dpd.de

Checked 21 October 2026, 22:15 UTC · via 8.8.8.8
!Passed with warnings
23 passed 1 warning 0 failed 5 info

Registration

info

.de country-code

Found

TLD
.de (country-code)
ICANN policies apply
no

Checks

  • i
    .de is a country-code TLD (ccTLD)
    Country-code TLD: governed by its local registry under national policy, not by an ICANN contract. Registrar accreditation, dispute resolution and RDAP/WHOIS rules are set by the registry.
    #1
  • ✓ TLD delegated and signed #2
    .de is delegated in the root zone and DNSSEC-signed.
  • i
    Registration data not available
    No registration data via RDAP: the registry of .de offers no RDAP service. Many ccTLD registries don't offer RDAP; check the registry's WHOIS instead.
    #3

Delegation

pass

ns1-any.123ns.eu, ns3-any.123ns.eu, ns4-any.123ns.de

Found

Parent zone
de
Delegation from
a.nic.de (194.0.0.53)
NS at the parent
ns1-any.123ns.eu, ns3-any.123ns.eu, ns4-any.123ns.de
NS in the zone
ns1-any.123ns.eu, ns3-any.123ns.eu, ns4-any.123ns.de
NameserverAddressesNetwork (AS)Glue
ns1-any.123ns.eu195.253.64.5 2a01:5b0:4::5AS8391 KNIPP-AS - Knipp Medien und Kommunikation GmbH, DE AS8561 KNIPPWORLDWIDE - Knipp Medien und Kommunikation GmbH, DE-
ns3-any.123ns.eu192.174.68.116 2001:67c:1bc::116AS1921 RCODEZERO-ANYCAST-SEC1-TLD - ipcom GmbH, AT AS1921 RCODEZERO-ANYCAST-SEC1-TLD - ipcom GmbH, AT-
ns4-any.123ns.de176.97.158.116 2001:67c:10b8::116AS1921 RCODEZERO-ANYCAST-SEC1-TLD - ipcom GmbH, AT AS1921 RCODEZERO-ANYCAST-SEC1-TLD - ipcom GmbH, AT-

Checks

  • ✓ 3 nameservers #6
    Delegated to ns1-any.123ns.eu, ns3-any.123ns.eu, ns4-any.123ns.de.
  • ✓ Parent and zone agree #7
    The parent delegation and the zone's NS records list the same nameservers.
  • ✓ No glue needed #8
    All nameservers are outside the zone, so no glue records are needed.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 3 IPv4 /24s and 3 IPv6 /48s.
  • ✓ 3 autonomous systems #11
    The nameservers are spread over: AS1921 (RCODEZERO-ANYCAST-SEC1-TLD - ipcom GmbH, AT): 4 addresses; AS8391 (KNIPP-AS - Knipp Medien und Kommunikation GmbH, DE): 1 address; AS8561 (KNIPPWORLDWIDE - Knipp Medien und Kommunikation GmbH, DE): 1 address.
  • ✓ Nameserver names under 2 TLDs #12
    Nameserver names use the TLDs .de, .eu.
  • ✓ All reachable over IPv6 #13
    Every nameserver has an IPv6 address.

Nameservers

info

6 of 6 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
ns1-any.123ns.eu 195.253.64.5NOERROR, 20 ms, authoritativenoyes / yesrefused-
ns1-any.123ns.eu 2a01:5b0:4::5NOERROR, 20 ms, authoritativenoyes / yesrefused-
ns3-any.123ns.eu 192.174.68.116NOERROR, 3 ms, authoritativenoyes / yesrefusedRcodeZero DNS
ns3-any.123ns.eu 2001:67c:1bc::116NOERROR, 4 ms, authoritativenoyes / yesrefusedRcodeZero DNS
ns4-any.123ns.de 176.97.158.116NOERROR, 12 ms, authoritativenoyes / yesrefusedreg-wie1
ns4-any.123ns.de 2001:67c:10b8::116NOERROR, 13 ms, authoritativenoyes / yesrefusedreg-wie1

Checks

  • ✓ All respond #14
    All 6 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • i
    Identifying string disclosed
    These nameservers answer version queries with a string that is not a version number: ns3-any.123ns.eu: "RcodeZero DNS"; ns4-any.123ns.de: "reg-wie1".
    #17
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

pass

serial 2026102003 · primary ns1-any.123ns.eu

Found

Primary (MNAME)
ns1-any.123ns.eu
Contact (RNAME)
hostmaster.123ns.eu
Serial
2026102003
Refresh / retry
43200 s / 14400 s
Expire
3600000 s
Negative TTL
21400 s

