sunjets.be

Delegation · The nameservers at the parent and in the zone should be the same. Only at the parent: udns2.cscdns.net; only in the zone: a1-174.akam.net, a20-67.akam.net, a3-64.akam.net, a4-65.akam.net, a5-66.akam.net, a8-67.akam.net, udns2.cscdns.uk. a1-174.akam.net, a20-67.akam.net, a3-64.akam.net, a4-65.akam.net, a5-66.akam.net, a8-67.akam.net report NS a1-174.akam.net a20-67.akam.net a3-64.akam.net a4-65.akam.net a5-66.akam.net a8-67.akam.net. udns1.cscdns.net, udns2.cscdns.net, udns2.cscdns.uk report NS a1-174.akam.net a20-67.akam.net a3-64.akam.net a4-65.akam.net a5-66.akam.net a8-67.akam.net udns1.cscdns.net udns2.cscdns.uk.

Nameservers · These nameservers report their software version via version.bind/version.server, which helps attackers find known vulnerabilities: a1-174.akam.net: "41824.6"; a1-174.akam.net: "41824.5"; a20-67.akam.net: "48878.26"; a20-67.akam.net: "48878.27"; a3-64.akam.net: "41824.4"; a3-64.akam.net: "41824.5"; a4-65.akam.net: "48878.27"; a4-65.akam.net: "48878.30"; a5-66.akam.net: "41824.9"; a5-66.akam.net: "41824.7"; a8-67.akam.net: "48878.32"; a8-67.akam.net: "48878.26". Hide or replace the version string.

SOA · The nameservers serve different versions of the zone: 2021082001 on a1-174.akam.net (193.108.91.174), a1-174.akam.net (2600:1401:2::ae), a20-67.akam.net (95.100.175.67), a20-67.akam.net (2a02:26f0:67::43), a3-64.akam.net (96.7.49.64), a3-64.akam.net (2600:1408:1c::40), a4-65.akam.net (72.246.46.65), a4-65.akam.net (2600:1480:9000::41), a5-66.akam.net (95.100.168.66), a5-66.akam.net (2600:1480:b000::42), a8-67.akam.net (2.16.40.67), a8-67.akam.net (2600:1403:a::43); 2021112516 on udns1.cscdns.net (204.74.66.1), udns1.cscdns.net (2001:502:f3ff::201), udns2.cscdns.net (204.74.111.1), udns2.cscdns.net (2001:502:4612::201), udns2.cscdns.uk (204.74.111.1), udns2.cscdns.uk (2001:502:4612::201). This is normal for a few minutes after a change; if it lasts, zone transfers to the secondaries are failing.

SOA · refresh 5m is outside 20m–1d; retry 1h should be shorter than refresh 5m. Current values: refresh 5m, retry 1h, expire 7d, negative TTL 5m.

DNSSEC · The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.

DNSSEC · DNSSEC is not enabled for this domain. Consider enabling DNSSEC to protect against DNS spoofing attacks.

MX · No MX records found. If this domain is used for email, add MX records to specify mail servers. If it never receives mail, publish a null MX ("MX 0 .").