Domain report: ferrandi-paris.fr

Registration

info

.fr country-code · ECRITEL · expires 2027-05-17

i

.fr is a country-code TLD (ccTLD)

Country-code TLD: governed by its local registry under national policy, not by an ICANN contract. Registrar accreditation, dispute resolution and RDAP/WHOIS rules are set by the registry.

#1
✓ TLD delegated and signed #2

.fr is delegated in the root zone and DNSSEC-signed.
✓ Expires on 2027-05-17 #3

The registration is valid until 2027-05-17 (207 days).
i

No transfer lock

The domain has no transfer lock (status: active). A registrar lock protects against unauthorized transfers.

#4
✓ Registry and delegation match #5

The nameservers registered at the registry are the ones published in DNS.

warn

cci-idf-psk.oxyd.net, ns3.oxyd.net

Nameserver	Addresses	Network (AS)	Glue
cci-idf-psk.oxyd.net	87.252.12.32	AS8304 ECRITEL-FRANCE - Ecritel SASU, FR	-
ns3.oxyd.net	195.13.58.73	AS8304 ECRITEL-FRANCE - Ecritel SASU, FR	-

i

2 nameservers

Two nameservers meet the minimum; RFC 2182 recommends three or more for important zones: cci-idf-psk.oxyd.net, ns3.oxyd.net.

#6
✓ Parent and zone agree #7

The parent delegation and the zone's NS records list the same nameservers.
✓ No glue needed #8

All nameservers are outside the zone, so no glue records are needed.
✓ All names resolve #9

Every nameserver name has an address and is not an alias.
✓ Nameservers in different networks #10

The nameservers are spread over 2 IPv4 /24s and 0 IPv6 /48s.
i

All nameservers in one AS

All nameserver addresses are announced by one network operator (AS8304 (ECRITEL-FRANCE - Ecritel SASU, FR): 2 addresses). An outage or attack on that network affects all nameservers; large anycast providers mitigate this, but a secondary DNS provider adds independence.

#11
i

All nameserver names under .net

All nameserver names are under one TLD, so a problem with that TLD also makes the nameservers unreachable. Some operators use names under two TLDs for extra resilience.

#12
!

No IPv6

None of the nameservers has an IPv6 address, so IPv6-only resolvers can't reach them.

#13

info

2 of 2 addresses answer authoritatively

Nameserver	Answer	Recursion	TCP / EDNS	AXFR	Version
cci-idf-psk.oxyd.net 87.252.12.32	NOERROR, 14 ms, authoritative	no	yes / yes	refused	none
ns3.oxyd.net 195.13.58.73	NOERROR, 17 ms, authoritative	no	yes / yes	refused	-

✓ All respond #14

All 2 nameserver addresses answered.
✓ All authoritative #15

Every responding nameserver answers authoritatively for the zone.
✓ No recursion #16

The nameservers do not answer recursive queries for other domains.
i

Identifying string disclosed

These nameservers answer version queries with a string that is not a version number: cci-idf-psk.oxyd.net: "none".

#17
✓ Zone transfers refused #18

No nameserver allows a zone transfer to the public.
✓ TCP supported #19

All nameservers answer over TCP.
✓ EDNS supported #20

All nameservers support EDNS(0).
✓ Public addresses #21

All nameserver addresses are publicly routable.

pass

serial 2026061806 · primary cci-idf-psk.oxyd.net

Nameserver	Serial
cci-idf-psk.oxyd.net (87.252.12.32)	2026061806
ns3.oxyd.net (195.13.58.73)	2026061806

✓ Serial 2026061806 everywhere #22

All nameservers serve the same version of the zone.
✓ Timers within recommendations #23

SOA refresh 3h, retry 1h, expire 7d, negative TTL 3h.
✓ Primary is a public nameserver #24

The primary nameserver cci-idf-psk.oxyd.net is one of the listed nameservers.
✓ Contact obournisien@cci-paris-idf.fr #25

The SOA RNAME obournisien.cci-paris-idf.fr means obournisien@cci-paris-idf.fr.
✓ Date-based serial #26

The serial 2026061806 follows the YYYYMMDDnn convention (2026-06-18).

warn

Not signed

info

18 records at the apex

Type	Value	TTL
SOA	cci-idf-psk.oxyd.net. obournisien.cci-paris-idf.fr. 2026061806 10800 3600 604800 10800	600
NS	ns3.oxyd.net.	600
NS	cci-idf-psk.oxyd.net.	600
A	52.218.36.244	600
MX	0 ferrandiparis-fr02b.mail.protection.outlook.com.	600
TXT	"A347A78A84DBB78C8C7CC6F91CF71D97B9A77D7B\"\" \""	600
TXT	"brevo-code:5f230b1500c7770a9289496bd6871363"	600
TXT	"brevo-code:280a22b35769fe0b8f895fe3aaa04dcc"	600
TXT	"MS=ms66872582"	600
TXT	"_globalsign-domain-verification=8Jj50gK8qhbSdUBpT_LYIqL_Fb6YxmWmJB-fQDo1qA"	600
TXT	"v=spf1 mx a:mailccir.cci-paris-idf.fr include:_spf.google.com include:spf.sendinblue.com ip4:79.99.164.117 ip4:80.247.239.27 ip6:2a00:1a60:54ef:1b00::1/56 include:8263109.spf06.hubspotemail.net include:spf.protection.outlook.com include:_spf.cci-paris-idf" ".fr ~all"	600
TXT	"d365mktkey=X9IvoWGUUDYjB66cI03mQT1WK2zET2xxOA6UWQ8wlnox"	600
TXT	"F422508B639E3087069B36364600D38ED6A34B9A\"\" \""	600
TXT	"google-site-verification=xi6p7eULCHtCkomOR-dwzOj76Pi4Dqg_dG_D3P35Q0k"	600
TXT	"google-site-verification=02jFhSv_DFcUpYzhAWFM6abuQ-4gpfZQ9UaKGdC6gww"	600
TXT	"MS=ms18128159"	600
TXT	"Sendinblue-code:e519bada0d63aa2c12594f2cc43ff4d5"	600
TXT	"_globalsign-domain-verification=rVigrdXlmjcKt_rg13rPqBBpnjcMDA4ruzqX6Xj5BF"	600

✓ TTLs within range #32

TTLs: A 10m, MX 10m, NS 10m. The NS TTL at the parent is 1h and in the zone 10m; resolvers may use either.
✓ No CNAME at the apex #33

The zone apex has no CNAME record.
✓ No wildcard #34

Names that don't exist return NXDOMAIN.
i

No CAA records

Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.

#35