Serial per nameserver

NameserverSerial
ns1-any.123ns.eu (195.253.64.5)2026102003
ns1-any.123ns.eu (2a01:5b0:4::5)2026102003
ns3-any.123ns.eu (192.174.68.116)2026102003
ns3-any.123ns.eu (2001:67c:1bc::116)2026102003
ns4-any.123ns.de (176.97.158.116)2026102003
ns4-any.123ns.de (2001:67c:10b8::116)2026102003

Checks

  • ✓ Serial 2026102003 everywhere #22
    All nameservers serve the same version of the zone.
  • ✓ Timers within recommendations #23
    SOA refresh 12h, retry 4h, expire 1000h, negative TTL 5h56m40s.
  • ✓ Primary is a public nameserver #24
    The primary nameserver ns1-any.123ns.eu is one of the listed nameservers.
  • ✓ Contact hostmaster@123ns.eu #25
    The SOA RNAME hostmaster.123ns.eu means hostmaster@123ns.eu.
  • ✓ Date-based serial #26
    The serial 2026102003 follows the YYYYMMDDnn convention (2026-10-20).

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

info

69 records at the apex

Found

Read from
195.253.64.5:53
TypeValueTTL
SOAns1-any.123ns.eu. hostmaster.123ns.eu. 2026102003 43200 14400 3600000 2140086400
NSns1-any.123ns.eu.86400
NSns3-any.123ns.eu.86400
NSns4-any.123ns.de.86400
A149.232.252.78600
MX5 dpd-de.mail.protection.outlook.com.3600
TXT"202201042034130fq400ngrs7qjpbgr5qjyc25lhvhqd45v3vbr7r4opzr2u1i6r"86400
TXT"m6nmsjqkv35hks3nt758b81y47mmhnz0"86400
TXT"qj24n04t3flx2xmq0sjnkb505jg7xxz2"86400
TXT"202101190239421n67cldwj8n9oqp763wbdqf2xaqha6u5ce43cfmv6v8rdpzflw"86400
TXT"bbzqkcnb8stscw82h1d24c2xmg2lk5ct"86400
TXT"202202090323494t8cyiugqivstc0u5ojn2mpusojlekagn7zmrbr8ga2994zfye"86400
TXT"xdjlszdhhnqpg59qfbx7mbvmv5w4fvvx"86400
TXT"vbggrw5k0jvsd6d0sbb894dfkyyy8wv9"86400
TXT"google-site-verification=dBktw9sPV3XYhFTt0QjSsGVpTeaimvrYDBzrkO1TyzY"86400
TXT"2020092319490209sl0h6m2l6fbe1b0xjb5r0xgyeh9euivqt1n7xszqjl9k07ya"86400
TXT"202201102253193yrv6bkohhqtw4lz837z5wrox1516smes92vtrgxrea5awiuql"86400
TXT"2022011022551615jv11gvg6j7s1maaa0n48eetprsoym1t52k6gar2jzzes4aa8"86400
TXT"202203012344465xzpkga6dr16c8oqtjpjz288hba8thmetmeeyfs0tryixax8dd"86400
TXT"fcbftc8z3jmmdm57cqrgxm8jwrd9p81h"86400
TXT"tq5k9sm7cb5tr0569wwx65gy65hs950t"86400
TXT"202012272155434okytik9jqv023le3z716xtr2f2gsu6ywp47x4tp2umsfwe3va"86400
TXT"_hkm2tbxsp3vzaro31pl1pqzkosz50y0"86400
TXT"202101182100233omhqrnd95y0740eltypoo5z2wtbsdss96a401avt6o1cqtwwg"86400
TXT"l510yp4rskrw1ws53zn6fwy53fxj18gg"86400
TXT"202206221848520r2mowztnn4ydu1a1n17919yee6zqs6dsilotx7iptclgvxl5r"86400
TXT"atlassian-domain-verification=nomdM73Xnf6PA42O6vXW25qsMNjhdIaoQ60rjw2qE3v1/wwykJS2DfgipvT7DSZN"86400
TXT"samsung-domain-verification=584ab6c6-b44c-4e64-adb4-3b5a7440fae0"86400
TXT"202101130254224spq54rbb49ugifspoljhlmxdrz175zhi4avftrmrflpks4f8f"86400
TXT"202101190240224aovvbfcvlehm6yyreekjvaa8somltxzrz2w5zgnmgjys19dg5"86400
TXT"miro-verification=ba930bb18bfc072852dd51c77299baca43e53aff"86400
TXT"202101190238251dco7gj67dhood6nh2i7e0rz3qyaux02mw93e4ecy2c49oijia"86400
TXT"2022042601273001h4ia7w7dvfabjkluzfh36yu7e1ir6kg6rpe1nbjaq6h7m1kb"86400
