paypal.fr
!Passed with warnings
30 passed
1 warning
0 failed
4 info
Registration
info.fr country-code · MARKMONITOR Inc. · expires 2026-12-23
Found
- TLD
- .fr (country-code)
- ICANN policies apply
- no
- Registrar
- MARKMONITOR Inc.
- Registered
- 12 September 2002
- Last changed
- 27 August 2026
- Expires
- 23 December 2026
- Status
- client update prohibited, client transfer prohibited, client delete prohibited
- Registry nameservers
- ns1-pchnet.paypal.com, ns2-pchnet.paypal.com, pdns100.ultradns.com, pdns100.ultradns.net
- RDAP server
- https://rdap.nic.fr/
Checks
-
i#1.fr is a country-code TLD (ccTLD)
-
✓ TLD delegated and signed #2
-
✓ Expires on 2026-12-23 #3
-
✓ Transfer locked #4
-
✓ Registry and delegation match #5
Delegation
passns1-pchnet.paypal.com, ns2-pchnet.paypal.com, pdns100.ultradns.com, pdns100.ultradns.net
Found
- Parent zone
- fr
- Delegation from
- d.nic.fr (194.0.9.1)
- NS at the parent
- ns1-pchnet.paypal.com, ns2-pchnet.paypal.com, pdns100.ultradns.com, pdns100.ultradns.net
- NS in the zone
- ns1-pchnet.paypal.com, ns2-pchnet.paypal.com, pdns100.ultradns.com, pdns100.ultradns.net
| Nameserver | Addresses | Network (AS) | Glue |
|---|---|---|---|
| ns1-pchnet.paypal.com | 64.78.206.1 2620:171:814:1701:2::1 | AS42 WOODYNET-1 - WoodyNet, Inc., US AS42 WOODYNET-1 - WoodyNet, Inc., US | - |
| ns2-pchnet.paypal.com | 64.78.207.1 2620:171:815:1701:2::1 | AS42 WOODYNET-1 - WoodyNet, Inc., US AS42 WOODYNET-1 - WoodyNet, Inc., US | - |
| pdns100.ultradns.com | 156.154.64.100 2001:502:f3ff::88 | AS12008 VERCARA - Vercara, LLC, US AS12008 VERCARA - Vercara, LLC, US | - |
| pdns100.ultradns.net | 156.154.65.100 2610:a1:1014::88 | AS12008 VERCARA - Vercara, LLC, US AS12008 VERCARA - Vercara, LLC, US | - |
Checks
-
✓ 4 nameservers #6
-
✓ Parent and zone agree #7
-
✓ No glue needed #8
-
✓ All names resolve #9
-
✓ Nameservers in different networks #10
-
✓ 2 autonomous systems #11
-
✓ Nameserver names under 2 TLDs #12
-
✓ All reachable over IPv6 #13
Nameservers
info8 of 8 addresses answer authoritatively
Found
| Nameserver | Answer | Recursion | TCP / EDNS | AXFR | Version |
|---|---|---|---|---|---|
| ns1-pchnet.paypal.com 64.78.206.1 | NOERROR, 20 ms, authoritative | no | yes / yes | refused | paypalbe |
| ns1-pchnet.paypal.com 2620:171:814:1701:2::1 | NOERROR, 20 ms, authoritative | no | yes / yes | refused | paypalbe |
| ns2-pchnet.paypal.com 64.78.207.1 | NOERROR, 19 ms, authoritative | no | yes / yes | refused | paypalbe |
| ns2-pchnet.paypal.com 2620:171:815:1701:2::1 | NOERROR, 19 ms, authoritative | no | yes / yes | refused | paypalbe |
| pdns100.ultradns.com 156.154.64.100 | NOERROR, 3 ms, authoritative | no | yes / yes | refused | UltraDNS Nameserver |
| pdns100.ultradns.com 2001:502:f3ff::88 | NOERROR, 3 ms, authoritative | no | yes / yes | refused | UltraDNS Nameserver |
| pdns100.ultradns.net 156.154.65.100 | NOERROR, 3 ms, authoritative | no | yes / yes | refused | UltraDNS Nameserver |
