unibet.be

Checked 22 October 2026, 07:20 UTC · via 8.8.8.8
!Passed with warnings
24 passed 2 warnings 0 failed 3 info

Registration

info

.be country-code

Found

TLD
.be (country-code)
ICANN policies apply
no

Checks

  • i
    .be is a country-code TLD (ccTLD)
    Country-code TLD: governed by its local registry under national policy, not by an ICANN contract. Registrar accreditation, dispute resolution and RDAP/WHOIS rules are set by the registry.
    #1
  • ✓ TLD delegated and signed #2
    .be is delegated in the root zone and DNSSEC-signed.
  • i
    Registration data not available
    No registration data via RDAP: the registry of .be offers no RDAP service. Many ccTLD registries don't offer RDAP; check the registry's WHOIS instead.
    #3

Delegation

info

dns-ext1.northdev.net, dns-ext2.northdev.net, emea.excedodns.eu, global.excedodns.com, sto.excedodns.se, world.excedodns.org

Found

Parent zone
be
Delegation from
a.nsset.be (194.0.6.1)
NS at the parent
dns-ext1.northdev.net, dns-ext2.northdev.net, emea.excedodns.eu, global.excedodns.com, sto.excedodns.se, world.excedodns.org
NS in the zone
dns-ext1.northdev.net, dns-ext2.northdev.net, emea.excedodns.eu, global.excedodns.com, sto.excedodns.se, world.excedodns.org
NameserverAddressesNetwork (AS)Glue
dns-ext1.northdev.net85.184.98.1AS47171 UNIBET-AS - Kindred IP Limited, MT-
dns-ext2.northdev.net85.184.99.1AS47171 UNIBET-AS - Kindred IP Limited, MT-
emea.excedodns.eu194.58.192.48 2a01:3f1:48::53AS8674 NETNOD-IX - Netnod AB, SE AS8674 NETNOD-IX - Netnod AB, SE-
global.excedodns.com194.58.198.48 2a01:3f1:3048::53AS56908 NETNOD-NDS - Netnod AB, SE AS56908 NETNOD-NDS - Netnod AB, SE-
sto.excedodns.se185.42.137.101 2a01:3f0:400::48AS8674 NETNOD-IX - Netnod AB, SE AS8674 NETNOD-IX - Netnod AB, SE-
world.excedodns.org162.219.54.130 2620:10a:80eb::42AS55195 CIRA-CLOUD1 - CIRA Canadian Internet Registration Authority Autorit Canadienne pour les enregistrements Internet, CA AS55195 CIRA-CLOUD1 - CIRA Canadian Internet Registration Authority Autorit Canadienne pour les enregistrements Internet, CA-

Checks

  • ✓ 6 nameservers #6
    Delegated to dns-ext1.northdev.net, dns-ext2.northdev.net, emea.excedodns.eu, global.excedodns.com, sto.excedodns.se, world.excedodns.org.
  • ✓ Parent and zone agree #7
    The parent delegation and the zone's NS records list the same nameservers.
  • ✓ No glue needed #8
    All nameservers are outside the zone, so no glue records are needed.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 6 IPv4 /24s and 4 IPv6 /48s.
  • ✓ 4 autonomous systems #11
    The nameservers are spread over: AS47171 (UNIBET-AS - Kindred IP Limited, MT): 2 addresses; AS55195 (CIRA-CLOUD1 - CIRA Canadian Internet Registration Authority Autorit Canadienne pour les enregistrements Internet, CA): 2 addresses; AS56908 (NETNOD-NDS - Netnod AB, SE): 2 addresses; AS8674 (NETNOD-IX - Netnod AB, SE): 4 addresses.
  • ✓ Nameserver names under 5 TLDs #12
    Nameserver names use the TLDs .com, .eu, .net, .org, .se.
  • i
    Partly IPv6
    These nameservers have no IPv6 address: dns-ext1.northdev.net, dns-ext2.northdev.net.
    #13

Nameservers

warn

10 of 10 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
dns-ext1.northdev.net 85.184.98.1NOERROR, 14 ms, authoritativenoyes / yesrefused9.16.50-RH
dns-ext2.northdev.net 85.184.99.1NOERROR, 15 ms, authoritativenoyes / yesrefused9.16.50-RH
emea.excedodns.eu 194.58.192.48NOERROR, 25 ms, authoritativenoyes / yesrefused-
emea.excedodns.eu 2a01:3f1:48::53NOERROR, 25 ms, authoritativenoyes / yesrefused-
global.excedodns.com 194.58.198.48NOERROR, 9 ms, authoritativenoyes / yesrefused-
global.excedodns.com 2a01:3f1:3048::53NOERROR, 10 ms, authoritativenoyes / yesrefused-
sto.excedodns.se 185.42.137.101NOERROR, 27 ms, authoritativenoyes / yesrefused-
sto.excedodns.se 2a01:3f0:400::48NOERROR, 25 ms, authoritativenoyes / yesrefused-
world.excedodns.org 162.219.54.130NOERROR, 13 ms, authoritativenoyes / yesrefusedCDG D-ZONE nameserver
world.excedodns.org 2620:10a:80eb::42NOERROR, 13 ms, authoritativenoyes / yesrefusedCIRA Server

