You will receive a verification request if suspicious or potentially abusive activity has been detected in connection with your domain.
 

This may be due to the following reasons, among others:

• Discrepancies in the registered owner information
• Indications of phishing, spam, or malware distribution
• Abuse reports received by the registry or registrar

Organizations and domain registries such as DENIC are required by the NIS2 Directive to investigate such reports and protect the integrity of their domain zone.
 

The verification request is intended to confirm your authorization and the legitimate use of the domain before any further action—such as a suspension—is taken. Please note that if there is strong suspicion, a suspension may be imposed immediately.
 

For more information, see the DENIC Table of Risk Levels (external link).

The NIS2 (Network and Information Security Directive 2) is an EU-wide regulation designed to strengthen cybersecurity. It requires companies and organizations to better protect their IT systems against cyberattacks.
 

The request for domain verification is therefore based on regulatory requirements such as the NIS2 Directive, which imposes stricter requirements for addressing potential misuse and verifying domain owners.
 

The verification request is therefore not arbitrary, but rather made within the framework of these legal requirements, which must be implemented by registries and registrars.

In the email you received, you will find all the information about which details you need to verify and the deadline for doing so.
 

1. Check your master data in the Customer Control Panel (CCP). Make sure you have entered all required information completely and correctly:
   • For businesses: Full company name, including legal form
   • Full name of a natural person (no department or job titles)
   • Legal address (no P.O. boxes)
   • Valid email address (no read-only addresses; no addresses hosted by netcup)
   • Phone number
2. Fix any incorrect data.
3. Submit proof of your identity via the link provided in the email. We currently accept both physical and electronic documents, such as scanned IDs, photographed documents, or extracts from the commercial register in PDF format.

Once verification is complete, you will receive an email confirming that your identity has been verified.

There may be various reasons why your verification was rejected, such as:

• Invalid, incomplete or expired identity documents
• Use of an identity document belonging to another person
• Not meeting the minimum age requirement
• Mismatched registration data (name, address, date of birth) compared to the data we have on file
• Identity document in different script: Please note that only documents using Latin-based character sets can be processed.

If you do not provide us with any documents, we will not be able to verify the information.

If you have any questions, please contact netcup Support.

If you do not verify your information within 14 days, your domain will first be taken offline (de-delegated) and will no longer be accessible.
 

If we still do not receive a response after that, the domain will be permanently deleted after an additional 90-day period.