Measurement estimates from a single vantage point — not a compliance certification. Guidance below is for operators, not an SLA.
DNS
Dual-stack
[4] 4/4/4 [O]
Meaning: Shows how many authoritative name servers exist, and how many IPv6 endpoints are configured, responsive, and operational.
IPv4 4/4/4 · IPv6 4/4/4 · location O
| Host | IPv4 | IPv6 | Probes |
|---|
ns0.rijksoverheidnl.com [O] |
185.136.96.82 |
2a06:fb00:1::1:82 |
ipv4 185.136.96.82 ok; ipv6 2a06:fb00:1::1:82 ok; |
ns1.rijksoverheidnl.nl [O] |
178.22.85.27 |
2a00:d00:3:6::130 |
ipv4 178.22.85.27 ok; ipv6 2a00:d00:3:6::130 ok; |
ns2.rijksoverheidnl.eu [O] |
94.228.142.136 |
2a00:d01:3:1::20 |
ipv4 94.228.142.136 ok; ipv6 2a00:d01:3:1::20 ok; |
ns3.rijksoverheidnl.org [O] |
145.100.177.67 |
2001:610:188:203:3:1:0:67 |
ipv4 145.100.177.67 ok; ipv6 2001:610:188:203:3:1:0:67 ok; |
Mail
Dual-stack
[2 MX] v4 smtp 2/2/2 v6 smtp 2/2/2 [O]
Meaning: Shows MX footprint and SMTP health per IP family. Operational means an SMTP banner and EHLO exchange succeeded on port 25.
IPv4 SMTP 2/2/2 · IPv6 2/2/2 · location O
| Host | IPv4 | IPv6 | Probes |
|---|
mail2.ssonet.nl [O] |
147.181.98.131 |
2a04:9a03:1012:1001::1 |
ipv4 147.181.98.131 ok; ipv6 2a04:9a03:1012:1001::1 ok; |
mail.ssonet.nl [O] |
144.43.249.200 |
2a04:9a03:1011:1001::4 |
ipv4 144.43.249.200 ok; ipv6 2a04:9a03:1011:1001::4 ok; |
Web
Dual-stack
[1] 2/2/2 [I]
Meaning: Shows IPv6 web endpoint readiness for the discovered HTTPS host. Operational means family-specific HTTPS requests complete successfully.
IPv4 2/2/2 · IPv6 2/2/2 · location I
| Host | IPv4 | IPv6 | Probes |
|---|
www.rijksdienstcn.com [I] |
23.214.22.139, 23.214.22.146 |
2600:1405:1000:6::17d6:1665, 2600:1405:1000:6::17d6:166d |
ipv4 ok; ipv6 ok; |
DNSSEC
Signed
S/?/? (partial)
Meaning: Shows whether DNSKEY data is observed at the apex (signed), absent (unsigned), or unavailable due to lookup error.
Apex DNSKEY presence only — not full chain validation.
Analyze on DNSViz
DMARC
p=reject
p=reject — published organizational policy. Strongest published policy (SPF/DKIM alignment still not measured here).
Meaning: Published DMARC policy at _dmarc.rijksdienstcn.com (DNS TXT). Shows organizational policy (p=) and subdomain policy (sp=) when set.
Record at _dmarc.rijksdienstcn.com:
v=DMARC1; p=reject; adkim=r; aspf=r; pct=100; fo=1; rf=afrf; ri=86400; ruf=mailto:dmarcFailureRep@ag.ssonet.nl!10m; rua=mailto:DMARCaggrep@ag.ssonet.nl!2m
Policy publication only — SPF/DKIM not measured. Not part of the 0–4 row score.
Check on dmarcian