thalesgroup.com

Checked 22 October 2026, 11:01 UTC · via 8.8.8.8
iAll checks passed
32 passed 0 warnings 0 failed 3 info

Registration

info

.com generic · CSC Corporate Domains, Inc. · expires 2027-11-07

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
CSC Corporate Domains, Inc.
Registered
7 November 2000
Last changed
28 September 2026
Expires
7 November 2027
Status
client transfer prohibited, server delete prohibited, server transfer prohibited, server update prohibited
Registry nameservers
ns1.thalesgroup.com, ns2.thalesgroup.com, nsa.perf1.fr, nsb.perf1.com, nsc.perf1.com
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2027-11-07 #3
    The registration is valid until 2027-11-07 (381 days).
  • ✓ Transfer locked #4
    Registry status: client transfer prohibited, server delete prohibited, server transfer prohibited, server update prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

pass

ns1.thalesgroup.com, ns2.thalesgroup.com, nsa.perf1.fr, nsb.perf1.com, nsc.perf1.com

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
ns1.thalesgroup.com, ns2.thalesgroup.com, nsa.perf1.fr, nsb.perf1.com, nsc.perf1.com
NS in the zone
ns1.thalesgroup.com, ns2.thalesgroup.com, nsa.perf1.fr, nsb.perf1.com, nsc.perf1.com
NameserverAddressesNetwork (AS)Glue
ns1.thalesgroup.com192.54.145.234 2a00:4f40:666:6001:0:ffff:c036:91eaAS29104 THALESGROUP-AS - Thales Services Numeriques SAS, FR AS29104 THALESGROUP-AS - Thales Services Numeriques SAS, FR192.54.145.234 2a00:4f40:666:6001:0:ffff:c036:91ea
ns2.thalesgroup.com192.54.145.235 2a00:4f40:666:6001:0:ffff:c036:91ebAS29104 THALESGROUP-AS - Thales Services Numeriques SAS, FR AS29104 THALESGROUP-AS - Thales Services Numeriques SAS, FR192.54.145.235 2a00:4f40:666:6001:0:ffff:c036:91eb
nsa.perf1.fr81.92.94.100 2a01:c8:100::100AS20756 NAMESHIELD - NAMESHIELD SAS, FR AS20756 NAMESHIELD - NAMESHIELD SAS, FR-
nsb.perf1.com81.92.95.100 2a01:c8:101::100AS20756 NAMESHIELD - NAMESHIELD SAS, FR AS20756 NAMESHIELD - NAMESHIELD SAS, FR2a01:c8:101::100 81.92.95.100
nsc.perf1.com152.89.172.100 2a09:35c0:102::100AS209510 NAMESHIELDGRP - NAMESHIELD SAS, FR AS209510 NAMESHIELDGRP - NAMESHIELD SAS, FR152.89.172.100 2a09:35c0:102::100

Checks

  • ✓ 5 nameservers #6
    Delegated to ns1.thalesgroup.com, ns2.thalesgroup.com, nsa.perf1.fr, nsb.perf1.com, nsc.perf1.com.
  • ✓ Parent and zone agree #7
    The parent delegation and the zone's NS records list the same nameservers.
  • ✓ Glue present and correct #8
    Glue is published for the nameservers inside the zone: ns1.thalesgroup.com, ns2.thalesgroup.com.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 4 IPv4 /24s and 4 IPv6 /48s.
  • ✓ 3 autonomous systems #11
    The nameservers are spread over: AS20756 (NAMESHIELD - NAMESHIELD SAS, FR): 4 addresses; AS209510 (NAMESHIELDGRP - NAMESHIELD SAS, FR): 2 addresses; AS29104 (THALESGROUP-AS - Thales Services Numeriques SAS, FR): 4 addresses.
  • ✓ Nameserver names under 2 TLDs #12
    Nameserver names use the TLDs .com, .fr.
  • ✓ All reachable over IPv6 #13
    Every nameserver has an IPv6 address.

