Domain report: swm.de

Registration

info

.de country-code

Found

TLD: .de (country-code)
ICANN policies apply: no

Checks

i

.de is a country-code TLD (ccTLD)

Country-code TLD: governed by its local registry under national policy, not by an ICANN contract. Registrar accreditation, dispute resolution and RDAP/WHOIS rules are set by the registry.

#1
✓ TLD delegated and signed #2

.de is delegated in the root zone and DNSSEC-signed.
i

Registration data not available

No registration data via RDAP: the registry of .de offers no RDAP service. Many ccTLD registries don't offer RDAP; check the registry's WHOIS instead.

#3

Delegation

info

ns.swm.de, ns2.m-online.net, ns2.swm.de

Found

Parent zone: de
Delegation from: a.nic.de (194.0.0.53)
NS at the parent: ns.swm.de, ns2.m-online.net, ns2.swm.de
NS in the zone: ns.swm.de, ns2.m-online.net, ns2.swm.de

Nameserver	Addresses	Network (AS)	Glue
ns.swm.de	188.164.233.141 2a03:a080:200:102::a	AS198145 SWM-AS - SWM Services GmbH, DE AS198145 SWM-AS - SWM Services GmbH, DE	188.164.233.141 2a03:a080:200:102::a
ns2.m-online.net	212.18.3.8	AS8767 MNET-AS - M-net Telekommunikations GmbH, DE	-
ns2.swm.de	188.164.233.142 2a03:a080:200:102::b	AS198145 SWM-AS - SWM Services GmbH, DE AS198145 SWM-AS - SWM Services GmbH, DE	188.164.233.142 2a03:a080:200:102::b

Checks

✓ 3 nameservers #6

Delegated to ns.swm.de, ns2.m-online.net, ns2.swm.de.
✓ Parent and zone agree #7

The parent delegation and the zone's NS records list the same nameservers.
✓ Glue present and correct #8

Glue is published for the nameservers inside the zone: ns.swm.de, ns2.swm.de.
✓ All names resolve #9

Every nameserver name has an address and is not an alias.
i

One address family in one network

all IPv6 addresses are in 2a03:a080:200::/48, while the other address family is spread over several networks.

#10
✓ 2 autonomous systems #11

The nameservers are spread over: AS198145 (SWM-AS - SWM Services GmbH, DE): 4 addresses; AS8767 (MNET-AS - M-net Telekommunikations GmbH, DE): 1 address.
✓ Nameserver names under 2 TLDs #12

Nameserver names use the TLDs .de, .net.
i

Partly IPv6

These nameservers have no IPv6 address: ns2.m-online.net.

#13

Nameservers

pass

5 of 5 addresses answer authoritatively

Found

Nameserver	Answer	Recursion	TCP / EDNS	AXFR	Version
ns.swm.de 188.164.233.141	NOERROR, 7 ms, authoritative	no	yes / yes	refused	-
ns.swm.de 2a03:a080:200:102::a	NOERROR, 8 ms, authoritative	no	yes / yes	refused	-
ns2.m-online.net 212.18.3.8	NOERROR, 10 ms, authoritative	no	yes / yes	refused	-
ns2.swm.de 188.164.233.142	NOERROR, 6 ms, authoritative	no	yes / yes	refused	-
ns2.swm.de 2a03:a080:200:102::b	NOERROR, 8 ms, authoritative	no	yes / yes	refused	-

Checks

✓ All respond #14

All 5 nameserver addresses answered.
✓ All authoritative #15

Every responding nameserver answers authoritatively for the zone.
✓ No recursion #16

The nameservers do not answer recursive queries for other domains.
✓ No version disclosed #17

The nameservers don't reveal their software version.
✓ Zone transfers refused #18

No nameserver allows a zone transfer to the public.
✓ TCP supported #19

All nameservers answer over TCP.
✓ EDNS supported #20

All nameservers support EDNS(0).
✓ Public addresses #21

All nameserver addresses are publicly routable.

SOA

warn

serial 2026101901 · primary ns.swm.de

Found

Primary (MNAME): ns.swm.de
Contact (RNAME): firewalladm.swm.de
Serial: 2026101901
Refresh / retry: 3600 s / 7200 s
Expire: 604800 s
Negative TTL: 60 s

Serial per nameserver

Nameserver	Serial
ns.swm.de (188.164.233.141)	2026101901
ns.swm.de (2a03:a080:200:102::a)	2026101901
ns2.m-online.net (212.18.3.8)	2026101901
ns2.swm.de (188.164.233.142)	2026101901
ns2.swm.de (2a03:a080:200:102::b)	2026101901

Checks

✓ Serial 2026101901 everywhere #22

All nameservers serve the same version of the zone.
!

Unusual SOA timers

retry 2h should be shorter than refresh 1h; negative caching TTL (minimum) 1m is outside 5m–1d (RFC 2308 recommends 1–3 hours). Current values: refresh 1h, retry 2h, expire 7d, negative TTL 1m.

#23
✓ Primary is a public nameserver #24

The primary nameserver ns.swm.de is one of the listed nameservers.
✓ Contact firewalladm@swm.de #25

The SOA RNAME firewalladm.swm.de means firewalladm@swm.de.
✓ Date-based serial #26

The serial 2026101901 follows the YYYYMMDDnn convention (2026-10-19).

DNSSEC

warn

Not signed

Found

Validated by resolver: no

Checks

!

Not signed

The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.

