Domain report: stargames.de

Registration

info

.de country-code

Found

TLD: .de (country-code)
ICANN policies apply: no

Checks

i

.de is a country-code TLD (ccTLD)

Country-code TLD: governed by its local registry under national policy, not by an ICANN contract. Registrar accreditation, dispute resolution and RDAP/WHOIS rules are set by the registry.

#1
✓ TLD delegated and signed #2

.de is delegated in the root zone and DNSSEC-signed.
i

Registration data not available

No registration data via RDAP: the registry of .de offers no RDAP service. Many ccTLD registries don't offer RDAP; check the registry's WHOIS instead.

#3

Delegation

pass

edns5.ultradns.biz, edns5.ultradns.com, edns5.ultradns.net, edns5.ultradns.org, ns0051.secondary.cloudflare.com, ns0200.secondary.cloudflare.com

Found

Parent zone: de
Delegation from: a.nic.de (194.0.0.53)
NS at the parent: edns5.ultradns.biz, edns5.ultradns.com, edns5.ultradns.net, edns5.ultradns.org, ns0051.secondary.cloudflare.com, ns0200.secondary.cloudflare.com
NS in the zone: edns5.ultradns.biz, edns5.ultradns.com, edns5.ultradns.net, edns5.ultradns.org, ns0051.secondary.cloudflare.com, ns0200.secondary.cloudflare.com

Nameserver	Addresses	Network (AS)	Glue
edns5.ultradns.biz	204.74.67.5 2610:a1:1015::205	AS12008 VERCARA - Vercara, LLC, US AS12008 VERCARA - Vercara, LLC, US	-
edns5.ultradns.com	204.74.66.5 2001:502:f3ff::205	AS12008 VERCARA - Vercara, LLC, US AS12008 VERCARA - Vercara, LLC, US	-
edns5.ultradns.net	204.74.110.5 2610:a1:1014::205	AS12008 VERCARA - Vercara, LLC, US AS12008 VERCARA - Vercara, LLC, US	-
edns5.ultradns.org	204.74.111.5 2001:502:4612::205	AS12008 VERCARA - Vercara, LLC, US AS12008 VERCARA - Vercara, LLC, US	-
ns0051.secondary.cloudflare.com	162.159.32.52 2606:4700:51::a29f:2034	AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US	-
ns0200.secondary.cloudflare.com	162.159.33.75 2606:4700:59::a29f:214b	AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US	-

Checks

✓ 6 nameservers #6

Delegated to edns5.ultradns.biz, edns5.ultradns.com, edns5.ultradns.net, edns5.ultradns.org, ns0051.secondary.cloudflare.com, ns0200.secondary.cloudflare.com.
✓ Parent and zone agree #7

The parent delegation and the zone's NS records list the same nameservers.
✓ No glue needed #8

All nameservers are outside the zone, so no glue records are needed.
✓ All names resolve #9

Every nameserver name has an address and is not an alias.
✓ Nameservers in different networks #10

The nameservers are spread over 6 IPv4 /24s and 6 IPv6 /48s.
✓ 2 autonomous systems #11

The nameservers are spread over: AS12008 (VERCARA - Vercara, LLC, US): 8 addresses; AS13335 (CLOUDFLARENET - Cloudflare, Inc., US): 4 addresses.
✓ Nameserver names under 4 TLDs #12

Nameserver names use the TLDs .biz, .com, .net, .org.
✓ All reachable over IPv6 #13

Every nameserver has an IPv6 address.

Nameservers

warn

12 of 12 addresses answer authoritatively

Found

Nameserver	Answer	Recursion	TCP / EDNS	AXFR	Version
edns5.ultradns.biz 204.74.67.5	NOERROR, 3 ms, authoritative	no	yes / yes	refused	UltraDNS Nameserver
edns5.ultradns.biz 2610:a1:1015::205	NOERROR, 3 ms, authoritative	no	yes / yes	refused	UltraDNS Nameserver
edns5.ultradns.com 204.74.66.5	NOERROR, 3 ms, authoritative	no	yes / yes	refused	UltraDNS Nameserver
edns5.ultradns.com 2001:502:f3ff::205	NOERROR, 3 ms, authoritative	no	yes / yes	refused	UltraDNS Nameserver
edns5.ultradns.net 204.74.110.5	NOERROR, 16 ms, authoritative	no	yes / yes	refused	UltraDNS Nameserver
edns5.ultradns.net 2610:a1:1014::205	NOERROR, 3 ms, authoritative	no	yes / yes	refused	UltraDNS Nameserver
edns5.ultradns.org 204.74.111.5	NOERROR, 13 ms, authoritative	no	yes / yes	refused	UltraDNS Nameserver
edns5.ultradns.org 2001:502:4612::205	NOERROR, 30 ms, authoritative	no	yes / yes	refused	UltraDNS Nameserver
ns0051.secondary.cloudflare.com 162.159.32.52	NOERROR, 15 ms, authoritative	no	yes / yes	refused	2026.10.2
ns0051.secondary.cloudflare.com 2606:4700:51::a29f:2034	NOERROR, 16 ms, authoritative	no	yes / yes	refused	2026.10.2
ns0200.secondary.cloudflare.com 162.159.33.75	NOERROR, 16 ms, authoritative	no	yes / yes	refused	2026.10.2
ns0200.secondary.cloudflare.com 2606:4700:59::a29f:214b	NOERROR, 15 ms, authoritative	no	yes / yes	refused	2026.10.2

Checks

✓ All respond #14

All 12 nameserver addresses answered.
✓ All authoritative #15

Every responding nameserver answers authoritatively for the zone.
✓ No recursion #16

The nameservers do not answer recursive queries for other domains.
!

