sipgate.de

Checked 22 October 2026, 00:10 UTC · via 8.8.8.8
!Passed with warnings
21 passed 3 warnings 0 failed 5 info

Registration

info

.de country-code

Found

TLD
.de (country-code)
ICANN policies apply
no

Checks

  • i
    .de is a country-code TLD (ccTLD)
    Country-code TLD: governed by its local registry under national policy, not by an ICANN contract. Registrar accreditation, dispute resolution and RDAP/WHOIS rules are set by the registry.
    #1
  • ✓ TLD delegated and signed #2
    .de is delegated in the root zone and DNSSEC-signed.
  • i
    Registration data not available
    No registration data via RDAP: the registry of .de offers no RDAP service. Many ccTLD registries don't offer RDAP; check the registry's WHOIS instead.
    #3

Delegation

warn

ns1.netzquadrat.de, ns2.netzquadrat.de

Found

Parent zone
de
Delegation from
a.nic.de (194.0.0.53)
NS at the parent
ns1.netzquadrat.de, ns2.netzquadrat.de
NS in the zone
ns1.netzquadrat.de, ns2.netzquadrat.de, ns3.netzquadrat.eu, ns4.netzquadrat.nl
NameserverAddressesNetwork (AS)Glue
ns1.netzquadrat.de217.10.64.99 2001:ab7::64:99AS15594 NETZQUADRAT - netzquadrat GmbH, DE AS15594 NETZQUADRAT - netzquadrat GmbH, DE217.10.64.99 2001:ab7::64:99
ns2.netzquadrat.de217.10.66.66 2001:ab7::66:66AS15594 NETZQUADRAT - netzquadrat GmbH, DE AS15594 NETZQUADRAT - netzquadrat GmbH, DE217.10.66.66 2001:ab7::66:66
ns3.netzquadrat.eu (zone only)192.174.68.135 2001:67c:1bc::135AS1921 RCODEZERO-ANYCAST-SEC1-TLD - ipcom GmbH, AT AS1921 RCODEZERO-ANYCAST-SEC1-TLD - ipcom GmbH, AT-
ns4.netzquadrat.nl (zone only)176.97.158.135 2001:67c:10b8::135AS1921 RCODEZERO-ANYCAST-SEC1-TLD - ipcom GmbH, AT AS1921 RCODEZERO-ANYCAST-SEC1-TLD - ipcom GmbH, AT-

Checks

  • i
    2 nameservers
    Two nameservers meet the minimum; RFC 2182 recommends three or more for important zones: ns1.netzquadrat.de, ns2.netzquadrat.de.
    #6
  • !
    NS sets differ
    The nameservers at the parent and in the zone should be the same. Only in the zone: ns3.netzquadrat.eu, ns4.netzquadrat.nl. ns1.netzquadrat.de, ns2.netzquadrat.de, ns3.netzquadrat.eu, ns4.netzquadrat.nl report NS ns1.netzquadrat.de ns2.netzquadrat.de ns3.netzquadrat.eu ns4.netzquadrat.nl.
    #7
  • ✓ No glue needed #8
    All nameservers are outside the zone, so no glue records are needed.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 4 IPv4 /24s and 3 IPv6 /48s.
  • ✓ 2 autonomous systems #11
    The nameservers are spread over: AS15594 (NETZQUADRAT - netzquadrat GmbH, DE): 4 addresses; AS1921 (RCODEZERO-ANYCAST-SEC1-TLD - ipcom GmbH, AT): 4 addresses.
  • i
    All nameserver names under .de
    All nameserver names are under one TLD, so a problem with that TLD also makes the nameservers unreachable. Some operators use names under two TLDs for extra resilience.
    #12
  • ✓ All reachable over IPv6 #13
    Every nameserver has an IPv6 address.

Nameservers

warn

8 of 8 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
ns1.netzquadrat.de 217.10.64.99NOERROR, 7 ms, authoritativenoyes / yesrefusedPowerDNS Authoritative Server 4.9.17 (built Aug 5 2026 13:27:53 by root@localhost)
ns1.netzquadrat.de 2001:ab7::64:99NOERROR, 7 ms, authoritativenoyes / yesrefusedPowerDNS Authoritative Server 4.9.17 (built Aug 5 2026 13:27:53 by root@localhost)
ns2.netzquadrat.de 217.10.66.66NOERROR, 6 ms, authoritativenoyes / yesrefusedPowerDNS Authoritative Server 4.9.17 (built Aug 5 2026 13:27:53 by root@localhost)
ns2.netzquadrat.de 2001:ab7::66:66NOERROR, 7 ms, authoritativenoyes / yesrefusedPowerDNS Authoritative Server 4.9.17 (built Aug 5 2026 13:27:53 by root@localhost)
ns3.netzquadrat.eu 192.174.68.135NOERROR, 5 ms, authoritativenoyes / yesrefusedRcodeZero DNS
ns3.netzquadrat.eu 2001:67c:1bc::135NOERROR, 5 ms, authoritativenoyes / yesrefusedRcodeZero DNS
ns4.netzquadrat.nl 176.97.158.135NOERROR, 12 ms, authoritativenoyes / yesrefusedreg-wie1
ns4.netzquadrat.nl 2001:67c:10b8::135NOERROR, 12 ms, authoritativenoyes / yesrefusedreg-wie1

