kloster-eberbach.de
!Passed with warnings
22 passed
3 warnings
0 failed
4 info
Registration
info.de country-code
Found
- TLD
- .de (country-code)
- ICANN policies apply
- no
Checks
-
i#1.de is a country-code TLD (ccTLD)
-
✓ TLD delegated and signed #2
-
i#3Registration data not available
Delegation
warnns.second-ns.com, ns1.your-server.de
Found
- Parent zone
- de
- Delegation from
- a.nic.de (194.0.0.53)
- NS at the parent
- ns.second-ns.com, ns1.your-server.de
- NS in the zone
- ns.second-ns.com, ns1.your-server.de, ns3.second-ns.de
| Nameserver | Addresses | Network (AS) | Glue |
|---|---|---|---|
| ns.second-ns.com | 213.239.204.242 2a01:4f8:0:a101::b:1 | AS24940 HETZNER-AS - Hetzner Online GmbH, DE AS24940 HETZNER-AS - Hetzner Online GmbH, DE | - |
| ns1.your-server.de | 213.133.100.102 2a01:4f8:0:1::5ddc:1 | AS24940 HETZNER-AS - Hetzner Online GmbH, DE AS24940 HETZNER-AS - Hetzner Online GmbH, DE | 213.133.100.102 2a01:4f8:0:1::5ddc:1 |
| ns3.second-ns.de (zone only) | 193.47.99.4 2001:67c:192c::add:b3 | AS12337 NORIS-NETWORK - noris network AG, DE AS12337 NORIS-NETWORK - noris network AG, DE | - |
Checks
-
i#62 nameservers
-
!#7NS sets differ
-
✓ No glue needed #8
-
✓ All names resolve #9
-
✓ Nameservers in different networks #10
-
✓ 2 autonomous systems #11
-
✓ Nameserver names under 2 TLDs #12
-
✓ All reachable over IPv6 #13
Nameservers
pass6 of 6 addresses answer authoritatively
Found
| Nameserver | Answer | Recursion | TCP / EDNS | AXFR | Version |
|---|---|---|---|---|---|
| ns.second-ns.com 213.239.204.242 | NOERROR, 4 ms, authoritative | no | yes / yes | refused | - |
| ns.second-ns.com 2a01:4f8:0:a101::b:1 | NOERROR, 4 ms, authoritative | no | yes / yes | refused | - |
| ns1.your-server.de 213.133.100.102 | NOERROR, 1 ms, authoritative | no | yes / yes | refused | - |
| ns1.your-server.de 2a01:4f8:0:1::5ddc:1 | NOERROR, 2 ms, authoritative | no | yes / yes | refused | - |
| ns3.second-ns.de 193.47.99.4 | NOERROR, 6 ms, authoritative | no | yes / yes | refused | - |
| ns3.second-ns.de 2001:67c:192c::add:b3 | NOERROR, 7 ms, authoritative | no | yes / yes | refused | - |
Checks
-
✓ All respond #14
-
✓ All authoritative #15
-
✓ No recursion #16
-
✓ No version disclosed #17
-
✓ Zone transfers refused #18
-
✓ TCP supported #19
-
✓ EDNS supported #20
-
✓ Public addresses #21
SOA
passserial 2026100901 · primary ns1.your-server.de
Found
- Primary (MNAME)
- ns1.your-server.de
- Contact (RNAME)
- postmaster.your-server.de
- Serial
- 2026100901
- Refresh / retry
- 14400 s / 1800 s
- Expire
- 604800 s
- Negative TTL
- 7200 s
Serial per nameserver
| Nameserver | Serial |
|---|---|
| ns.second-ns.com (213.239.204.242) | 2026100901 |
| ns.second-ns.com (2a01:4f8:0:a101::b:1) | 2026100901 |
| ns1.your-server.de (213.133.100.102) | 2026100901 |
| ns1.your-server.de (2a01:4f8:0:1::5ddc:1) | 2026100901 |
| ns3.second-ns.de (193.47.99.4) | 2026100901 |
| ns3.second-ns.de (2001:67c:192c::add:b3) | 2026100901 |
Checks
-
✓ Serial 2026100901 everywhere #22
-
✓ Timers within recommendations #23
-
✓ Primary is a public nameserver #24
-
✓ Contact postmaster@your-server.de #25
-
✓ Date-based serial #26
DNSSEC
warnNot signed
Found
- Validated by resolver
- no
Checks
-
!#27Not signed
Records
warn9 records at the apex
Found
- Read from
- 213.239.204.242:53
| Type | Value | TTL |
|---|---|---|
| SOA | ns1.your-server.de. postmaster.your-server.de. 2026100901 14400 1800 604800 7200 | 3600 |
| NS | ns3.second-ns.de. | 3600 |
| NS | ns.second-ns.com. | 3600 |
| NS | ns1.your-server.de. | 3600 |
| A | 85.10.213.70 | 300 |
| MX | 10 klostereberbach-de01i.mail.protection.outlook.com. | 60 |
| TXT | "v=spf1 ip4:178.250.164.26 ip4:85.10.213.70 ip4:185.228.179.18 ip4:185.228.179.19 ip4:185.228.179.20 ip4:185.228.179.73 ip4:52.29.234.96 ip4:52.29.246.168 ip4:52.29.205.253 ip4:195.201.160.125 include:spf.protection.outlook.com include:_spf_eucentral1.prod" ".hydra.sophos.com include:spf-de.emailsignatures365.com include:oracleindustry.com include:sendgrid.net -all" | 600 |
| TXT | "brevo-code:efaa1a8e27c78f357418a404721df2a7" | 600 |
| TXT | "sophos-domain-verification=353d6146831e0ad05f67b72c52c463efe4bc23e7" | 600 |
Checks
-
!#32Very low TTLs
-
✓ No CNAME at the apex #33
-
✓ No wildcard #34
-
i#35No CAA records