role | Algorithm |
|---|---|---|
| 42566 | KSK (257) | ECDSAP256SHA256 (13) |
| 34784 | ZSK (256) | ECDSAP256SHA256 (13) |
| 31859 | ZSK (256) | ECDSAP256SHA256 (13) |
Checks
-
✓ Signed and validated #27
-
✓ DS matches a key #28
-
✓ Modern algorithms #29
-
✓ Short-lived signatures (online signing) #30
-
!#31NSEC3 with extra iterations or salt
Records
pass20 records at the apex
Found
- Read from
- 145.76.2.75:53
| Type | Value | TTL |
|---|---|---|
| SOA | ns1.surfnet.nl. hostmaster.saxion.nl. 2024074577 28800 1800 691200 300 | 3600 |
| NS | ns1.surfnet.nl. | 3600 |
| NS | ns1.zurich.surf.net. | 3600 |
| NS | ns3.surfnet.nl. | 3600 |
| NS | ns2.surfnet.nl. | 3600 |
| NS | ns1.saxion.nl. | 3600 |
| NS | ns2.saxion.nl. | 3600 |
| A | 145.76.16.253 | 3600 |
| MX | 10 saxion-nl.r-v1.mx.microsoft. | 3600 |
| TXT | "google-site-verification=aT9ia5mGiBSXmId-e8RElDseJqjOrEJdYV7fSDU96xM" | 300 |
| TXT | "apple-domain-verification=DqCdDbIDkVKtFBrJ" | 300 |
| TXT | "HARICA-5hsKXdjPg6Q5v8scCXn" | 300 |
| TXT | "google-site-verification=qcJ-sfVw8F9XAkXTSs-TpLnsBGXlkHnQs8qL7EhgIVA" | 300 |
| TXT | "v=spf1 ip4:145.76.6.219 ip4:145.76.6.220 ip4:145.76.2.74 ip4:145.76.2.84 include:spf.protection.outlook.com include:_spf.qualtrics.com exists:_l.%{l}._o.%{o}._i.%{i}._d.%{d}._h.%{h}.spftest.saxion.nl ~all" | 300 |
| TXT | "atlassian-domain-verification=Kb3g4e306tD-ZLAYDzIcEPRxNqhloNuqGLWyI9L8noQVdwmwjmmLHwZrGbPHelzV" | 300 |
| TXT | "facebook-domain-verification=o4mh9z1s3zkviio9hxayt5agr1wgmh" | 300 |
| CAA | 0 iodef "mailto:hostmaster@saxion.nl" | 3600 |
| CAA | 0 issue "amazon.com" | 3600 |
| CAA | 0 issuewild "harica.gr" | 3600 |
| CAA | 0 issue "harica.gr" | 3600 |
Checks
-
✓ TTLs within range #32
-
✓ No CNAME at the apex #33
-
✓ No wildcard #34
-
✓ CAA restricts issuance #35