serabyte.de

Checked 22 October 2026, 00:10 UTC · via 8.8.8.8
!Passed with warnings
23 passed 2 warnings 0 failed 4 info

Registration

info

.de country-code

Found

TLD
.de (country-code)
ICANN policies apply
no

Checks

  • i
    .de is a country-code TLD (ccTLD)
    Country-code TLD: governed by its local registry under national policy, not by an ICANN contract. Registrar accreditation, dispute resolution and RDAP/WHOIS rules are set by the registry.
    #1
  • ✓ TLD delegated and signed #2
    .de is delegated in the root zone and DNSSEC-signed.
  • i
    Registration data not available
    No registration data via RDAP: the registry of .de offers no RDAP service. Many ccTLD registries don't offer RDAP; check the registry's WHOIS instead.
    #3

Delegation

info

freedns1.registrar-servers.com, freedns2.registrar-servers.com, freedns3.registrar-servers.com, freedns4.registrar-servers.com, freedns5.registrar-servers.com

Found

Parent zone
de
Delegation from
a.nic.de (194.0.0.53)
NS at the parent
freedns1.registrar-servers.com, freedns2.registrar-servers.com, freedns3.registrar-servers.com, freedns4.registrar-servers.com, freedns5.registrar-servers.com
NS in the zone
freedns1.registrar-servers.com, freedns2.registrar-servers.com, freedns3.registrar-servers.com, freedns4.registrar-servers.com, freedns5.registrar-servers.com
NameserverAddressesNetwork (AS)Glue
freedns1.registrar-servers.com45.58.122.83 2605:9880:300:1400:101:1650:5e2:54AS23470 RELIABLESITE - ReliableSite.Net LLC, US AS23470 RELIABLESITE - ReliableSite.Net LLC, US-
freedns2.registrar-servers.com199.119.202.76 2604:6600:0:1b::2AS40676 AS40676 - Psychz Networks, US AS40676 AS40676 - Psychz Networks, US-
freedns3.registrar-servers.com195.154.94.174 2001:bc8:6006:4000:8218:44ff:feef:d720AS12876 AS12876 - Scaleway SAS, FR AS12876 AS12876 - Scaleway SAS, FR-
freedns4.registrar-servers.com95.141.37.127 2a02:29e0:1:103:103::1AS49367 ASSEFLOW - Seflow s.r.l., IT AS49367 ASSEFLOW - Seflow s.r.l., IT-
freedns5.registrar-servers.com54.36.109.15 2001:41d0:700:120f::1AS16276 OVH - OVH SAS, FR AS16276 OVH - OVH SAS, FR-

Checks

  • ✓ 5 nameservers #6
    Delegated to freedns1.registrar-servers.com, freedns2.registrar-servers.com, freedns3.registrar-servers.com, freedns4.registrar-servers.com, freedns5.registrar-servers.com.
  • ✓ Parent and zone agree #7
    The parent delegation and the zone's NS records list the same nameservers.
  • ✓ No glue needed #8
    All nameservers are outside the zone, so no glue records are needed.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 5 IPv4 /24s and 5 IPv6 /48s.
  • ✓ 5 autonomous systems #11
    The nameservers are spread over: AS12876 (AS12876 - Scaleway SAS, FR): 2 addresses; AS16276 (OVH - OVH SAS, FR): 2 addresses; AS23470 (RELIABLESITE - ReliableSite.Net LLC, US): 2 addresses; AS40676 (AS40676 - Psychz Networks, US): 2 addresses; AS49367 (ASSEFLOW - Seflow s.r.l., IT): 2 addresses.
  • i
    All nameserver names under .com
    All nameserver names are under one TLD, so a problem with that TLD also makes the nameservers unreachable. Some operators use names under two TLDs for extra resilience.
    #12
  • ✓ All reachable over IPv6 #13
    Every nameserver has an IPv6 address.