TXT"202012170334223pawinui51j4hl2pww9hw31yjw11m9ni5fwdm17c1ryqj0qqmt"86400
TXT"g4sgdq26sbpq16vz2ky0zvwb11dr8kwj"86400
TXT"p5r5h7n04jl46b59lv7nwm1k9ll4ypj8"86400
TXT"2021030117344229huc5vfsgbi6swaq33th9oc714vkwtadt23k1ed9brxkhgoyo"86400
TXT"h88y4b35vq3z45dqwxp5w52d5qh05xc5"86400
TXT"2022042601313033ml2yl92883fn0ju8gchs21n5e4i0f5d45osxnae56kdxa3xu"86400
TXT"atlassian-sending-domain-verification=c8083cdb-c1c9-4770-907b-2b8b592c6507"86400
TXT"jgv9yt8zksr1z7nddg1d194m2kdwkzk1"86400
TXT"20210210005342318urioim7nh8y5pnf91hmpzedvijj4j8dxewfamva9k43v9py"86400
TXT"202010201935234b43z9z3r5psyixqtkbw9hmqnffwys1038w95q9k1v2134ajam"86400
TXT"202204260155203b7whsh3y2r8zywic7woi0a7urnapyw98tng4ua0zfru518nle"86400
TXT"zpqsjz9g1w9r95twmpd4vnxl1rs26t51"86400
TXT"v=spf1 ip4:46.140.138.203 ip4:185.110.196.10 ip4:46.140.138.212 ip4:185.110.196.20 ip4:94.125.28.48/29 ip4:195.39.10.88/29 ip4:23.21.109.197 ip4:23.21.109.212 ip4:147.160.167.0/26 include:spf.protection.outlook.com include:inxserver.com include:spf.noris." "net include:_spf.itandtel.at include:_spf.salesforce.com include:dpd.qualitus.net include:spf.mailjet.com include:_spf_send.aconso.cloud -all"86400
TXT"k4dd3p8nsmg5bb64t6fccffzrnzjd5r5"86400
TXT"20210309000323529etfxxpysl8fiij1qa6zqnbq8tiqk7hiecyi69ow7qu08b1h"86400
TXT"l6x099h93wvkl06m5h0pm0fv49pt1232"86400
TXT"\239\187\191pwg7pvwlbsny4jx4gh33tcf0xbmpnb4z"86400
TXT"2022040319204501p7cbbuv6wq6zk2yclhuseukysq5qrfmojw9rmpqak0ex9vtf"86400
TXT"n04mmf5gnbzpxjr1brfhgdh67nhmk1zs"86400
TXT"t3chzlzwx7zlvk0kpn74ssnc5kvxvlr1"86400
TXT"202010080150000nrbu9wy46vpu9xgsqducuvrmnt3ig6oksdm2q7puq06v3saxt"86400
TXT"yzwgj1q4y4w9xx3fs7qsxntkskq218g5"86400
TXT"2020072719460260jx46xa7gat8eb6ce2mqivt0qy25j7qjil48aerg7knjz3ebr"86400
TXT"202206212018043q8anl10fb994f3ekmbdukmgwo0i3vy32lbwvfrqi4hbreb42c"86400
TXT"lrbhy4y2lgdv08xbjm8zv5w8gk5nvtp1"86400
TXT"202103020132040fhm1eviwf3gfh21cys8pvfl12lj1gqly0shu2bj4hvpwmfbf9"86400
TXT"teamviewer-sso-verification=975aa87ec34445aebdf7d179170be5d9"86400
TXT"202103020133263hecy2afrbf1q9k0ppi6hcedlwq4frod4k90yq99wr91rx2nu6"86400
TXT"h2c63cq3v9h7tx667tr8xtkj25vmkcw1"86400
TXT"asv=b7bf0298946364e657a04954d4b2894d"86400
TXT"n5w7s0vc9m47fft5fmg862d8dr6th4h9"86400
TXT"cwgtg3gzxcyvp1dh53bj0fs9l4h3v27d"86400
TXT"202207150049280iva6s323igdevn84inao6qjt9d4uaosuu74x3cm2crgu14dpt"86400
TXT"_fp1dutab4tacfszsdt2y8zze6ipgcgf"86400
TXT"2021011303010264mkltlj2z6a6rhb6qaxcckgvzh9fzvxhu5aackcl7eznb0kca"86400
TXT"apple-domain-verification=To2t0YnIov2B74NV"86400

Checks

  • ✓ TTLs within range #32
    TTLs: A 10m, MX 1h, NS 1d.
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • i
    Wildcard record
    A random name under the zone resolves, so there is a wildcard (*) record. Typos and non-existent hosts resolve too, which can confuse mail and certificate checks.
    #34
  • i
    No CAA records
    Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.
    #35