nantesmetropole.fr

Checked 22 October 2026, 04:30 UTC · via 8.8.8.8
!Passed with warnings
22 passed 4 warnings 0 failed 5 info

Registration

info

.fr country-code · SFR · expires 2027-01-13

Found

TLD
.fr (country-code)
ICANN policies apply
no
Registrar
SFR
Registered
4 February 2004
Last changed
28 February 2026
Expires
13 January 2027
Status
active
Registry nameservers
mvinct1.mairie-nantes.fr, ns2.sfrbusinessteam.fr
RDAP server
https://rdap.nic.fr/

Checks

  • i
    .fr is a country-code TLD (ccTLD)
    Country-code TLD: governed by its local registry under national policy, not by an ICANN contract. Registrar accreditation, dispute resolution and RDAP/WHOIS rules are set by the registry.
    #1
  • ✓ TLD delegated and signed #2
    .fr is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2027-01-13 #3
    The registration is valid until 2027-01-13 (83 days).
  • i
    No transfer lock
    The domain has no transfer lock (status: active). A registrar lock protects against unauthorized transfers.
    #4
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

warn

mvinct1.mairie-nantes.fr, ns2.sfrbusinessteam.fr

Found

Parent zone
fr
Delegation from
d.nic.fr (194.0.9.1)
NS at the parent
mvinct1.mairie-nantes.fr, ns2.sfrbusinessteam.fr
NS in the zone
mvinct1.mairie-nantes.fr, ns2.sfrbusinessteam.fr
NameserverAddressesNetwork (AS)Glue
mvinct1.mairie-nantes.fr80.82.231.234AS47608 GIGALIS-AS - GROUPEMENT D_INTERET PUBLIC GIGALIS, FR80.82.231.234
ns2.sfrbusinessteam.fr84.96.147.1AS15557 LDCOMNET - Societe Francaise Du Radiotelephone - SFR SA, FR84.96.147.1

Checks

  • i
    2 nameservers
    Two nameservers meet the minimum; RFC 2182 recommends three or more for important zones: mvinct1.mairie-nantes.fr, ns2.sfrbusinessteam.fr.
    #6
  • ✓ Parent and zone agree #7
    The parent delegation and the zone's NS records list the same nameservers.
  • ✓ No glue needed #8
    All nameservers are outside the zone, so no glue records are needed.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 2 IPv4 /24s and 0 IPv6 /48s.
  • ✓ 2 autonomous systems #11
    The nameservers are spread over: AS15557 (LDCOMNET - Societe Francaise Du Radiotelephone - SFR SA, FR): 1 address; AS47608 (GIGALIS-AS - GROUPEMENT D_INTERET PUBLIC GIGALIS, FR): 1 address.
  • i
    All nameserver names under .fr
    All nameserver names are under one TLD, so a problem with that TLD also makes the nameservers unreachable. Some operators use names under two TLDs for extra resilience.
    #12
  • !
    No IPv6
    None of the nameservers has an IPv6 address, so IPv6-only resolvers can't reach them.
    #13

Nameservers

warn

2 of 2 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
mvinct1.mairie-nantes.fr 80.82.231.234NOERROR, 31 ms, authoritativenoyes / yesrefused-
ns2.sfrbusinessteam.fr 84.96.147.1NOERROR, 13 ms, authoritativenoyes / yesrefusedMicrosoft DNS 6.1.7601 (1DB15F75)

Checks

  • ✓ All respond #14
    All 2 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • !
    Software version disclosed
    These nameservers report their software version via version.bind/version.server, which helps attackers find known vulnerabilities: ns2.sfrbusinessteam.fr: "Microsoft DNS 6.1.7601 (1DB15F75)". Hide or replace the version string.
    #17
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

warn

serial 2014125784 · primary mvinct1.mairie-nantes.fr

Found

Primary (MNAME)
mvinct1.mairie-nantes.fr
Contact (RNAME)
exploitation.mairie-nantes.fr
Serial
2014125784
Refresh / retry
3600 s / 3600 s
Expire
604800 s
Negative TTL
3600 s

Serial per nameserver

NameserverSerial
mvinct1.mairie-nantes.fr (80.82.231.234)2014125784
ns2.sfrbusinessteam.fr (84.96.147.1)2014125784

Checks

  • ✓ Serial 2014125784 everywhere #22
    All nameservers serve the same version of the zone.
  • !
    Unusual SOA timers
    retry 1h should be shorter than refresh 1h. Current values: refresh 1h, retry 1h, expire 7d, negative TTL 1h.
    #23
  • ✓ Primary is a public nameserver #24
    The primary nameserver mvinct1.mairie-nantes.fr is one of the listed nameservers.
  • ✓ Contact exploitation@mairie-nantes.fr #25
    The SOA RNAME exploitation.mairie-nantes.fr means exploitation@mairie-nantes.fr.
  • ✓ Timestamp serial #26
    The serial 2014125784 is a Unix timestamp (2033-10-28 15:23 UTC).

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

info

12 records at the apex

Found

Read from
80.82.231.234:53
TypeValueTTL
SOAmvinct1.mairie-nantes.fr. exploitation.mairie-nantes.fr. 2014125784 3600 3600 604800 360086400
NSns2.sfrbusinessteam.fr.3600
NSmvinct1.mairie-nantes.fr.3600
A185.43.60.1663600
MX10 nantesmetropole-fr.mail.protection.outlook.com.1800
TXT"MS=4915FF1F682CCECE3EB8A9B316DFCCCE34B77D20"86400
TXT"asv=e43d9ec8c11c657c2565d6cb19892158"86400
TXT"v=spf1 ip4:80.82.231.144 ip4:52.101.167.106 ip4:52.101.165.103 include:_spf.nantesmetropole.fr include:spf.protection.outlook.com -all"86400
TXT"iOS-enroll=Https://mdm.nantesmetropole.fr/rtc/mvinct477/MDM/api/v1/enroll/IosEnroll\013\010"86400
TXT"adobe-idp-site-verification=990849728f3acb80b3171230aa5cff195f2df8454e8031231dea333fc895ebd9"86400
TXT"MS=ms82376970"86400
TXT"v=DKIM1; h=sha256; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11xRUQlFM4ruwx8yB4Gyaw748U4YN60TjinBTaZtchBLQr+TnG3jCqPGah1L/eTKxZGQAlum2+qqyjfSkTU3sXwBZbvyezddfX4DbFGEo5wiHzRouCHxmoc9FDPZdRnBixMi/09L4+UEZjFl7jIFi4vjXy7dEr0gUgH6yRCs5ei9vADu3paPCNw" "z3fZfpODek17Updru3v+SMk3Azfx1lAjW4qGECA7SHoOxRJ1y98LDE0E5jpU6teM1LGyipiBMTPQN8TvonYUfmeX28+h9z1AlkMR1VgrJ00cV2LCvW8gvKd0GItnfZlcpPB3MFGZDgJQVSqrWrXys9YuAYfxB+wIDAQAB"86400

Checks

  • ✓ TTLs within range #32
    TTLs: A 1h, MX 30m, NS 1h.
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • i
    No CAA records
    Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.
    #35