eon.de

Checked 21 October 2026, 22:18 UTC · via 8.8.8.8
!Passed with warnings
21 passed 2 warnings 0 failed 6 info

Registration

info

.de country-code

Found

TLD
.de (country-code)
ICANN policies apply
no

Checks

  • i
    .de is a country-code TLD (ccTLD)
    Country-code TLD: governed by its local registry under national policy, not by an ICANN contract. Registrar accreditation, dispute resolution and RDAP/WHOIS rules are set by the registry.
    #1
  • ✓ TLD delegated and signed #2
    .de is delegated in the root zone and DNSSEC-signed.
  • i
    Registration data not available
    No registration data via RDAP: the registry of .de offers no RDAP service. Many ccTLD registries don't offer RDAP; check the registry's WHOIS instead.
    #3

Delegation

info

elly.ns.cloudflare.com, troy.ns.cloudflare.com

Found

Parent zone
de
Delegation from
a.nic.de (194.0.0.53)
NS at the parent
elly.ns.cloudflare.com, troy.ns.cloudflare.com
NS in the zone
elly.ns.cloudflare.com, troy.ns.cloudflare.com
NameserverAddressesNetwork (AS)Glue
elly.ns.cloudflare.com162.159.38.246 172.64.34.246 108.162.194.246 2606:4700:50::a29f:26f6 2803:f800:50::6ca2:c2f6 2a06:98c1:50::ac40:22f6AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US-
troy.ns.cloudflare.com162.159.44.218 108.162.195.218 172.64.35.218 2606:4700:58::a29f:2cda 2803:f800:50::6ca2:c3da 2a06:98c1:50::ac40:23daAS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US-

Checks

  • i
    2 nameservers
    Two nameservers meet the minimum; RFC 2182 recommends three or more for important zones: elly.ns.cloudflare.com, troy.ns.cloudflare.com.
    #6
  • ✓ Parent and zone agree #7
    The parent delegation and the zone's NS records list the same nameservers.
  • ✓ No glue needed #8
    All nameservers are outside the zone, so no glue records are needed.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 6 IPv4 /24s and 4 IPv6 /48s.
  • i
    All nameservers in one AS
    All nameserver addresses are announced by one network operator (AS13335 (CLOUDFLARENET - Cloudflare, Inc., US): 12 addresses). An outage or attack on that network affects all nameservers; large anycast providers mitigate this, but a secondary DNS provider adds independence.
    #11
  • i
    All nameserver names under .com
    All nameserver names are under one TLD, so a problem with that TLD also makes the nameservers unreachable. Some operators use names under two TLDs for extra resilience.
    #12
  • ✓ All reachable over IPv6 #13
    Every nameserver has an IPv6 address.

Nameservers

warn

12 of 12 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
elly.ns.cloudflare.com 162.159.38.246NOERROR, 32 ms, authoritativenoyes / yesrefused2026.10.2
elly.ns.cloudflare.com 172.64.34.246NOERROR, 14 ms, authoritativenoyes / yesrefused2026.10.2
elly.ns.cloudflare.com 108.162.194.246NOERROR, 14 ms, authoritativenoyes / yesrefused2026.10.2
elly.ns.cloudflare.com 2606:4700:50::a29f:26f6NOERROR, 15 ms, authoritativenoyes / yesrefused2026.10.2
elly.ns.cloudflare.com 2803:f800:50::6ca2:c2f6NOERROR, 15 ms, authoritativenoyes / yesrefused2026.10.2
elly.ns.cloudflare.com 2a06:98c1:50::ac40:22f6NOERROR, 15 ms, authoritativenoyes / yesrefused2026.10.2
troy.ns.cloudflare.com 162.159.44.218NOERROR, 32 ms, authoritativenoyes / yesrefused2026.10.2
troy.ns.cloudflare.com 108.162.195.218NOERROR, 15 ms, authoritativenoyes / yesrefused2026.10.2
troy.ns.cloudflare.com 172.64.35.218NOERROR, 14 ms, authoritativenoyes / yesrefused2026.10.2
troy.ns.cloudflare.com 2606:4700:58::a29f:2cdaNOERROR, 15 ms, authoritativenoyes / yesrefused2026.10.2
troy.ns.cloudflare.com 2803:f800:50::6ca2:c3daNOERROR, 16 ms, authoritativenoyes / yesrefused2026.10.2
troy.ns.cloudflare.com 2a06:98c1:50::ac40:23daNOERROR, 15 ms, authoritativenoyes / yesrefused2026.10.2

