Domain report: cnsmdp.fr

Registration

info

.fr country-code · NAMESHIELD · expires 2027-07-20

Found

TLD: .fr (country-code)
ICANN policies apply: no
Registrar: NAMESHIELD
Registered: 2 November 1997
Last changed: 23 July 2026
Expires: 20 July 2027
Status: client transfer prohibited
Registry nameservers: ns2.observatoiredesmarques.fr, ns3.nameshield.net, obs.ns1.fr
RDAP server: https://rdap.nic.fr/

Checks

i

.fr is a country-code TLD (ccTLD)

Country-code TLD: governed by its local registry under national policy, not by an ICANN contract. Registrar accreditation, dispute resolution and RDAP/WHOIS rules are set by the registry.

#1
✓ TLD delegated and signed #2

.fr is delegated in the root zone and DNSSEC-signed.
✓ Expires on 2027-07-20 #3

The registration is valid until 2027-07-20 (271 days).
✓ Transfer locked #4

Registry status: client transfer prohibited.
✓ Registry and delegation match #5

The nameservers registered at the registry are the ones published in DNS.

Delegation

pass

ns2.observatoiredesmarques.fr, ns3.nameshield.net, obs.ns1.fr

Found

Parent zone: fr
Delegation from: d.nic.fr (194.0.9.1)
NS at the parent: ns2.observatoiredesmarques.fr, ns3.nameshield.net, obs.ns1.fr
NS in the zone: ns2.observatoiredesmarques.fr, ns3.nameshield.net, obs.ns1.fr

Nameserver	Addresses	Network (AS)	Glue
ns2.observatoiredesmarques.fr	89.222.108.240 169.150.255.43 188.122.87.39 2a02:6ea0:cf2b::1 2a02:6ea0:c776::43 2a00:1630:210:3::39	AS60068 CDN77 - Datacamp Limited, GB AS60068 CDN77 - Datacamp Limited, GB AS49544 i3Dnet - i3D.net B.V, NL AS60068 CDN77 - Datacamp Limited, GB AS60068 CDN77 - Datacamp Limited, GB AS49544 i3Dnet - i3D.net B.V, NL	-
ns3.nameshield.net	195.181.171.194 37.19.207.80 45.63.17.113 2a02:6ea0:e216::1 2001:19f0:5:353:5400:ff:fe37:618f 2a02:6ea0:c140::1	AS60068 CDN77 - Datacamp Limited, GB AS60068 CDN77 - Datacamp Limited, GB AS20473 AS-VULTR - The Constant Company, LLC, US AS60068 CDN77 - Datacamp Limited, GB AS20473 AS-VULTR - The Constant Company, LLC, US AS60068 CDN77 - Datacamp Limited, GB	-
obs.ns1.fr	185.65.58.46 81.92.91.46 2a01:c8:300:111::46 2a01:c8:200:111::46	AS20756 NAMESHIELD - NAMESHIELD SAS, FR AS20756 NAMESHIELD - NAMESHIELD SAS, FR AS20756 NAMESHIELD - NAMESHIELD SAS, FR AS20756 NAMESHIELD - NAMESHIELD SAS, FR	-

Checks

✓ 3 nameservers #6

Delegated to ns2.observatoiredesmarques.fr, ns3.nameshield.net, obs.ns1.fr.
✓ Parent and zone agree #7

The parent delegation and the zone's NS records list the same nameservers.
✓ No glue needed #8

All nameservers are outside the zone, so no glue records are needed.
✓ All names resolve #9

Every nameserver name has an address and is not an alias.
✓ Nameservers in different networks #10

The nameservers are spread over 8 IPv4 /24s and 8 IPv6 /48s.
✓ 4 autonomous systems #11

The nameservers are spread over: AS20473 (AS-VULTR - The Constant Company, LLC, US): 2 addresses; AS20756 (NAMESHIELD - NAMESHIELD SAS, FR): 4 addresses; AS49544 (i3Dnet - i3D.net B.V, NL): 2 addresses; AS60068 (CDN77 - Datacamp Limited, GB): 8 addresses.
✓ Nameserver names under 2 TLDs #12

Nameserver names use the TLDs .fr, .net.
✓ All reachable over IPv6 #13

Every nameserver has an IPv6 address.

Nameservers

info

16 of 16 addresses answer authoritatively

Found

Nameserver	Answer	Recursion	TCP / EDNS	AXFR	Version
ns2.observatoiredesmarques.fr 89.222.108.240	NOERROR, 4 ms, authoritative	no	yes / yes	refused	Secure
ns2.observatoiredesmarques.fr 169.150.255.43	NOERROR, 5 ms, authoritative	no	yes / yes	refused	Secure
ns2.observatoiredesmarques.fr 188.122.87.39	NOERROR, 11 ms, authoritative	no	yes / yes	refused	Secure
ns2.observatoiredesmarques.fr 2a02:6ea0:cf2b::1	NOERROR, 4 ms, authoritative	no	yes / yes	refused	Secure
ns2.observatoiredesmarques.fr 2a02:6ea0:c776::43	NOERROR, 4 ms, authoritative	no	yes / yes	refused	Secure
ns2.observatoiredesmarques.fr 2a00:1630:210:3::39	NOERROR, 11 ms, authoritative	no	yes / yes	refused	Secure
ns3.nameshield.net 195.181.171.194	NOERROR, 107 ms, authoritative	no	yes / yes	refused	Secure
ns3.nameshield.net 37.19.207.80	NOERROR, 96 ms, authoritative	no	yes / yes	refused	Secure
ns3.nameshield.net 45.63.17.113	NOERROR, 85 ms, authoritative	no	yes / yes	refused	Secure
ns3.nameshield.net 2a02:6ea0:e216::1	NOERROR, 95 ms, authoritative	no	yes / yes	refused	Secure
ns3.nameshield.net 2001:19f0:5:353:5400:ff:fe37:618f	NOERROR, 86 ms, authoritative	no	yes / yes	refused	Secure
ns3.nameshield.net 2a02:6ea0:c140::1	NOERROR, 110 ms, authoritative	no	yes / yes	refused	Secure
obs.ns1.fr 185.65.58.46	NOERROR, 15 ms, authoritative	no	yes / yes	refused	Secure
obs.ns1.fr 81.92.91.46	NOERROR, 13 ms, authoritative	no	yes / yes	refused	Secure
obs.ns1.fr 2a01:c8:300:111::46	NOERROR, 13 ms, authoritative	no	yes / yes	refused	Secure
obs.ns1.fr 2a01:c8:200:111::46	NOERROR, 14 ms, authoritative	no	yes / yes	refused	Secure

