Domain report: essen.de

Registration

info

.de country-code

i

.de is a country-code TLD (ccTLD)

Country-code TLD: governed by its local registry under national policy, not by an ICANN contract. Registrar accreditation, dispute resolution and RDAP/WHOIS rules are set by the registry.

#1
✓ TLD delegated and signed #2

.de is delegated in the root zone and DNSSEC-signed.
i

Registration data not available

No registration data via RDAP: the registry of .de offers no RDAP service. Many ccTLD registries don't offer RDAP; check the registry's WHOIS instead.

#3

info

eshdns01.essen.de, eshdns02.essen.de, eshdns03.essen.de

Nameserver	Addresses	Network (AS)	Glue
eshdns01.essen.de	185.150.48.18 2a0b:a5c0:1:20:2::	AS205807 ESH - Essener Systemhaus, DE AS205807 ESH - Essener Systemhaus, DE	185.150.48.18 2a0b:a5c0:1:20:2::
eshdns02.essen.de	185.150.50.2 2a0b:a5c4:1:20:2::	AS205807 ESH - Essener Systemhaus, DE AS205807 ESH - Essener Systemhaus, DE	185.150.50.2 2a0b:a5c4:1:20:2::
eshdns03.essen.de	116.203.208.149 2a01:4f8:c0c:51db::1	AS24940 HETZNER-AS - Hetzner Online GmbH, DE AS24940 HETZNER-AS - Hetzner Online GmbH, DE	116.203.208.149 2a01:4f8:c0c:51db::1

✓ 3 nameservers #6

Delegated to eshdns01.essen.de, eshdns02.essen.de, eshdns03.essen.de.
✓ Parent and zone agree #7

The parent delegation and the zone's NS records list the same nameservers.
✓ Glue present and correct #8

Glue is published for the nameservers inside the zone: eshdns01.essen.de, eshdns02.essen.de, eshdns03.essen.de.
✓ All names resolve #9

Every nameserver name has an address and is not an alias.
✓ Nameservers in different networks #10

The nameservers are spread over 3 IPv4 /24s and 3 IPv6 /48s.
✓ 2 autonomous systems #11

The nameservers are spread over: AS205807 (ESH - Essener Systemhaus, DE): 4 addresses; AS24940 (HETZNER-AS - Hetzner Online GmbH, DE): 2 addresses.
i

All nameserver names under .de

All nameserver names are under one TLD, so a problem with that TLD also makes the nameservers unreachable. Some operators use names under two TLDs for extra resilience.

#12
✓ All reachable over IPv6 #13

Every nameserver has an IPv6 address.

fail

4 of 6 addresses answer authoritatively

Nameserver	Answer	Recursion	TCP / EDNS	AXFR	Version
eshdns01.essen.de 185.150.48.18	NOERROR, 10 ms, authoritative	no	yes / yes	refused	9.20.29-1~deb13u1+ubuntu24.04.1+deb.sury.org+1-Ubuntu
eshdns01.essen.de 2a0b:a5c0:1:20:2::	no response	no	no / no	-	-
eshdns02.essen.de 185.150.50.2	NOERROR, 12 ms, authoritative	no	yes / yes	refused	9.20.29-1~deb13u1+ubuntu24.04.1+deb.sury.org+1-Ubuntu
eshdns02.essen.de 2a0b:a5c4:1:20:2::	no response	no	no / no	-	-
eshdns03.essen.de 116.203.208.149	NOERROR, 4 ms, authoritative	no	yes / yes	refused	9.20.29-1~deb13u1+ubuntu22.04.1+deb.sury.org+1-Ubuntu
eshdns03.essen.de 2a01:4f8:c0c:51db::1	NOERROR, 2 ms, authoritative	no	yes / yes	refused	9.20.29-1~deb13u1+ubuntu22.04.1+deb.sury.org+1-Ubuntu

✗

Nameservers not responding

These addresses did not answer, so resolvers waste time on timeouts: eshdns01.essen.de (2a0b:a5c0:1:20:2::): read udp [2a01:4f8:1c1c:eebf::1]:50544->[2a0b:a5c0:1:20:2::]:53: i/o timeout; eshdns02.essen.de (2a0b:a5c4:1:20:2::): read udp [2a01:4f8:1c1c:eebf::1]:41452->[2a0b:a5c4:1:20:2::]:53: i/o timeout.

#14
✓ All authoritative #15

Every responding nameserver answers authoritatively for the zone.
✓ No recursion #16

The nameservers do not answer recursive queries for other domains.
!

Software version disclosed

These nameservers report their software version via version.bind/version.server, which helps attackers find known vulnerabilities: eshdns01.essen.de: "9.20.29-1~deb13u1+ubuntu24.04.1+deb.sury.org+1-Ubuntu"; eshdns02.essen.de: "9.20.29-1~deb13u1+ubuntu24.04.1+deb.sury.org+1-Ubuntu"; eshdns03.essen.de: "9.20.29-1~deb13u1+ubuntu22.04.1+deb.sury.org+1-Ubuntu". Hide or replace the version string.

#17
✓ Zone transfers refused #18

No nameserver allows a zone transfer to the public.
✓ TCP supported #19

All nameservers answer over TCP.
✓ EDNS supported #20

All nameservers support EDNS(0).
✓ Public addresses #21

All nameserver addresses are publicly routable.

pass

serial 2026101900 · primary eshdns01.essen.de

✓ Serial 2026101900 everywhere #22

All nameservers serve the same version of the zone.
✓ Timers within recommendations #23

SOA refresh 3h, retry 1h, expire 7d, negative TTL 640m.
✓ Primary is a public nameserver #24

The primary nameserver eshdns01.essen.de is one of the listed nameservers.
✓ Contact alf.pottmeier@esh.essen.de #25

The SOA RNAME alf\.pottmeier.esh.essen.de means alf.pottmeier@esh.essen.de.
✓ Date-based serial #26

The serial 2026101900 follows the YYYYMMDDnn convention (2026-10-19).

warn

Not signed

info

11 records at the apex

Type	Value	TTL
SOA	eshdns01.essen.de. alf\.pottmeier.esh.essen.de. 2026101900 10800 3600 604800 38400	86400
NS	eshdns03.essen.de.	86400
NS	eshdns01.essen.de.	86400
NS	eshdns02.essen.de.	86400
A	185.150.51.26	86400
MX	10 mx.essen.de.	86400
TXT	"v=spf1 a:mailevv.essen.de a:mail.essen.de a:mailrelay.essen.de a:mx.essen.de ip4:185.150.51.52 ip4:185.150.51.53 ip4:185.150.51.54 ip4:185.150.51.55 ~all"	86400
TXT	"MS=102A31EA263CFCCDA1E3256224121C22A08949B6"	86400
TXT	"MS=FF8CAB03D116025CE48825F7C274D76B40F56503"	86400
TXT	"adobe-idp-site-verification=2e560853cb0ca3b5cb63eecccbe7c98e2b8ae9705d10f050a4cba4cae7bb6130"	86400
TXT	"MS=ms59884265"	86400