#27

Records

pass

41 records at the apex

Found

Read from: 188.164.233.141:53

Type	Value	TTL
SOA	ns.swm.de. firewalladm.swm.de. 2026101901 3600 7200 604800 60	86400
NS	ns2.swm.de.	86400
NS	ns2.m-online.net.	86400
NS	ns.swm.de.	86400
A	188.164.238.38	3600
MX	10 mail2.swm.de.	86400
MX	10 mail1.swm.de.	86400
TXT	"yoUJrxk1CRSNU2DWuDvn3bRQcyVR4GIW4lHprjzk3aM="	3600
TXT	"google-site-verification=nTsZEgx9UNy843KPdBE8cVp60HFE08c3sD2mg3c_34w"	3600
TXT	"amazonses:MsipH4Q0t5JChrlPti2WbdYlviEzkW/yhJ43gDd0UJo="	3600
TXT	"_globalsign-domain-verification=5hU6tKaXOMNuPpViW0ytScLEoIdUSQ4-hjbaLn-56v"	3600
TXT	"_telesec-domain-validation=336655_2024-06-07_BKGT3QbFTI982pbZ5TlpTMIEbBgvSfVmPfB6Xfzb0G80E5FN6I"	3600
TXT	"_telesec-domain-validation=352920_2025-09-12_GfIGvOefhP7iDY1t1HRqJ2LLcAqfvg7lmmyW8WkFHysAMBe9BS"	3600
TXT	"RREtQuRtv4owWjCTr2NS+KWLep9JI5gLrjbviS47jkE="	3600
TXT	"cisco-ci-domain-verification=2c171647afe10bd1c9047d2b46996f0a1a24e13e04081cc00485110c34f028bb"	3600
TXT	"security_contact=mailto:security@swm.de"	3600
TXT	"_globalsign-domain-verification=IW2yNbe9iIaoEplVzZocG7Oay8zgTBHZ3g9fPojjsn"	3600
TXT	"gvVfWd4TbqdB+UNNlzNrr4TVVcAlbwj1h/9pD1QyOOQ="	3600
TXT	"MS=ms21800455"	3600
TXT	"_telesec-domain-validation=2023-03-31_5L4fQwRTFay2s87L5jqyicdtDaog6fPkY2w0iq79ypHQsksla7"	3600
TXT	"gm2ESsJn+SJQujnQVNsthNBQBokAKXQYHD1rIbRJ7ys="	3600
TXT	"v=spf1 ip4:188.164.233.0/24 ip4:195.140.184.0/22 ip4:91.192.40.0/22 include:agenturserver.de include:spf.protection.outlook.com include:amazonses.com ip4:188.164.232.245" " include:spf.mailjet.com include:_spf.ntgt.de include:spf.crsend.com include:recruitmail.com ip4:93.191.162.0/24 ip4:93.191.164.0/24 ip4:85.236.47.112/28 ip4:62.116.177.96/28 -all"	3600
TXT	"mindmanager-verification=a1336c6de4926f9e55ac3a0feb088f21479075275d66eeae2cd0f96d62d561a8"	3600
TXT	"autodesk-domain-verification=WIGkJ0rcBOJqSQc-FFVr"	3600
TXT	"_telesec-domain-validation=2026-03-26_lOvfxBj1d0ZBaq5FVUE6NZhL6ZkMMYLUwrAkW51sugjXIid05D"	3600
TXT	"ms-domain-verification=17ade020-113a-4152-916b-c07c57f8aff7"	3600
TXT	"docker-verification=739ff095-ba12-4bff-85e2-5576496686a5"	3600
TXT	"_telesec-domain-validation=335332_2024-05-08_fp60OEOoiIQXquuchuTs8qsjyUu4En3k386qQ2Y4kobuYOynqD"	3600
TXT	"CjY3t8t1w/BMz2cw+vQucF/Dw/pUGblWIO4wCrArfOs="	3600
TXT	"_globalsign-domain-verification=n9MnbBySGQyGAv3fuaAaucWKpMptQtRbpoK31r6NtZ"	3600
TXT	"apple-domain-verification=nO5pfM7dl2jwtSli"	3600
TXT	"adobe-idp-site-verification=d91135b0fa7276cad3079fd6d3bf476617822a8e3e85d7d154d53e017f15617a"	3600
TXT	"google-site-verification=_8HV6QNDKhfB-2AmJQkDuJ2GXfHkieKqjLS4rN7EiQ8"	3600
TXT	"atlassian-domain-verification=HgWOfQH4TOdILcdCag2POyz94luQHKga4r24Qq63oogtUbg4gcvfbdagwCXockwN"	3600
TXT	"cisco-ci-domain-verification=75234d1e1a04e58042177e3f859a5d65665df82834357cac9ae4b929aa804d83"	3600
TXT	"_globalsign-domain-verification=s5X3MyiNbkcvW42_oY9-j8SF6xuqFdrFg0VlKivu2o"	3600
CAA	0 issue "digicert.com"	86400
CAA	0 issuewild "globalsign.com"	86400
CAA	0 issue "globalsign.com"	86400
CAA	0 issue "telesec.de"	86400
CAA	0 issuewild "telesec.de"	86400

Checks

✓ TTLs within range #32

TTLs: A 1h, MX 1d, NS 1d.
✓ No CNAME at the apex #33

The zone apex has no CNAME record.
✓ No wildcard #34

Names that don't exist return NXDOMAIN.
✓ CAA restricts issuance #35

Certificates may be issued by: digicert.com, globalsign.com, telesec.de.