| pdns100.ultradns.net 2610:a1:1014::88 | NOERROR, 3 ms, authoritative | no | yes / yes | refused | UltraDNS Nameserver |
Checks
-
✓ All respond #14
-
✓ All authoritative #15
-
✓ No recursion #16
-
i#17Identifying string disclosed
-
✓ Zone transfers refused #18
-
✓ TCP supported #19
-
✓ EDNS supported #20
-
✓ Public addresses #21
SOA
infoserial 2009112388 · primary ppdns.paypal.com
Found
- Primary (MNAME)
- ppdns.paypal.com
- Contact (RNAME)
- hostmaster.paypal.com
- Serial
- 2009112388
- Refresh / retry
- 7200 s / 600 s
- Expire
- 1209600 s
- Negative TTL
- 300 s
Serial per nameserver
| Nameserver | Serial |
|---|---|
| ns1-pchnet.paypal.com (64.78.206.1) | 2009112388 |
| ns1-pchnet.paypal.com (2620:171:814:1701:2::1) | 2009112388 |
| ns2-pchnet.paypal.com (64.78.207.1) | 2009112388 |
| ns2-pchnet.paypal.com (2620:171:815:1701:2::1) | 2009112388 |
| pdns100.ultradns.com (156.154.64.100) | 2009112388 |
| pdns100.ultradns.com (2001:502:f3ff::88) | 2009112388 |
| pdns100.ultradns.net (156.154.65.100) | 2009112388 |
| pdns100.ultradns.net (2610:a1:1014::88) | 2009112388 |
Checks
-
✓ Serial 2009112388 everywhere #22
-
✓ Timers within recommendations #23
-
i#24Hidden master
-
✓ Contact hostmaster@paypal.com #25
-
✓ Date-based serial #26
DNSSEC
warnSigned, DS published at parent
Found
- Validated by resolver
- yes
- Denial of existence
- NSEC3
- NSEC3
- 10 iterations, 5-byte salt
- Signatures valid until
- 17 November 2026
DS at the parent
| Key tag | Algorithm | Digest | Matches a key |
|---|---|---|---|
| 64330 | RSASHA256 (8) | SHA256 C18600CEFD51FE90… | yes |
| 61025 | RSASHA256 (8) | SHA256 42867D44CF3868E1… | yes |
DNSKEY in the zone
| Key tag | Role | Algorithm |
|---|---|---|
| 64330 | KSK (257) | RSASHA256 (8) |
| 61095 | ZSK (256) | RSASHA256 (8) |
| 49549 | ZSK (256) | RSASHA256 (8) |
| 61025 | KSK (257) | RSASHA256 (8) |
| 49060 | ZSK (256) | RSASHA256 (8) |
Checks
-
✓ Signed and validated #27
-
✓ DS matches a key #28
-
✓ Modern algorithms #29
-
✓ Signatures valid until 2026-11-17 #30
-
!#31NSEC3 with extra iterations or salt
Records
info14 records at the apex
Found
- Read from
- 64.78.206.1:53
| Type | Value | TTL |
|---|---|---|
| SOA | ppdns.paypal.com. hostmaster.paypal.com. 2009112388 7200 600 1209600 300 | 300 |
| NS | pdns100.ultradns.com. | 300 |
| NS | pdns100.ultradns.net. | 300 |
| NS | ns1-pchnet.paypal.com. | 300 |
| NS | ns2-pchnet.paypal.com. | 300 |
| A | 151.101.3.1 | 300 |
| A | 151.101.67.1 | 300 |
| A | 162.159.141.96 | 300 |
| MX | 10 mx1.paypalcorp.com. | 3600 |
| MX | 10 mx2.paypalcorp.com. | 3600 |
| TXT | "MS=ms81043509" | 3600 |
| TXT | "xcw3vtmwkqcmhpl4gz3v7mbv6k6x7cwx" | 3600 |
| TXT | "google-site-verification=N3520mWwyS9Tx335WumpPxPwPWj1-zQy4xDkP7fXU8s" | 3600 |
| TXT | "v=spf1 mx include:pp._spf.paypal.com include:3rdparty._spf.paypal.com include:3rdparty1._spf.paypal.com include:3rdparty2._spf.paypal.com include:consultix.paypal.fr ~all" | 3600 |
Checks
-
✓ TTLs within range #32
-
✓ No CNAME at the apex #33
-
✓ No wildcard #34
-
i#35No CAA records