You will receive a verification request if suspicious or potentially abusive activity has been detected in connection with your domain.
 

This may be due to the following reasons, among others:

• Discrepancies in the registered owner information
• Indications of phishing, spam, or malware distribution
• Abuse reports received by the registry or registrar

Organizations and domain registries such as DENIC are required by the NIS2 Directive to investigate such reports and protect the integrity of their domain zone.
 

The verification request is intended to confirm your authorization and the legitimate use of the domain before any further action—such as a suspension—is taken. Please note that if there is strong suspicion, a suspension may be imposed immediately.
 

For more information, see the DENIC Table of Risk Levels (external link).

The NIS2 (Network and Information Security Directive 2) is an EU-wide regulation designed to strengthen cybersecurity. It requires companies and organizations to better protect their IT systems against cyberattacks.
 

The request for domain verification is therefore based on regulatory requirements such as the NIS2 Directive, which imposes stricter requirements for addressing potential misuse and verifying domain owners.
 

The verification request is therefore not arbitrary, but rather made within the framework of these legal requirements, which must be implemented by registries and registrars.

In the email you received, you will find all the information about which details you need to verify and the deadline for doing so.
 

1. Check your master data in the Customer Control Panel (CCP). Make sure you have entered all required information completely and correctly:
   • For businesses: Full company name, including legal form
   • Full name of a natural person (no department or job titles)
   • Legal address (no P.O. boxes)
   • Valid email address (no read-only addresses; no addresses hosted by netcup)
   • Phone number
2. Fix any incorrect data.
3. Submit proof of your identity via the link provided in the email. We currently accept both physical and electronic documents, such as scanned IDs, photographed documents, or extracts from the commercial register in PDF format.

If you do not verify your information within 14 days, your domain will first be taken offline (de-delegated) and will no longer be accessible.
 

If we still do not receive a response after that, the domain will be permanently deleted after an additional 90-day period.