Checks

  • ✓ All respond #14
    All 12 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • !
    Software version disclosed
    These nameservers report their software version via version.bind/version.server, which helps attackers find known vulnerabilities: elly.ns.cloudflare.com: "2026.10.2"; troy.ns.cloudflare.com: "2026.10.2". Hide or replace the version string.
    #17
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

pass

serial 2417986821 · primary elly.ns.cloudflare.com

Found

Primary (MNAME)
elly.ns.cloudflare.com
Contact (RNAME)
dns.cloudflare.com
Serial
2417986821
Refresh / retry
10000 s / 2400 s
Expire
604800 s
Negative TTL
1800 s

Serial per nameserver

NameserverSerial
elly.ns.cloudflare.com (162.159.38.246)2417986821
elly.ns.cloudflare.com (172.64.34.246)2417986821
elly.ns.cloudflare.com (108.162.194.246)2417986821
elly.ns.cloudflare.com (2606:4700:50::a29f:26f6)2417986821
elly.ns.cloudflare.com (2803:f800:50::6ca2:c2f6)2417986821
elly.ns.cloudflare.com (2a06:98c1:50::ac40:22f6)2417986821
troy.ns.cloudflare.com (162.159.44.218)2417986821
troy.ns.cloudflare.com (108.162.195.218)2417986821
troy.ns.cloudflare.com (172.64.35.218)2417986821
troy.ns.cloudflare.com (2606:4700:58::a29f:2cda)2417986821
troy.ns.cloudflare.com (2803:f800:50::6ca2:c3da)2417986821
troy.ns.cloudflare.com (2a06:98c1:50::ac40:23da)2417986821

Checks

  • ✓ Serial 2417986821 everywhere #22
    All nameservers serve the same version of the zone.
  • ✓ Timers within recommendations #23
    SOA refresh 2h46m40s, retry 40m, expire 7d, negative TTL 30m.
  • ✓ Primary is a public nameserver #24
    The primary nameserver elly.ns.cloudflare.com is one of the listed nameservers.
  • ✓ Contact dns@cloudflare.com #25
    The SOA RNAME dns.cloudflare.com means dns@cloudflare.com.
  • ✓ Timestamp serial #26
    The serial 2417986821 is a Unix timestamp (2046-08-15 23:00 UTC).