Nameservers

pass

10 of 10 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
freedns1.registrar-servers.com 45.58.122.83NOERROR, 88 ms, authoritativenoyes / yesrefused-
freedns1.registrar-servers.com 2605:9880:300:1400:101:1650:5e2:54NOERROR, 94 ms, authoritativenoyes / yesrefused-
freedns2.registrar-servers.com 199.119.202.76NOERROR, 146 ms, authoritativenoyes / yesrefused-
freedns2.registrar-servers.com 2604:6600:0:1b::2NOERROR, 140 ms, authoritativenoyes / yesrefused-
freedns3.registrar-servers.com 195.154.94.174NOERROR, 17 ms, authoritativenoyes / yesrefused-
freedns3.registrar-servers.com 2001:bc8:6006:4000:8218:44ff:feef:d720NOERROR, 18 ms, authoritativenoyes / yesrefused-
freedns4.registrar-servers.com 95.141.37.127NOERROR, 22 ms, authoritativenoyes / yesrefused-
freedns4.registrar-servers.com 2a02:29e0:1:103:103::1NOERROR, 22 ms, authoritativenoyes / yesrefused-
freedns5.registrar-servers.com 54.36.109.15NOERROR, 4 ms, authoritativenoyes / yesrefused-
freedns5.registrar-servers.com 2001:41d0:700:120f::1NOERROR, 5 ms, authoritativenoyes / yesrefused-

Checks

  • ✓ All respond #14
    All 10 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • ✓ No version disclosed #17
    The nameservers don't reveal their software version.
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

pass

serial 1730096602 · primary freedns1.registrar-servers.com

Found

Primary (MNAME)
freedns1.registrar-servers.com
Contact (RNAME)
hostmaster.registrar-servers.com
Serial
1730096602
Refresh / retry
43200 s / 3600 s
Expire
604800 s
Negative TTL
3601 s

Serial per nameserver

NameserverSerial
freedns1.registrar-servers.com (45.58.122.83)1730096602
freedns1.registrar-servers.com (2605:9880:300:1400:101:1650:5e2:54)1730096602
freedns2.registrar-servers.com (199.119.202.76)1730096602
freedns2.registrar-servers.com (2604:6600:0:1b::2)1730096602
freedns3.registrar-servers.com (195.154.94.174)1730096602
freedns3.registrar-servers.com (2001:bc8:6006:4000:8218:44ff:feef:d720)1730096602
freedns4.registrar-servers.com (95.141.37.127)1730096602
freedns4.registrar-servers.com (2a02:29e0:1:103:103::1)1730096602
freedns5.registrar-servers.com (54.36.109.15)1730096602
freedns5.registrar-servers.com (2001:41d0:700:120f::1)1730096602

Checks

  • ✓ Serial 1730096602 everywhere #22
    All nameservers serve the same version of the zone.
  • ✓ Timers within recommendations #23
    SOA refresh 12h, retry 1h, expire 7d, negative TTL 1h0m1s.
  • ✓ Primary is a public nameserver #24
    The primary nameserver freedns1.registrar-servers.com is one of the listed nameservers.
  • ✓ Contact hostmaster@registrar-servers.com #25
    The SOA RNAME hostmaster.registrar-servers.com means hostmaster@registrar-servers.com.
  • ✓ Timestamp serial #26
    The serial 1730096602 is a Unix timestamp (2024-10-28 06:23 UTC).

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

warn

7 records at the apex

Found

Read from
45.58.122.83:53
TypeValueTTL
SOAfreedns1.registrar-servers.com. hostmaster.registrar-servers.com. 1730096602 43200 3600 604800 36013601
NSfreedns5.registrar-servers.com.1800
NSfreedns1.registrar-servers.com.1800
NSfreedns3.registrar-servers.com.1800
NSfreedns2.registrar-servers.com.1800
NSfreedns4.registrar-servers.com.1800
A54.38.93.8460

Checks

  • !
    Very low TTLs
    These records have a TTL below 5m, causing extra queries and slower lookups: A (1m). Low TTLs are useful just before a planned change. The NS TTL at the parent is 1d and in the zone 30m; resolvers may use either.
    #32
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • i
    No CAA records
    Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.
    #35