Domain report: jobware.de

Registration

info

.de country-code

Found

TLD: .de (country-code)
ICANN policies apply: no

Checks

i

.de is a country-code TLD (ccTLD)

Country-code TLD: governed by its local registry under national policy, not by an ICANN contract. Registrar accreditation, dispute resolution and RDAP/WHOIS rules are set by the registry.

#1
✓ TLD delegated and signed #2

.de is delegated in the root zone and DNSSEC-signed.
i

Registration data not available

No registration data via RDAP: the registry of .de offers no RDAP service. Many ccTLD registries don't offer RDAP; check the registry's WHOIS instead.

#3

Delegation

info

ns11.constellix.com, ns21.constellix.com, ns31.constellix.com, ns41.constellix.net, ns51.constellix.net, ns61.constellix.net

Found

Parent zone: de
Delegation from: a.nic.de (194.0.0.53)
NS at the parent: ns11.constellix.com, ns21.constellix.com, ns31.constellix.com, ns41.constellix.net, ns51.constellix.net, ns61.constellix.net
NS in the zone: ns11.constellix.com, ns21.constellix.com, ns31.constellix.com, ns41.constellix.net, ns51.constellix.net, ns61.constellix.net

Nameserver	Addresses	Network (AS)	Glue
ns11.constellix.com	96.45.80.1 2600:180a:1001::1	AS16552 DIGICERT - Tiggee LLC, US AS16552 DIGICERT - Tiggee LLC, US	-
ns21.constellix.com	46.31.236.1 2600:180b:2001::1	AS16552 DIGICERT - Tiggee LLC, US AS16552 DIGICERT - Tiggee LLC, US	-
ns31.constellix.com	43.247.170.1 2600:180c:3001::1	AS16552 DIGICERT - Tiggee LLC, US AS16552 DIGICERT - Tiggee LLC, US	-
ns41.constellix.net	96.45.81.1 2600:180a:4001::1	AS16552 DIGICERT - Tiggee LLC, US AS16552 DIGICERT - Tiggee LLC, US	-
ns51.constellix.net	46.31.237.1 2600:180b:5001::1	AS16552 DIGICERT - Tiggee LLC, US AS16552 DIGICERT - Tiggee LLC, US	-
ns61.constellix.net	43.247.171.1 2600:180c:6001::1	AS16552 DIGICERT - Tiggee LLC, US AS16552 DIGICERT - Tiggee LLC, US	-

Checks

✓ 6 nameservers #6

Delegated to ns11.constellix.com, ns21.constellix.com, ns31.constellix.com, ns41.constellix.net, ns51.constellix.net, ns61.constellix.net.
✓ Parent and zone agree #7

The parent delegation and the zone's NS records list the same nameservers.
✓ No glue needed #8

All nameservers are outside the zone, so no glue records are needed.
✓ All names resolve #9

Every nameserver name has an address and is not an alias.
✓ Nameservers in different networks #10

The nameservers are spread over 6 IPv4 /24s and 6 IPv6 /48s.
i

All nameservers in one AS

All nameserver addresses are announced by one network operator (AS16552 (DIGICERT - Tiggee LLC, US): 12 addresses). An outage or attack on that network affects all nameservers; large anycast providers mitigate this, but a secondary DNS provider adds independence.

#11
✓ Nameserver names under 2 TLDs #12

Nameserver names use the TLDs .com, .net.
✓ All reachable over IPv6 #13

Every nameserver has an IPv6 address.

Nameservers

info

12 of 12 addresses answer authoritatively

Found

Nameserver	Answer	Recursion	TCP / EDNS	AXFR	Version
ns11.constellix.com 96.45.80.1	NOERROR, 3 ms, authoritative	no	yes / yes	refused	179812
ns11.constellix.com 2600:180a:1001::1	NOERROR, 9 ms, authoritative	no	yes / yes	refused	179812
ns21.constellix.com 46.31.236.1	NOERROR, 3 ms, authoritative	no	yes / yes	refused	105986
ns21.constellix.com 2600:180b:2001::1	NOERROR, 4 ms, authoritative	no	yes / yes	refused	105986
ns31.constellix.com 43.247.170.1	NOERROR, 4 ms, authoritative	no	yes / yes	refused	808515
ns31.constellix.com 2600:180c:3001::1	NOERROR, 4 ms, authoritative	no	yes / yes	refused	808515
ns41.constellix.net 96.45.81.1	NOERROR, 3 ms, authoritative	no	yes / yes	refused	179812
ns41.constellix.net 2600:180a:4001::1	NOERROR, 8 ms, authoritative	no	yes / yes	refused	179812
ns51.constellix.net 46.31.237.1	NOERROR, 3 ms, authoritative	no	yes / yes	refused	105986
ns51.constellix.net 2600:180b:5001::1	NOERROR, 4 ms, authoritative	no	yes / yes	refused	105986
ns61.constellix.net 43.247.171.1	NOERROR, 8 ms, authoritative	no	yes / yes	refused	808515
ns61.constellix.net 2600:180c:6001::1	NOERROR, 8 ms, authoritative	no	yes / yes	refused	808515

Checks

✓ All respond #14

All 12 nameserver addresses answered.
✓ All authoritative #15

Every responding nameserver answers authoritatively for the zone.
✓ No recursion #16

The nameservers do not answer recursive queries for other domains.
i

Identifying string disclosed

These nameservers answer version queries with a string that is not a version number: ns11.constellix.com: "179812"; ns21.constellix.com: "105986"; ns31.constellix.com: "808515"; ns41.constellix.net: "179812"; ns51.constellix.net: "105986"; ns61.constellix.net: "808515".