Checks

  • ✓ All respond #14
    All 10 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • !
    Software version disclosed
    These nameservers report their software version via version.bind/version.server, which helps attackers find known vulnerabilities: dns-ext1.northdev.net: "9.16.50-RH"; dns-ext2.northdev.net: "9.16.50-RH". Hide or replace the version string.
    #17
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

pass

serial 2026092501 · primary dns-ext1.northdev.net

Found

Primary (MNAME)
dns-ext1.northdev.net
Contact (RNAME)
domain\.names.unibet.com
Serial
2026092501
Refresh / retry
14400 s / 3600 s
Expire
1209600 s
Negative TTL
7200 s

Serial per nameserver

NameserverSerial
dns-ext1.northdev.net (85.184.98.1)2026092501
dns-ext2.northdev.net (85.184.99.1)2026092501
emea.excedodns.eu (194.58.192.48)2026092501
emea.excedodns.eu (2a01:3f1:48::53)2026092501
global.excedodns.com (194.58.198.48)2026092501
global.excedodns.com (2a01:3f1:3048::53)2026092501
sto.excedodns.se (185.42.137.101)2026092501
sto.excedodns.se (2a01:3f0:400::48)2026092501
world.excedodns.org (162.219.54.130)2026092501
world.excedodns.org (2620:10a:80eb::42)2026092501

Checks

  • ✓ Serial 2026092501 everywhere #22
    All nameservers serve the same version of the zone.
  • ✓ Timers within recommendations #23
    SOA refresh 4h, retry 1h, expire 14d, negative TTL 2h.
  • ✓ Primary is a public nameserver #24
    The primary nameserver dns-ext1.northdev.net is one of the listed nameservers.
  • ✓ Contact domain.names@unibet.com #25
    The SOA RNAME domain\.names.unibet.com means domain.names@unibet.com.
  • ✓ Date-based serial #26
    The serial 2026092501 follows the YYYYMMDDnn convention (2026-09-25).

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

pass

25 records at the apex

Found

Read from
85.184.98.1:53
TypeValueTTL
SOAdns-ext1.northdev.net. domain\.names.unibet.com. 2026092501 14400 3600 1209600 72007200
NSdns-ext1.northdev.net.7200
NSglobal.excedodns.com.7200
NSsto.excedodns.se.7200
NSemea.excedodns.eu.7200
NSworld.excedodns.org.7200
NSdns-ext2.northdev.net.7200
A85.184.96.07200
MX0 UNIBET-be.mail.protection.outlook.com.7200
TXT"0d1cc225-fdd7-49de-8b9a-fff714f84ffd"7200
TXT"427689a1-c2b8-4658-ada9-9e64ad2f4dc9"7200
TXT"v=spf1 mx include:sp.unibet.com include:spf.protection.outlook.com -all"7200
TXT"d738c231-2e90-4d58-a56f-eda6e327f304"7200
TXT"2Sz1gXVakAKzkXPRpa7fXcBsMcXAgVSqYuqLAfBMflchL7AXV4mnLQ23Nj2jfXEC/5096LKPYGgU4pzbq6WlHQ=="7200
TXT"MS=ms73979044"7200
TXT"facebook-domain-verification=nh8124skg5yhtjitqdi7xju076ow3g"7200
TXT"ee95c239-d388-456b-bbd1-e707241ecb2b"7200
TXT"dtm-domain-verification=j4DnXIphtf8Jt41ILx2C1kORztGkS4jeqEhwDzcgvKE"7200
CAA0 issuewild "ssl.com"7200
CAA0 issue "letsencrypt.org"7200
CAA0 issuewild "letsencrypt.org"7200
CAA128 issuewild "trustwave.com"7200
CAA128 issue "trustwave.com"7200
CAA0 issue "ssl.com"7200
CAA0 issue "amazon.com"7200

Checks

  • ✓ TTLs within range #32
    TTLs: A 2h, MX 2h, NS 2h. The NS TTL at the parent is 1d and in the zone 2h; resolvers may use either.
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • ✓ CAA restricts issuance #35
    Certificates may be issued by: ssl.com, letsencrypt.org, trustwave.com, amazon.com.