Checks

✓ All respond #14

All 16 nameserver addresses answered.
✓ All authoritative #15

Every responding nameserver answers authoritatively for the zone.
✓ No recursion #16

The nameservers do not answer recursive queries for other domains.
i

Identifying string disclosed

These nameservers answer version queries with a string that is not a version number: ns2.observatoiredesmarques.fr: "Secure"; ns3.nameshield.net: "Secure"; obs.ns1.fr: "Secure".

#17
✓ Zone transfers refused #18

No nameserver allows a zone transfer to the public.
✓ TCP supported #19

All nameservers answer over TCP.
✓ EDNS supported #20

All nameservers support EDNS(0).
✓ Public addresses #21

All nameserver addresses are publicly routable.

SOA

pass

serial 2026082715 · primary obs.ns1.fr

Found

Primary (MNAME): obs.ns1.fr
Contact (RNAME): technical.nameshield.net
Serial: 2026082715
Refresh / retry: 28800 s / 7200 s
Expire: 604800 s
Negative TTL: 7200 s

Serial per nameserver

Nameserver	Serial
ns2.observatoiredesmarques.fr (89.222.108.240)	2026082715
ns2.observatoiredesmarques.fr (169.150.255.43)	2026082715
ns2.observatoiredesmarques.fr (188.122.87.39)	2026082715
ns2.observatoiredesmarques.fr (2a02:6ea0:cf2b::1)	2026082715
ns2.observatoiredesmarques.fr (2a02:6ea0:c776::43)	2026082715
ns2.observatoiredesmarques.fr (2a00:1630:210:3::39)	2026082715
ns3.nameshield.net (195.181.171.194)	2026082715
ns3.nameshield.net (37.19.207.80)	2026082715
ns3.nameshield.net (45.63.17.113)	2026082715
ns3.nameshield.net (2a02:6ea0:e216::1)	2026082715
ns3.nameshield.net (2001:19f0:5:353:5400:ff:fe37:618f)	2026082715
ns3.nameshield.net (2a02:6ea0:c140::1)	2026082715
obs.ns1.fr (185.65.58.46)	2026082715
obs.ns1.fr (81.92.91.46)	2026082715
obs.ns1.fr (2a01:c8:300:111::46)	2026082715
obs.ns1.fr (2a01:c8:200:111::46)	2026082715

Checks

✓ Serial 2026082715 everywhere #22

All nameservers serve the same version of the zone.
✓ Timers within recommendations #23

SOA refresh 8h, retry 2h, expire 7d, negative TTL 2h.
✓ Primary is a public nameserver #24

The primary nameserver obs.ns1.fr is one of the listed nameservers.
✓ Contact technical@nameshield.net #25

The SOA RNAME technical.nameshield.net means technical@nameshield.net.
✓ Date-based serial #26

The serial 2026082715 follows the YYYYMMDDnn convention (2026-08-27).

DNSSEC

warn

Not signed

Found

Validated by resolver: no

Checks

!

Not signed

The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.

#27

Records

info

12 records at the apex

Found

Read from: 89.222.108.240:53

Type	Value	TTL
SOA	obs.ns1.fr. technical.nameshield.net. 2026082715 28800 7200 604800 7200	3600
NS	ns2.observatoiredesmarques.fr.	86400
NS	ns3.nameshield.net.	86400
NS	obs.ns1.fr.	86400
A	34.253.142.240	3600
MX	5 mx-mibc-fr-05.mailinblack.com.	3600
TXT	"anthropic-domain-verification-chrvke=4F4NgSPgEC5JBdbmj1KcwDE4g"	3600
TXT	"MS=ms32937915"	3600
TXT	"k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z+FApQ6ra2VsXfbJP3HE6wAO0YTVEJt1TmeczhEd2Jiz/fcabIISgXEdSpTYJhb0ct0VJRxcg4c8c7wIDAQAB"	3600
TXT	"adobe-idp-site-verification=0c44fa0d64939bb3142509f13491a638ddd9e35863b2db67394d9d99637afb6e"	3600
TXT	"brevo-code:a1671541a1590d49d02c3bf840f37e53"	3600
TXT	"v=spf1 include:spf.protection.outlook.com include:message-business.com include:spf.mandrillapp.com include:spf.mailinblack.com ip4:158.255.65.134 include:spf.mailjet.com ip4:91.134.82.158 -all"	3600

Checks

✓ TTLs within range #32

TTLs: A 1h, MX 1h, NS 1d. The NS TTL at the parent is 1h and in the zone 1d; resolvers may use either.
✓ No CNAME at the apex #33

The zone apex has no CNAME record.
i

Wildcard record

A random name under the zone resolves, so there is a wildcard (*) record. Typos and non-existent hosts resolve too, which can confuse mail and certificate checks.

#34
i

No CAA records

Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.

#35