orange-business.com

Checked 22 October 2026, 10:10 UTC · via 8.8.8.8
✗Problems found
24 passed 2 warnings 2 failed 3 info

Registration

fail

.com generic · CSC Corporate Domains, Inc. · expires 2026-11-02

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
CSC Corporate Domains, Inc.
Registered
2 November 2004
Last changed
24 March 2025
Expires
2 November 2026
Status
client transfer prohibited
Registry nameservers
bow.rain.fr, dns1.equant.net, dns2.equant.net, dns3.equant.net, proof.rain.fr
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✗
    Expires in 11 days
    The registration expires on 2026-11-02. Renew it now or enable auto-renewal.
    #3
  • ✓ Transfer locked #4
    Registry status: client transfer prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

info

bow.rain.fr, dns1.equant.net, dns2.equant.net, dns3.equant.net, proof.rain.fr

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
bow.rain.fr, dns1.equant.net, dns2.equant.net, dns3.equant.net, proof.rain.fr
NS in the zone
bow.rain.fr, dns1.equant.net, dns2.equant.net, dns3.equant.net, proof.rain.fr
NameserverAddressesNetwork (AS)Glue
bow.rain.fr194.51.3.49AS3215 AS3215 - Orange S.A., FR-
dns1.equant.net57.67.127.194 2a01:ce89:8000:1001:57:67:127:194AS51964 ORANGE-BUSINESS-SERVICES-IPSN-ASN - ORANGE BUSINESS SERVICES U.S. Inc., US AS51964 ORANGE-BUSINESS-SERVICES-IPSN-ASN - ORANGE BUSINESS SERVICES U.S. Inc., US-
dns2.equant.net57.73.127.194 2a01:ce9d:0:1001:57:73:127:194AS51964 ORANGE-BUSINESS-SERVICES-IPSN-ASN - ORANGE BUSINESS SERVICES U.S. Inc., US AS51964 ORANGE-BUSINESS-SERVICES-IPSN-ASN - ORANGE BUSINESS SERVICES U.S. Inc., US-
dns3.equant.net57.68.127.194 2a01:ce95:4000:1001:204:59:152:207AS51964 ORANGE-BUSINESS-SERVICES-IPSN-ASN - ORANGE BUSINESS SERVICES U.S. Inc., US AS51964 ORANGE-BUSINESS-SERVICES-IPSN-ASN - ORANGE BUSINESS SERVICES U.S. Inc., US-
proof.rain.fr194.51.3.65AS3215 AS3215 - Orange S.A., FR-

Checks

  • ✓ 5 nameservers #6
    Delegated to bow.rain.fr, dns1.equant.net, dns2.equant.net, dns3.equant.net, proof.rain.fr.
  • ✓ Parent and zone agree #7
    The parent delegation and the zone's NS records list the same nameservers.
  • ✓ No glue needed #8
    All nameservers are outside the zone, so no glue records are needed.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 4 IPv4 /24s and 3 IPv6 /48s.
  • ✓ 2 autonomous systems #11
    The nameservers are spread over: AS3215 (AS3215 - Orange S.A., FR): 2 addresses; AS51964 (ORANGE-BUSINESS-SERVICES-IPSN-ASN - ORANGE BUSINESS SERVICES U.S. Inc., US): 6 addresses.
  • ✓ Nameserver names under 2 TLDs #12
    Nameserver names use the TLDs .fr, .net.
  • i
    Partly IPv6
    These nameservers have no IPv6 address: bow.rain.fr, proof.rain.fr.
    #13

