Domain report: active24.de

Registration

info

.de country-code

i

.de is a country-code TLD (ccTLD)

Country-code TLD: governed by its local registry under national policy, not by an ICANN contract. Registrar accreditation, dispute resolution and RDAP/WHOIS rules are set by the registry.

#1
✓ TLD delegated and signed #2

.de is delegated in the root zone and DNSSEC-signed.
i

Registration data not available

No registration data via RDAP: the registry of .de offers no RDAP service. Many ccTLD registries don't offer RDAP; check the registry's WHOIS instead.

#3

pass

alfa.ns.active24.cz, beta.ns.active24.cz, gama.ns.active24.sk

Parent zone: de
Delegation from: a.nic.de (194.0.0.53)
NS at the parent: alfa.ns.active24.cz, beta.ns.active24.cz, gama.ns.active24.sk
NS in the zone: alfa.ns.active24.cz, beta.ns.active24.cz, gama.ns.active24.sk

Nameserver	Addresses	Network (AS)	Glue
alfa.ns.active24.cz	81.95.96.2 2a02:4a8:ac24:100::96:2	AS25234 ACTIVE24-AS - ACTIVE 24, s.r.o., CZ AS25234 ACTIVE24-AS - ACTIVE 24, s.r.o., CZ	-
beta.ns.active24.cz	185.111.90.94 2a00:4b40:1000:590:185:111:90:94	AS51013 WEBSUPPORT-SRO-SK-AS - WebSupport s.r.o., SK AS51013 WEBSUPPORT-SRO-SK-AS - WebSupport s.r.o., SK	-
gama.ns.active24.sk	185.71.158.30 2a00:1968:0:1002:185:71:158:30	AS41528 LOOPIA3 - Loopia AB, SE AS41528 LOOPIA3 - Loopia AB, SE	-

✓ 3 nameservers #6

Delegated to alfa.ns.active24.cz, beta.ns.active24.cz, gama.ns.active24.sk.
✓ Parent and zone agree #7

The parent delegation and the zone's NS records list the same nameservers.
✓ No glue needed #8

All nameservers are outside the zone, so no glue records are needed.
✓ All names resolve #9

Every nameserver name has an address and is not an alias.
✓ Nameservers in different networks #10

The nameservers are spread over 3 IPv4 /24s and 3 IPv6 /48s.
✓ 3 autonomous systems #11

The nameservers are spread over: AS25234 (ACTIVE24-AS - ACTIVE 24, s.r.o., CZ): 2 addresses; AS41528 (LOOPIA3 - Loopia AB, SE): 2 addresses; AS51013 (WEBSUPPORT-SRO-SK-AS - WebSupport s.r.o., SK): 2 addresses.
✓ Nameserver names under 2 TLDs #12

Nameserver names use the TLDs .cz, .sk.
✓ All reachable over IPv6 #13

Every nameserver has an IPv6 address.

warn

6 of 6 addresses answer authoritatively

Nameserver	Answer	Recursion	TCP / EDNS	AXFR	Version
alfa.ns.active24.cz 81.95.96.2	NOERROR, 8 ms, authoritative	no	yes / yes	refused	-
alfa.ns.active24.cz 2a02:4a8:ac24:100::96:2	NOERROR, 8 ms, authoritative	no	yes / yes	refused	-
beta.ns.active24.cz 185.111.90.94	NOERROR, 14 ms, authoritative	no	yes / yes	refused	Knot DNS 3.4.6
beta.ns.active24.cz 2a00:4b40:1000:590:185:111:90:94	NOERROR, 14 ms, authoritative	no	yes / yes	refused	Knot DNS 3.4.6
gama.ns.active24.sk 185.71.158.30	NOERROR, 29 ms, authoritative	no	yes / yes	refused	Knot DNS 3.4.6
gama.ns.active24.sk 2a00:1968:0:1002:185:71:158:30	NOERROR, 27 ms, authoritative	no	yes / yes	refused	Knot DNS 3.4.6

✓ All respond #14

All 6 nameserver addresses answered.
✓ All authoritative #15

Every responding nameserver answers authoritatively for the zone.
✓ No recursion #16

The nameservers do not answer recursive queries for other domains.
!

Software version disclosed

These nameservers report their software version via version.bind/version.server, which helps attackers find known vulnerabilities: beta.ns.active24.cz: "Knot DNS 3.4.6"; gama.ns.active24.sk: "Knot DNS 3.4.6". Hide or replace the version string.

#17
✓ Zone transfers refused #18

No nameserver allows a zone transfer to the public.
✓ TCP supported #19

All nameservers answer over TCP.
✓ EDNS supported #20

All nameservers support EDNS(0).
✓ Public addresses #21

All nameserver addresses are publicly routable.

pass

serial 2023072702 · primary alfa.ns.active24.cz

✓ Serial 2023072702 everywhere #22

All nameservers serve the same version of the zone.
✓ Timers within recommendations #23

SOA refresh 3h, retry 30m, expire 14d, negative TTL 1h.
✓ Primary is a public nameserver #24

The primary nameserver alfa.ns.active24.cz is one of the listed nameservers.
✓ Contact hostmaster@active24.cz #25

The SOA RNAME hostmaster.active24.cz means hostmaster@active24.cz.
✓ Date-based serial #26

The serial 2023072702 follows the YYYYMMDDnn convention (2023-07-27).

warn

Signed, but no DS at parent

Key tag	Role	Algorithm
33072	ZSK (256)	ECDSAP256SHA256 (13)
22941	KSK (257)	ECDSAP256SHA256 (13)

!

Signed but not delegated securely

The zone is signed but the parent has no DS record, so the signatures are not used. Publish the DS record at your registrar.

#27
✓ Modern algorithms #29

Key algorithms: ECDSAP256SHA256 (13).
✓ Signatures valid until 2026-11-14 #30

The earliest DNSKEY/SOA signature expires at 2026-11-14 16:57 UTC.
✓ NSEC3 as recommended #31

The zone uses NSEC3 with 0 iterations and no salt (RFC 9276).

info

10 records at the apex

Type	Value	TTL
SOA	alfa.ns.active24.cz. hostmaster.active24.cz. 2023072702 10800 1800 1209600 3600	86400
NS	alfa.ns.active24.cz.	86400
NS	beta.ns.active24.cz.	86400
NS	gama.ns.active24.sk.	86400
A	81.95.103.177	300
AAAA	2a02:4a8:ac24:123::103:177	300
MX	10 perimeter.active24.cz.	3600
TXT	"v=spf1 include:active24.cz ?all"	300
TXT	"v=msv1 t=B9C54691-87AD-47A1-A0BF-89FFF5243768"	300
TXT	"google-site-verification=hmOGpyFhwvm2PSOiUvOcY279QdVSnEklvHlvxX_5yHQ"	300