conservateur.fr
!Passed with warnings
31 passed
1 warning
0 failed
3 info
Registration
info.fr country-code · GANDI · expires 2027-12-02
Found
- TLD
- .fr (country-code)
- ICANN policies apply
- no
- Registrar
- GANDI
- Registered
- 3 March 1999
- Last changed
- 18 February 2026
- Expires
- 2 December 2027
- Status
- server update prohibited, server transfer prohibited, server delete prohibited, server recover prohibited
- Registry nameservers
- ns-114-a.gandi.net, ns-142-b.gandi.net, ns-236-c.gandi.net, z.dns.gandi.net
- RDAP server
- https://rdap.nic.fr/
Checks
-
i#1.fr is a country-code TLD (ccTLD)
-
✓ TLD delegated and signed #2
-
✓ Expires on 2027-12-02 #3
-
✓ Transfer locked #4
-
✓ Registry and delegation match #5
Delegation
infons-114-a.gandi.net, ns-142-b.gandi.net, ns-236-c.gandi.net, z.dns.gandi.net
Found
- Parent zone
- fr
- Delegation from
- d.nic.fr (194.0.9.1)
- NS at the parent
- ns-114-a.gandi.net, ns-142-b.gandi.net, ns-236-c.gandi.net, z.dns.gandi.net
- NS in the zone
- ns-114-a.gandi.net, ns-142-b.gandi.net, ns-236-c.gandi.net, z.dns.gandi.net
| Nameserver | Addresses | Network (AS) | Glue |
|---|---|---|---|
| ns-114-a.gandi.net | 173.246.100.115 2001:4b98:aaaa::73 | AS29169 GANDI-AS - GANDI SAS, FR AS209453 GANDI-LIVEDNS - GANDI SAS, FR | - |
| ns-142-b.gandi.net | 213.167.230.143 2001:4b98:aaab::8f | AS209453 GANDI-LIVEDNS - GANDI SAS, FR AS209453 GANDI-LIVEDNS - GANDI SAS, FR | - |
| ns-236-c.gandi.net | 217.70.187.237 2604:3400:aaac::ed | AS209453 GANDI-LIVEDNS - GANDI SAS, FR AS209453 GANDI-LIVEDNS - GANDI SAS, FR | - |
| z.dns.gandi.net | 162.159.25.250 162.159.24.51 2400:cb00:2049:1::a29f:1833 2400:cb00:2049:1::a29f:19fa | AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US | - |
Checks
-
✓ 4 nameservers #6
-
✓ Parent and zone agree #7
-
✓ No glue needed #8
-
✓ All names resolve #9
-
✓ Nameservers in different networks #10
-
✓ 3 autonomous systems #11
-
i#12All nameserver names under .net
-
✓ All reachable over IPv6 #13
Nameservers
warn10 of 10 addresses answer authoritatively
Found
| Nameserver | Answer | Recursion | TCP / EDNS | AXFR | Version |
|---|---|---|---|---|---|
| ns-114-a.gandi.net 173.246.100.115 | NOERROR, 3 ms, authoritative | no | yes / yes | refused | - |
| ns-114-a.gandi.net 2001:4b98:aaaa::73 | NOERROR, 4 ms, authoritative | no | yes / yes | refused | - |
| ns-142-b.gandi.net 213.167.230.143 | NOERROR, 4 ms, authoritative | no | yes / yes | refused | - |
| ns-142-b.gandi.net 2001:4b98:aaab::8f | NOERROR, 3 ms, authoritative | no | yes / yes | refused | - |
| ns-236-c.gandi.net 217.70.187.237 | NOERROR, 4 ms, authoritative | no | yes / yes | refused | - |
| ns-236-c.gandi.net 2604:3400:aaac::ed | NOERROR, 4 ms, authoritative | no | yes / yes | refused | - |
| z.dns.gandi.net 162.159.25.250 | NOERROR, 31 ms, authoritative | no | yes / yes | refused | 2026.10.8 |
| z.dns.gandi.net 162.159.24.51 | NOERROR, 31 ms, authoritative | no | yes / yes | refused | 2026.10.8 |
| z.dns.gandi.net 2400:cb00:2049:1::a29f:1833 | NOERROR, 32 ms, authoritative | no | yes / yes | refused | 2026.10.8 |
| z.dns.gandi.net 2400:cb00:2049:1::a29f:19fa | NOERROR, 32 ms, authoritative | no | yes / yes | refused | 2026.10.8 |
Checks
-
✓ All respond #14
-
✓ All authoritative #15
-
✓ No recursion #16
-
!#17Software version disclosed
-
✓ Zone transfers refused #18
-
✓ TCP supported #19
-
✓ EDNS supported #20
-
✓ Public addresses #21
SOA
infoserial 1792627200 · primary ns1.gandi.net
Found
- Primary (MNAME)
- ns1.gandi.net
- Contact (RNAME)
- hostmaster.gandi.net
- Serial
- 1792627200
- Refresh / retry
