An autonomous crawler progressively maps the .be web around the clock. It follows public links between Belgian sites and observes DNS, HTTPS, certificates and protective headers at a low rate. These measurements are combined with public sources without intrusion.
Collection active · Updated
Autonomous register · passive collection
A = protections well configured · F = essential protections missing. An external grade is not an audit.
Public sector and leading Belgian domains, examined in detail: known vulnerabilities (CVE), actively exploited flaws (CISA KEV catalogue), end-of-life software and exposed sensitive services. These indicators do not describe the whole .be web.
Share of domains with at least one observable weakness. Per-site details remain private.
These three categories are mutually exclusive and total the observed scope. A material signal means critical, high or medium severity here.
The barometer starts with the public sector and major domains, then expands.
These resources in the AegisScope sample score at least 80/100 on the technical risk index. Official sites can have vulnerabilities and a risk of personal data exposure; official status does not reduce the score.
The score measures estimated exposure, not a leak probability or AI confidence. Passive infrastructure associations, especially on shared hosting, need owner verification. A high score establishes neither phishing nor a leak that has already occurred. Assessments are less than 14 days old.
The dashboard refreshes automatically. Public files contain the discovered-resource registry, external-hygiene grades, aggregate indicators and alerts that protect visitors.
The crawler starts from known Belgian domains, follows only public links to other .be resources, respects robots.txt and progressively reassesses each resource.
The grade describes only externally visible hygiene (HTTPS, certificate and protective headers). It is neither a penetration test nor evidence of compromise.
Progressive coverage: an observed .be web graph, not an exhaustive registry. Without the complete zone file, no independent crawler can guarantee 100% of .be domains.
Two public formats from the same snapshot: a readable report and reusable data.
The internal model assigns each observation a grade from A to F to follow the overall trend. Only the number of domains in each class is published; no organisation is identifiable.
A indicates the best observable posture and F the most exposed. The grade uses passive public sources, reflects a dated snapshot and may be influenced by shared hosting. It certifies neither security nor compromise.
This AegisScope distribution remains aggregate: per-organisation vulnerability findings are not displayed. The autonomous registry below publishes only public domains and their external hygiene. Analyse my domain.
Each row is a .be resource encountered by the crawler. The grade covers only publicly visible hygiene; no vulnerability detail is exposed.
Resources 1–25 of 771483. The exports contain the first 5,000 resources in alphabetical order.
Domains reported by a public abuse feed within the last 48 hours, with source and date. Name similarity or an MX record is insufficient: those candidates remain internal. Reports may be incorrect or concern a compromised legitimate site.
A domain’s detailed report — exposed services, vulnerable components and remediation — is available only to its verified owner. Analyse your domain or report a weakness through our responsible-disclosure process.
The crawler retrieves public pages, DNS, TLS certificates and HTTP headers at a low rate while respecting robots.txt. No extra ports, authentication or exploitation attempts are used. Deeper checks remain limited to verified owners.
To request removal of a domain from the public display, contact us.
We use mechanisms required for the operation and security of the site. With your consent, we may also measure site use and fund our content through advertising. Refusing is as easy as accepting.