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

info

41 records at the apex

Found

Read from
162.159.38.246:53
TypeValueTTL
SOAelly.ns.cloudflare.com. dns.cloudflare.com. 2417986821 10000 2400 604800 18001800
NSelly.ns.cloudflare.com.86400
NStroy.ns.cloudflare.com.86400
A172.64.150.53300
A104.18.37.203300
AAAA2606:4700:4400::ac40:9635300
AAAA2a06:98c1:3101::6812:25cb300
MX10 eon-de.mail.protection.outlook.com.3600
TXT"00D0D0000008h8z=1TB9O0000000RMn"3600
TXT"00D0E000000At50=1TB9K00000009Hs"3600
TXT"00D0E000000HWEV=1TB9K00000009L7"3600
TXT"00D0N000000joSL=1TBTq00000002LN"3600
TXT"00D1j0000002CA7=1TB9b0000000K0L"3600
TXT"00D26000000DZ90=1TB9M00000006Dd"3600
TXT"00D3O0000006HKT=1TB9Q0000000SQv"3600
TXT"00D5E000000A9Am=1TB9Z0000000A2d"3600
TXT"00D5E000000BZS1=1TB9Q0000000EB4"3600
TXT"00D7a000000AZjK=1TB9Q0000000T8T"3600
TXT"00D9E0000009McG=1TB9Z0000000P6T"3600
TXT"00DbY000009o5Dp=1TBbY0000000mhS"3600
TXT"67nd7n8w11dpyvrnj2zbcsrnj1529cmv"3600
TXT"D-TRUST=HWVT6PU5NQFSKSK2JGHG6WF"3600
TXT"G0n-qY6qUxCDhViN2P4SgICmZxWeJ_HGygcl84cZLStRCPzjJ9laPrToHCc0GBkG.r54qAqCZSs4xyyeamMffaxyR1FWYVb5OvwUh8EcrhpI"3600
TXT"HOhmzfCT6oeyI4G10UO9SMCvEWfaF/g6Zh+9NJaCu5/YBgfHYdq0Gi+4jbXMJkpof6uWJ5mq9GqFnk+PMQS0xQ=="3600
TXT"MS=ms77384201"3600
TXT"May9fCBAUPdubhHB2IyFIVZr0ME3tXrWBI7fEtP+ICQAMjK5vXZzi3W9gCbi+2BWCycaJ9hLGwTSG2TsK3JGtg=="3600
TXT"Q1acBCLteQyR0mt9ZQwr_MQs67aRBoE5uRTqSH-aKUr72N_yUEsI8W1wLB1WN9bp.r54qAqCZSs4xyyeamMffaxyR1FWYVb5OvwUh8EcrhpI"3600
TXT"QuoVadis=c176a4de-7aba-4db5-b0eb-b2dfd775aece"3600
TXT"_4wt7txxtbgjvb54wrbcuqhg7pvj9s9i"3600
TXT"_9di0di1tk6w33vdccftbq9uhp34rfed"3600
TXT"_evb9d943ugob4np0qnh9my46ek3bv4a"3600
TXT"_irkz24eug118h2ouqg31kt0bl6hsc2h"3600
TXT"_nmlvbik1hbfkrf6i0m4r1ufg3b08r5z"3600
TXT"atlassian-domain-verification=khDfe2tNb4a3IlrXDB0Os7RNtf4vlHI9RTRXBXnvIOzJPt0/J5yOrlAbhy1mhUb3"3600
TXT"docusign=bedcac97-6788-4cb0-8793-6f81964c866e"3600
TXT"google-site-verification=lbP6hcrPWctP9w2p5QbMxIulUZAV_PKsP6oYuwhuu9c"3600
TXT"hqePFFF7GfUbRIWsJGWU5P3qghyZOpqirY73j0CZE2BeFFtouZPol7AvTjJpS0QhKcRg2VN9hB/OHVy8jnai5A=="3600
TXT"mailjet-eon.de -validation=686839"3600
TXT"nfkzcl4f5fg207mkyn5yg6ld4bx1xnbh"3600
TXT"v7AAfdSlUO2K+wON2XDMXPW3uF3/xVcnZUbylZ04JN91CPJjOGTMs98yos7bF7JVs1czI/qPofJVNrCx70obTg=="3600
TXT"v=spf1 include:spf.protection.outlook.com include:spf.mailjet.com include:spf-sap.eon.com a:surveymonkey.com include:spfa.eon.de include:_spf.salesforce.com ip4:192.109.216.0/24 ip4:160.44.230.240/29 ip4:148.105.8.0/21 ip4:198.2.128.0/18 ip4:205.201.128.0" "/20 ip4:136.146.128.64/28 ip4:162.247.216.0/22 ip4:178.21.131.158 ip4:178.249.98.17 ip4:182.50.78.64/28 ip4:212.18.21.68/31 ip4:216.74.162.12/30 ip4:46.249.197.144/30 ip4:46.30.5.108/30 ip4:5.61.115.0/25 ip4:50.31.33.37 ip4:193.26.32.0/19 ip4:94.100.245.1" "6/28 -all"3600

Checks

  • ✓ TTLs within range #32
    TTLs: A 5m, AAAA 5m, MX 1h, NS 1d.
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • i
    No CAA records
    Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.
    #35