- 10800 s / 3600 s
- Expire
- 604800 s
- Negative TTL
- 10800 s
Serial per nameserver
| Nameserver | Serial |
|---|---|
| ns-114-a.gandi.net (173.246.100.115) | 1792627200 |
| ns-114-a.gandi.net (2001:4b98:aaaa::73) | 1792627200 |
| ns-142-b.gandi.net (213.167.230.143) | 1792627200 |
| ns-142-b.gandi.net (2001:4b98:aaab::8f) | 1792627200 |
| ns-236-c.gandi.net (217.70.187.237) | 1792627200 |
| ns-236-c.gandi.net (2604:3400:aaac::ed) | 1792627200 |
| z.dns.gandi.net (162.159.25.250) | 1792627200 |
| z.dns.gandi.net (162.159.24.51) | 1792627200 |
| z.dns.gandi.net (2400:cb00:2049:1::a29f:1833) | 1792627200 |
| z.dns.gandi.net (2400:cb00:2049:1::a29f:19fa) | 1792627200 |
Checks
-
✓ Serial 1792627200 everywhere #22
-
✓ Timers within recommendations #23
-
i#24Hidden master
-
✓ Contact hostmaster@gandi.net #25
-
✓ Timestamp serial #26
DNSSEC
passSigned, DS published at parent
Found
- Validated by resolver
- yes
- Denial of existence
- NSEC3
- NSEC3
- 0 iterations, 0-byte salt
- Signatures valid until
- 5 November 2026
DS at the parent
| Key tag | Algorithm | Digest | Matches a key |
|---|---|---|---|
| 43836 | ECDSAP256SHA256 (13) | SHA256 81128AE31EEF2909… | yes |
DNSKEY in the zone
| Key tag | Role | Algorithm |
|---|---|---|
| 43836 | ZSK (256) | ECDSAP256SHA256 (13) |
Checks
-
✓ Signed and validated #27
-
✓ DS matches a key #28
-
✓ Modern algorithms #29
-
✓ Signatures valid until 2026-11-05 #30
-
✓ NSEC3 as recommended #31
Records
pass27 records at the apex
Found
- Read from
- 173.246.100.115:53
| Type | Value | TTL |
|---|---|---|
| SOA | ns1.gandi.net. hostmaster.gandi.net. 1792627200 10800 3600 604800 10800 | 10800 |
| NS | ns-236-c.gandi.net. | 10800 |
| NS | ns-142-b.gandi.net. | 10800 |
| NS | ns-114-a.gandi.net. | 10800 |
| NS | z.dns.gandi.net. | 10800 |
| A | 162.159.135.42 | 10800 |
| A | 162.159.134.42 | 10800 |
| MX | 10 vade-mx-fr02.hornetsecurity.com. | 3600 |
| MX | 20 vade-mx-eu-fallback01.hornetsecurity.com. | 3600 |
| MX | 10 vade-mx-fr01.hornetsecurity.com. | 3600 |
| MX | 20 vade-mx-eu-fallback02.hornetsecurity.com. | 3600 |
| TXT | "v=spf1 include:_spf.conservateur.fr include:messagereach.com include:spf.protection.outlook.com include:_spf.automattic.com include:_spf.general.tran" "sactional-mail-a.com include:spf.hornetsecurity.com ip4:141.253.98.248 ip4:141.253.118.199 ip4:158.178.197.184 -all" | 10800 |
| TXT | "atlassian-domain-verification=ad5Qg8oWmXnlfaQIM8ecbdUahyqmXGKE830ktA5N3iCY0K6u754yam4kxXstQ1fz" | 10800 |
| TXT | "globalsign-domain-verification=wSQJeBmqOXUB1KjOAipMrag93ZFYoG_jGxcuBFUaii" | 10800 |
| TXT | "atlassian-sending-domain-verification=5f9400e2-8efe-4549-80f9-d48617943c4f" | 10800 |
| TXT | "google-site-verification=FKtOqHed4EjUCB0OUUm4Iqvg4xYed_M3EyjfM0aKu4E" | 10800 |
| TXT | "lUONYt4AgAwiG+3gtSPsIbLmFyzScrhFX0ZmM8IzBF9P79i3fPRlcStKqRmRqqMdn0bQ6BbMc93DdB5jrWvwZA==" | 10800 |
| TXT | "brevo-code:971ed2e614529addac22cde2426238fd" | 10800 |
| TXT | "facebook-domain-verification=kl7c32bptxseqhjdi4ne3i09njzzrx" | 10800 |
| TXT | "docusign=5b9338a8-6ecb-4faa-bcc2-2bae6f1fcf56" | 10800 |
| TXT | "MS=470745FEA9B8BBD997A3F08BA0D5842FC1270DB6" | 10800 |
| TXT | " _8mqnxlv8hnybkrsmhhnk9nwmriy888v" | 10800 |
| TXT | "cisco-ci-domain-verification=239636fb1b671aa33e5ea9df92d78ec15db533e38dd25047a9af1da7a0021650" | 10800 |
| CAA | 0 issue "sectigo.com" | 10800 |
| CAA | 0 issue "pki.goog" | 10800 |
| CAA | 0 issue "letsencrypt.org" | 10800 |
| CAA | 0 issue "digicert.com" | 10800 |
Checks
-
✓ TTLs within range #32
-
✓ No CNAME at the apex #33
-
✓ No wildcard #34
-
✓ CAA restricts issuance #35