#17
✓ Zone transfers refused #18

No nameserver allows a zone transfer to the public.
✓ TCP supported #19

All nameservers answer over TCP.
✓ EDNS supported #20

All nameservers support EDNS(0).
✓ Public addresses #21

All nameserver addresses are publicly routable.

SOA

warn

serial 2015010147 · primary ns11.constellix.com

Found

Primary (MNAME): ns11.constellix.com
Contact (RNAME): dns.constellix.com
Serial: 2015010147
Refresh / retry: 43200 s / 3600 s
Expire: 1209600 s
Negative TTL: 180 s

Serial per nameserver

Nameserver	Serial
ns11.constellix.com (96.45.80.1)	2015010147
ns11.constellix.com (2600:180a:1001::1)	2015010147
ns21.constellix.com (46.31.236.1)	2015010147
ns21.constellix.com (2600:180b:2001::1)	2015010147
ns31.constellix.com (43.247.170.1)	2015010147
ns31.constellix.com (2600:180c:3001::1)	2015010147
ns41.constellix.net (96.45.81.1)	2015010147
ns41.constellix.net (2600:180a:4001::1)	2015010147
ns51.constellix.net (46.31.237.1)	2015010147
ns51.constellix.net (2600:180b:5001::1)	2015010147
ns61.constellix.net (43.247.171.1)	2015010147
ns61.constellix.net (2600:180c:6001::1)	2015010147

Checks

✓ Serial 2015010147 everywhere #22

All nameservers serve the same version of the zone.
!

Unusual SOA timers

negative caching TTL (minimum) 3m is outside 5m–1d (RFC 2308 recommends 1–3 hours). Current values: refresh 12h, retry 1h, expire 14d, negative TTL 3m.

#23
✓ Primary is a public nameserver #24

The primary nameserver ns11.constellix.com is one of the listed nameservers.
✓ Contact dns@constellix.com #25

The SOA RNAME dns.constellix.com means dns@constellix.com.
✓ Date-based serial #26

The serial 2015010147 follows the YYYYMMDDnn convention (2015-01-01).

DNSSEC

warn

Not signed

Found

Validated by resolver: no

Checks

!

Not signed

The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.

#27

Records

pass

25 records at the apex

Found

Read from: 96.45.80.1:53

Type	Value	TTL
SOA	ns11.constellix.com. dns.constellix.com. 2015010147 43200 3600 1209600 180	86400
NS	ns51.constellix.net.	86400
NS	ns61.constellix.net.	86400
NS	ns11.constellix.com.	86400
NS	ns21.constellix.com.	86400
NS	ns31.constellix.com.	86400
NS	ns41.constellix.net.	86400
A	62.93.211.30	86400
MX	10 mx.jobware.net.	86400
TXT	"MS=ms45466508"	86400
TXT	"76c5e08da4f1eba58b46017928e8bfbb"	86400
TXT	"v=spf1 include:_spf.jobware.net include:spf.mxg.cloud ~all"	86400
TXT	"apple-domain-verification=9Nn1qnotR4NQNns1"	86400
TXT	"facebook-domain-verification=9irxtqkrso1tf840oevrltp7n9sg71"	86400
TXT	"google-site-verification=FrTTgNpWl068XUh-UbWohRIEBp35S0eezVQDq8D-gCM"	86400
TXT	"google-site-verification=HItgOIX8g1kbB1_ZpUvdaP1yAKOt3GJhWcjFnP6YqgA"	86400
TXT	"google-site-verification=fSf7qT7_f8QV5TpbRiDm6JnZqp8Dp4LpV-cbdEhWpjg"	86400
TXT	"yahoo-verification-key=iuFFLKZ9lLmz81uPqH4PK/FrVyETWQBrvBRicYKnyu0="	86400
TXT	"swisssign-check=-4tXNPzvtxTEISQyl7-9cm9Rjpg"	86400
TXT	"atlassian-domain-verification=VfmKFMa0kEu5anmzBLepRoA1Xr0VpZu4a6F8wquuyEgGGV8jt1ptNYVVt0hDbN0c"	86400
TXT	"atlassian-sending-domain-verification=5939ae0e-1afc-4d16-b7e3-b4b7b89056a9"	86400
CAA	0 issue "digicert.com"	86400
CAA	0 issue "letsencrypt.org"	86400
CAA	0 issue "sectigo.com"	86400
CAA	0 issue "thawte.com"	86400

Checks

✓ TTLs within range #32

TTLs: A 1d, MX 1d, NS 1d.
✓ No CNAME at the apex #33

The zone apex has no CNAME record.
✓ No wildcard #34

Names that don't exist return NXDOMAIN.
✓ CAA restricts issuance #35

Certificates may be issued by: digicert.com, letsencrypt.org, sectigo.com, thawte.com.