eurecom.fr

Checked 22 October 2026, 02:49 UTC · via 8.8.8.8
✗Problems found
23 passed 2 warnings 1 failed 5 info

Registration

info

.fr country-code · GIP RENATER · expires 2027-03-07

Found

TLD
.fr (country-code)
ICANN policies apply
no
Registrar
GIP RENATER
Registered
7 March 1996
Last changed
30 April 2026
Expires
7 March 2027
Status
active
Registry nameservers
dns.eurecom.fr, ns-auth1.enst.fr, ns-auth2.enst.fr
RDAP server
https://rdap.nic.fr/

Checks

  • i
    .fr is a country-code TLD (ccTLD)
    Country-code TLD: governed by its local registry under national policy, not by an ICANN contract. Registrar accreditation, dispute resolution and RDAP/WHOIS rules are set by the registry.
    #1
  • ✓ TLD delegated and signed #2
    .fr is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2027-03-07 #3
    The registration is valid until 2027-03-07 (136 days).
  • i
    No transfer lock
    The domain has no transfer lock (status: active). A registrar lock protects against unauthorized transfers.
    #4
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

info

dns.eurecom.fr, ns-auth1.enst.fr, ns-auth2.enst.fr

Found

Parent zone
fr
Delegation from
d.nic.fr (194.0.9.1)
NS at the parent
dns.eurecom.fr, ns-auth1.enst.fr, ns-auth2.enst.fr
NS in the zone
dns.eurecom.fr, ns-auth1.enst.fr, ns-auth2.enst.fr
NameserverAddressesNetwork (AS)Glue
dns.eurecom.fr193.55.113.200AS2200 FR-RENATER - Renater, FR193.55.113.200
ns-auth1.enst.fr137.194.2.156 2a04:8ec0:0:2::156AS1712 FR-RENATER-ENST - Renater, FR AS1712 FR-RENATER-ENST - Renater, FR137.194.2.156 2a04:8ec0:0:2::156
ns-auth2.enst.fr137.194.2.157 2a04:8ec0:0:2::157AS1712 FR-RENATER-ENST - Renater, FR AS1712 FR-RENATER-ENST - Renater, FR137.194.2.157 2a04:8ec0:0:2::157

Checks

  • ✓ 3 nameservers #6
    Delegated to dns.eurecom.fr, ns-auth1.enst.fr, ns-auth2.enst.fr.
  • ✓ Parent and zone agree #7
    The parent delegation and the zone's NS records list the same nameservers.
  • ✓ Glue present and correct #8
    Glue is published for the nameservers inside the zone: dns.eurecom.fr.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • i
    One address family in one network
    all IPv6 addresses are in 2a04:8ec0::/48, while the other address family is spread over several networks.
    #10
  • ✓ 2 autonomous systems #11
    The nameservers are spread over: AS1712 (FR-RENATER-ENST - Renater, FR): 4 addresses; AS2200 (FR-RENATER - Renater, FR): 1 address.
  • i
    All nameserver names under .fr
    All nameserver names are under one TLD, so a problem with that TLD also makes the nameservers unreachable. Some operators use names under two TLDs for extra resilience.
    #12
  • i
    Partly IPv6
    These nameservers have no IPv6 address: dns.eurecom.fr.
    #13

Nameservers

fail

5 of 5 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
dns.eurecom.fr 193.55.113.200NOERROR, 27 ms, authoritativenono / yesrefused9.9.2-P2
ns-auth1.enst.fr 137.194.2.156NOERROR, 14 ms, authoritativenoyes / yesrefused-
ns-auth1.enst.fr 2a04:8ec0:0:2::156NOERROR, 14 ms, authoritativenoyes / yesrefused-
ns-auth2.enst.fr 137.194.2.157NOERROR, 15 ms, authoritativenoyes / yesrefused-
ns-auth2.enst.fr 2a04:8ec0:0:2::157NOERROR, 15 ms, authoritativenoyes / yesrefused-

