@@ -51,0 +52,4 @@
+            case Dns.Status.NAME_NOT_FOUND: {
+                final var superDomain = superDomain(domainName);
+                final var verificationRequired = !superDomain.map(Dns::isRegistrarLevel).orElse(false)
+                        && assetEntity.getBookingItem() != null; // FIXME: or getParentAsset() == nuĺl? or extract method

@@ -51,0 +82,4 @@
+        return violations;
+    }
+
+    private static Optional<String> findTxtRecord(final Dns.Result result, final String expectedTxtRecordValue) {

@@ -0,0 +81,4 @@
+
+    @ParameterizedTest
+    @ValueSource(strings = {
+            "hostsharing.net", "hostsharing.org", "hostsharing.com", "hostsharing.coop"

@@ -249,6 +250,7 @@ class HsHostingAssetControllerAcceptanceTest extends ContextBasedTestWithCleanup
         void globalAdmin_canAddTopLevelAsset() {
 
             context.define("superuser-alex@hostsharing.net");
+            Dns.fakeResultForDomain("example.com", new Dns.Result(Dns.Status.NAME_NOT_FOUND, null, null));

@@ -51,3 +91,2 @@
         // then
-        assertThat(result).containsExactly(
-                "'identifier' expected to match '^((?!-)[A-Za-z0-9-]{1,63}(?<!-)\\.)+[A-Za-z]{2,12}', but is '"+testCase.domainName+"'"
+        assertThat(result).contains(

@@ -125,0 +351,4 @@
+        return parentAsset;
+    }
+
+    class DomainSetupBuilder {