Software version disclosed

These nameservers report their software version via version.bind/version.server, which helps attackers find known vulnerabilities: ns0051.secondary.cloudflare.com: "2026.10.2"; ns0200.secondary.cloudflare.com: "2026.10.2". Hide or replace the version string.

#17
✓ Zone transfers refused #18

No nameserver allows a zone transfer to the public.
✓ TCP supported #19

All nameservers answer over TCP.
✓ EDNS supported #20

All nameservers support EDNS(0).
✓ Public addresses #21

All nameserver addresses are publicly routable.

SOA

pass

serial 2026092804 · primary edns5.ultradns.com

Found

Primary (MNAME): edns5.ultradns.com
Contact (RNAME): dns-admin.stargames.de
Serial: 2026092804
Refresh / retry: 7200 s / 1800 s
Expire: 2419200 s
Negative TTL: 600 s

Serial per nameserver

Nameserver	Serial
edns5.ultradns.biz (204.74.67.5)	2026092804
edns5.ultradns.biz (2610:a1:1015::205)	2026092804
edns5.ultradns.com (204.74.66.5)	2026092804
edns5.ultradns.com (2001:502:f3ff::205)	2026092804
edns5.ultradns.net (204.74.110.5)	2026092804
edns5.ultradns.net (2610:a1:1014::205)	2026092804
edns5.ultradns.org (204.74.111.5)	2026092804
edns5.ultradns.org (2001:502:4612::205)	2026092804
ns0051.secondary.cloudflare.com (162.159.32.52)	2026092804
ns0051.secondary.cloudflare.com (2606:4700:51::a29f:2034)	2026092804
ns0200.secondary.cloudflare.com (162.159.33.75)	2026092804
ns0200.secondary.cloudflare.com (2606:4700:59::a29f:214b)	2026092804

Checks

✓ Serial 2026092804 everywhere #22

All nameservers serve the same version of the zone.
✓ Timers within recommendations #23

SOA refresh 2h, retry 30m, expire 28d, negative TTL 10m.
✓ Primary is a public nameserver #24

The primary nameserver edns5.ultradns.com is one of the listed nameservers.
✓ Contact dns-admin@stargames.de #25

The SOA RNAME dns-admin.stargames.de means dns-admin@stargames.de.
✓ Date-based serial #26

The serial 2026092804 follows the YYYYMMDDnn convention (2026-09-28).

DNSSEC

warn

Not signed

Found

Validated by resolver: no

Checks

!

Not signed

The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.

#27

Records

info

19 records at the apex

Found

Read from: 204.74.67.5:53

Type	Value	TTL
SOA	edns5.ultradns.com. dns-admin.stargames.de. 2026092804 7200 1800 2419200 600	86400
NS	edns5.ultradns.biz.	86400
NS	edns5.ultradns.com.	86400
NS	edns5.ultradns.net.	86400
NS	edns5.ultradns.org.	86400
NS	ns0051.secondary.cloudflare.com.	86400
NS	ns0200.secondary.cloudflare.com.	86400
A	159.60.150.61	300
MX	10 mx1.greentube.com.	3600
MX	20 mx2.greentube.com.	3600
TXT	"MS=ms78619026"	3600
TXT	"_254bks6naye9t8wv7v9u9dv3gfbpi8k"	3600
TXT	"_ag6mmo260tz3gqnve2k6zlw8aubqyxv"	3600
TXT	"_k46tuqeb6idv9ah361mftypn7dczij5"	3600
TXT	"facebook-domain-verification=yb9uj0aoui6rvgumswv0wa2x4opquk"	3600
TXT	"google-site-verification=6L_ijxPuYp8Si2GIlDD5KopuEb7NPasTyB6DNRNp5Hk"	3600
TXT	"google-site-verification=aqFP3JdwujHEaJjyB7cE4HA6Cf84xtbqwBKpomdqacM"	3600
TXT	"google-site-verification=ig10ShW3CyhTqBesl0TIMH0PeAAqumnQY1VoG59rC1g"	3600
TXT	"v=spf1 include:spf.greentube.com include:u1975883.wl134.sendgrid.net include:spf.protection.outlook.com -all"	3600

Checks

✓ TTLs within range #32

TTLs: A 5m, MX 1h, NS 1d.
✓ No CNAME at the apex #33

The zone apex has no CNAME record.
i

Wildcard record

A random name under the zone resolves, so there is a wildcard (*) record. Typos and non-existent hosts resolve too, which can confuse mail and certificate checks.

#34
i

No CAA records

Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.

#35