Nameservers

fail

8 of 8 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
bow.rain.fr 194.51.3.49NOERROR, 20 ms, authoritativeOPENyes / yesrefused-
dns1.equant.net 57.67.127.194NOERROR, 19 ms, authoritativenoyes / yesrefused-
dns1.equant.net 2a01:ce89:8000:1001:57:67:127:194NOERROR, 18 ms, authoritativenoyes / yesrefused-
dns2.equant.net 57.73.127.194NOERROR, 167 ms, authoritativenoyes / yesrefused-
dns2.equant.net 2a01:ce9d:0:1001:57:73:127:194NOERROR, 167 ms, authoritativenoyes / yesrefused-
dns3.equant.net 57.68.127.194NOERROR, 98 ms, authoritativenoyes / yesrefused-
dns3.equant.net 2a01:ce95:4000:1001:204:59:152:207NOERROR, 99 ms, authoritativenoyes / yesrefused-
proof.rain.fr 194.51.3.65NOERROR, 20 ms, authoritativeOPENyes / yesrefused-

Checks

  • ✓ All respond #14
    All 8 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✗
    Open recursion
    These nameservers resolve names for anyone, which makes them usable for DNS amplification attacks and cache poisoning: bow.rain.fr (194.51.3.49), proof.rain.fr (194.51.3.65). Disable recursion on authoritative servers.
    #16
  • ✓ No version disclosed #17
    The nameservers don't reveal their software version.
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

warn

serial 2017023700 · primary dns1.equant.net

Found

Primary (MNAME)
dns1.equant.net
Contact (RNAME)
dns\.operations.orange.com
Serial
2017023700
Refresh / retry
86400 s / 7200 s
Expire
3600000 s
Negative TTL
172800 s

Serial per nameserver

NameserverSerial
bow.rain.fr (194.51.3.49)2017023700
dns1.equant.net (57.67.127.194)2017023700
dns1.equant.net (2a01:ce89:8000:1001:57:67:127:194)2017023700
dns2.equant.net (57.73.127.194)2017023700
dns2.equant.net (2a01:ce9d:0:1001:57:73:127:194)2017023700
dns3.equant.net (57.68.127.194)2017023700
dns3.equant.net (2a01:ce95:4000:1001:204:59:152:207)2017023700
proof.rain.fr (194.51.3.65)2017023700

Checks

  • ✓ Serial 2017023700 everywhere #22
    All nameservers serve the same version of the zone.
  • !
    Unusual SOA timers
    negative caching TTL (minimum) 2d is outside 5m–1d (RFC 2308 recommends 1–3 hours). Current values: refresh 1d, retry 2h, expire 1000h, negative TTL 2d.
    #23
  • ✓ Primary is a public nameserver #24
    The primary nameserver dns1.equant.net is one of the listed nameservers.
  • ✓ Contact dns.operations@orange.com #25
    The SOA RNAME dns\.operations.orange.com means dns.operations@orange.com.
  • ✓ Timestamp serial #26
    The serial 2017023700 is a Unix timestamp (2033-12-01 04:21 UTC).

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

info

11 records at the apex

Found

Read from
194.51.3.49:53
TypeValueTTL
SOAdns1.equant.net. dns\.operations.orange.com. 2017023700 86400 7200 3600000 1728003600
NSdns3.equant.net.3600
NSdns1.equant.net.3600
NSdns2.equant.net.3600
NSbow.rain.fr.3600
NSproof.rain.fr.3600
A90.84.172.1533600
MX5 mx.mailbox.orange-business.com.3600
TXT"teamtailor=304f5d6a15ccd29eb2b3562b2d00d866"3600
TXT"v=spf1 include:spf.email-control.orange-business.com ip4:81.252.92.0/23 ip4:83.206.208.128/25 ip4:86.64.210.0/23 ip4:195.62.74.0/23 ip4:217.167.123.88 ip4:85.233.221.4 ip4:195.15.25.146 ip4:90.84.181.69 ip4:90.84.174.154 include:sendgrid.net include:spffe" "d-ip.orange.com include:spffed-mm.orange.com include:spf.mailjet.com ~all"3600
TXT"google-site-verification=Xb9m07vaES3VdCuutn53rz1DnUnyxnMxUui3opI0dx0"3600

Checks

  • ✓ TTLs within range #32
    TTLs: A 1h, MX 1h, NS 1h. The NS TTL at the parent is 2d and in the zone 1h; resolvers may use either.
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • i
    No CAA records
    Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.
    #35