Checks

  • ✓ All respond #14
    All 8 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • !
    Software version disclosed
    These nameservers report their software version via version.bind/version.server, which helps attackers find known vulnerabilities: ns1.netzquadrat.de: "PowerDNS Authoritative Server 4.9.17 (built Aug 5 2026 13:27:53 by root@localhost)"; ns2.netzquadrat.de: "PowerDNS Authoritative Server 4.9.17 (built Aug 5 2026 13:27:53 by root@localhost)". Hide or replace the version string.
    #17
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

pass

serial 2024116100 · primary ns1.netzquadrat.de

Found

Primary (MNAME)
ns1.netzquadrat.de
Contact (RNAME)
dnsadmin.netzquadrat.de
Serial
2024116100
Refresh / retry
10800 s / 3600 s
Expire
604800 s
Negative TTL
76400 s

Serial per nameserver

NameserverSerial
ns1.netzquadrat.de (217.10.64.99)2024116100
ns1.netzquadrat.de (2001:ab7::64:99)2024116100
ns2.netzquadrat.de (217.10.66.66)2024116100
ns2.netzquadrat.de (2001:ab7::66:66)2024116100
ns3.netzquadrat.eu (192.174.68.135)2024116100
ns3.netzquadrat.eu (2001:67c:1bc::135)2024116100
ns4.netzquadrat.nl (176.97.158.135)2024116100
ns4.netzquadrat.nl (2001:67c:10b8::135)2024116100

Checks

  • ✓ Serial 2024116100 everywhere #22
    All nameservers serve the same version of the zone.
  • ✓ Timers within recommendations #23
    SOA refresh 3h, retry 1h, expire 7d, negative TTL 21h13m20s.
  • ✓ Primary is a public nameserver #24
    The primary nameserver ns1.netzquadrat.de is one of the listed nameservers.
  • ✓ Contact dnsadmin@netzquadrat.de #25
    The SOA RNAME dnsadmin.netzquadrat.de means dnsadmin@netzquadrat.de.
  • ✓ Timestamp serial #26
    The serial 2024116100 is a Unix timestamp (2034-02-21 06:28 UTC).

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

info

37 records at the apex

Found

Read from
217.10.64.99:53
TypeValueTTL
SOAns1.netzquadrat.de. dnsadmin.netzquadrat.de. 2024116100 10800 3600 604800 7640028800
NSns4.netzquadrat.nl.28800
NSns1.netzquadrat.de.28800
NSns3.netzquadrat.eu.28800
NSns2.netzquadrat.de.28800
A217.10.79.9300
AAAA2001:ab7::2300
AAAA2001:ab7::3300
AAAA2001:ab7::1300
AAAA2001:ab7::4300
MX1 ASPMX.L.GOOGLE.COM.28800
MX5 ALT2.ASPMX.L.GOOGLE.COM.28800
MX10 ASPMX4.GOOGLEMAIL.COM.28800
MX5 ALT1.ASPMX.L.GOOGLE.COM.28800
MX10 ASPMX2.GOOGLEMAIL.COM.28800
MX10 ASPMX3.GOOGLEMAIL.COM.28800
MX10 ASPMX5.GOOGLEMAIL.COM.28800
TXT"DirectFedAuthUrl=https://accounts.google.com/o/saml2/idp?idpid=C028qxy24"3600
TXT"MS=ms65688181"3600
TXT"anthropic-domain-verification-0ex3dt=ByGrgjGEED7ExbzZ3kDJ53Mf4"3600
TXT"apple-domain-verification=hxSOEG6kVNjowHfA"3600
TXT"atlassian-domain-verification=GwxJjdzdhhZtc7WIrTPMca0D5ylOgv3V5cKpegpa/2fTbPfWn6pbYYAFuaxRy1jB"3600
TXT"ca3-6cfe58c940f64d7999ca592a03e5b2b2"3600
TXT"google-site-verification=5ZAu_-kXsvVRWWiAEDqnNfSyXdabyBxWPJBemERSNV8"3600
TXT"google-site-verification=k7YJE3zb-ZLzF6txcRjXSGUvGB4CsS39ZNpO7yt0rK0"3600
TXT"google-site-verification=nniIvi6rLfab3HnpsMcQvVm4oioDMddZ9axundSZUlY"3600
TXT"google-site-verification=tNiMmu-AslugkcIZtR1VYyQIJxOSib9L9yFKIA9V74c"3600
TXT"google-site-verification=u2TRaVDJF2OfutCHIRoNSG-fIR_GXZabGD9-snNBI-U"3600
TXT"google-site-verification=wrV6p6epLV5qMfBnL7BsnY1-9P8xRZj9pXc9u3wHOhA"3600
TXT"hemi72lzm0"3600
TXT"linkedin-site-verification=3fad51a1-e6b7-4bfd-a3fb-9b39304e8c21"3600
TXT"miro-verification=dc611df0e09575d1b787cdc9c73a285bb30916bf"3600
TXT"mixpanel-domain-verify=50cdf066-a6a7-46f0-b830-b0328165f0f4"3600
TXT"notion-domain-verification=gcWbQpas12a9ucRyQ9KS8OVuUrBwzhZEgCXTAcLr3ev"3600
TXT"openai-domain-verification=dv-8sF35lH5tLpeg9009T1bXKkL"3600
TXT"sipgate_domain_verification=MXLvLeO5EkouI1ihoRL2HZSIizTWuaYi"3600
TXT"v=spf1 include:_spf.sipgate.de ~all"3600

Checks

  • ✓ TTLs within range #32
    TTLs: A 5m, AAAA 5m, MX 8h, NS 8h. The NS TTL at the parent is 1d and in the zone 8h; resolvers may use either.
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • i
    No CAA records
    Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.
    #35