Checks

  • ✓ All respond #14
    All 5 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • !
    Software version disclosed
    These nameservers report their software version via version.bind/version.server, which helps attackers find known vulnerabilities: dns.eurecom.fr: "9.9.2-P2". Hide or replace the version string.
    #17
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✗
    No DNS over TCP
    DNS over TCP is required (RFC 7766); without it, large answers such as DNSSEC responses fail. Not answering over TCP: dns.eurecom.fr (193.55.113.200): dial tcp 193.55.113.200:53: i/o timeout.
    #19
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

pass

serial 2017041206 · primary dns.eurecom.fr

Found

Primary (MNAME)
dns.eurecom.fr
Contact (RNAME)
delaye.smtp.eurecom.fr
Serial
2017041206
Refresh / retry
14400 s / 7200 s
Expire
1209600 s
Negative TTL
86400 s

Serial per nameserver

NameserverSerial
dns.eurecom.fr (193.55.113.200)2017041206
ns-auth1.enst.fr (137.194.2.156)2017041206
ns-auth1.enst.fr (2a04:8ec0:0:2::156)2017041206
ns-auth2.enst.fr (137.194.2.157)2017041206
ns-auth2.enst.fr (2a04:8ec0:0:2::157)2017041206

Checks

  • ✓ Serial 2017041206 everywhere #22
    All nameservers serve the same version of the zone.
  • ✓ Timers within recommendations #23
    SOA refresh 4h, retry 2h, expire 14d, negative TTL 1d.
  • ✓ Primary is a public nameserver #24
    The primary nameserver dns.eurecom.fr is one of the listed nameservers.
  • ✓ Contact delaye@smtp.eurecom.fr #25
    The SOA RNAME delaye.smtp.eurecom.fr means delaye@smtp.eurecom.fr.
  • ✓ Date-based serial #26
    The serial 2017041206 follows the YYYYMMDDnn convention (2017-04-12).

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

pass

19 records at the apex

Found

Read from
193.55.113.200:53
TypeValueTTL
SOAdns.eurecom.fr. delaye.smtp.eurecom.fr. 2017041206 14400 7200 1209600 864007200
NSns-auth1.enst.fr.7200
NSdns.eurecom.fr.7200
NSns-auth2.enst.fr.7200
A193.55.113.2227200
MX10 smtp2.eurecom.fr.7200
MX0 smtp.eurecom.fr.7200
MX10 smtp3.eurecom.fr.7200
TXT"mistral-domain-verification=d986848ce000f7fa621792ecbcf24102200b09b2"3600
TXT"MS=CA12FC706765E76C9E869F4DA4DC968560737077"3600
TXT"google-site-verification=a3uHDdklRBwbuYRJrrW3_U-GwjGVruRQhJS1LZcmN84"3600
TXT"google-gws-recovery-domain-verification=47874258"3600
TXT"cisco-ci-domain-verification=2f85089f0462ddc1164df3313ac914934d6d5e0b215727a1e8e76cda1e474775"3600
TXT"rCKvhYP+P04aVOskt8mXKcYy6J4="3600
TXT"v=spf1 mx ip4:193.55.113.210 ip4:193.55.113.211 ip4:193.55.113.213 include:alumnforce.org include:spf4.sbr-master.net include:spf.mailjet.com include:spf.tipimail.com ~all"3600
TXT"duo_sso_verification=NAoiAOWiceio8QywbhR42PBd9GFGaOH6BdRBRRzRyydNrp0I4IPD7TzMdoiLiaDR"3600
CAA0 issue "letsencrypt.org"7200
CAA0 issuewild "harica.gr"7200
CAA0 issue "harica.gr"7200

Checks

  • ✓ TTLs within range #32
    TTLs: A 2h, MX 2h, NS 2h. The NS TTL at the parent is 1h and in the zone 2h; resolvers may use either.
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • ✓ CAA restricts issuance #35
    Certificates may be issued by: letsencrypt.org, harica.gr.