Nameservers

info

10 of 10 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
ns1.thalesgroup.com 192.54.145.234NOERROR, 13 ms, authoritativenoyes / yesrefused-
ns1.thalesgroup.com 2a00:4f40:666:6001:0:ffff:c036:91eaNOERROR, 13 ms, authoritativenoyes / yesrefused-
ns2.thalesgroup.com 192.54.145.235NOERROR, 13 ms, authoritativenoyes / yesrefused-
ns2.thalesgroup.com 2a00:4f40:666:6001:0:ffff:c036:91ebNOERROR, 13 ms, authoritativenoyes / yesrefused-
nsa.perf1.fr 81.92.94.100NOERROR, 3 ms, authoritativenoyes / yesrefusedSecure
nsa.perf1.fr 2a01:c8:100::100NOERROR, 4 ms, authoritativenoyes / yesrefusedSecure
nsb.perf1.com 81.92.95.100NOERROR, 10 ms, authoritativenoyes / yesrefusedSecure
nsb.perf1.com 2a01:c8:101::100NOERROR, 4 ms, authoritativenoyes / yesrefusedSecure
nsc.perf1.com 152.89.172.100NOERROR, 4 ms, authoritativenoyes / yesrefusedSecure
nsc.perf1.com 2a09:35c0:102::100NOERROR, 4 ms, authoritativenoyes / yesrefusedSecure

Checks

  • ✓ All respond #14
    All 10 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • i
    Identifying string disclosed
    These nameservers answer version queries with a string that is not a version number: nsa.perf1.fr: "Secure"; nsb.perf1.com: "Secure"; nsc.perf1.com: "Secure".
    #17
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

pass

serial 2026102136 · primary ns1.thalesgroup.com

Found

Primary (MNAME)
ns1.thalesgroup.com
Contact (RNAME)
operateur-dns.thalesgroup.com
Serial
2026102136
Refresh / retry
21600 s / 3600 s
Expire
3600000 s
Negative TTL
900 s

Serial per nameserver

NameserverSerial
ns1.thalesgroup.com (192.54.145.234)2026102136
ns1.thalesgroup.com (2a00:4f40:666:6001:0:ffff:c036:91ea)2026102136
ns2.thalesgroup.com (192.54.145.235)2026102136
ns2.thalesgroup.com (2a00:4f40:666:6001:0:ffff:c036:91eb)2026102136
nsa.perf1.fr (81.92.94.100)2026102136
nsa.perf1.fr (2a01:c8:100::100)2026102136
nsb.perf1.com (81.92.95.100)2026102136
nsb.perf1.com (2a01:c8:101::100)2026102136
nsc.perf1.com (152.89.172.100)2026102136
nsc.perf1.com (2a09:35c0:102::100)2026102136

Checks

  • ✓ Serial 2026102136 everywhere #22
    All nameservers serve the same version of the zone.
  • ✓ Timers within recommendations #23
    SOA refresh 6h, retry 1h, expire 1000h, negative TTL 15m.
  • ✓ Primary is a public nameserver #24
    The primary nameserver ns1.thalesgroup.com is one of the listed nameservers.
  • ✓ Contact operateur-dns@thalesgroup.com #25
    The SOA RNAME operateur-dns.thalesgroup.com means operateur-dns@thalesgroup.com.
  • ✓ Date-based serial #26
    The serial 2026102136 follows the YYYYMMDDnn convention (2026-10-21).

DNSSEC

pass

Signed, DS published at parent

Found

Validated by resolver
yes
Denial of existence
NSEC3
NSEC3
0 iterations, 0-byte salt
Signatures valid until
9 November 2026

DS at the parent

Key tagAlgorithmDigestMatches a key
2042RSASHA256 (8)SHA256 9C2A8F3074684BF3…yes
55189RSASHA256 (8)SHA256 41C704003D45FC00…yes
25679RSASHA256 (8)SHA256 0A9DA4CA1B6FC78B…yes

DNSKEY in the zone

Key tagRoleAlgorithm
25679KSK (257)RSASHA256 (8)
3691ZSK (256)RSASHA256 (8)
55189KSK (257)RSASHA256 (8)
2042KSK (257)RSASHA256 (8)

Checks

  • ✓ Signed and validated #27
    The zone is signed, the parent publishes a DS record, and the resolver validates the answers.
  • ✓ DS matches a key #28
    The DS record at the parent matches a key in the zone: key tag 2042 (SHA256), key tag 55189 (SHA256), key tag 25679 (SHA256).
  • ✓ Modern algorithms #29
    Key algorithms: RSASHA256 (8).
  • ✓ Signatures valid until 2026-11-09 #30
    The earliest DNSKEY/SOA signature expires at 2026-11-09 01:54 UTC.
  • ✓ NSEC3 as recommended #31
    The zone uses NSEC3 with 0 iterations and no salt (RFC 9276).

Records

info

51 records at the apex

Found

Read from
192.54.145.234:53
TypeValueTTL
SOAns1.thalesgroup.com. operateur-dns.thalesgroup.com. 2026102136 21600 3600 3600000 90086400
NSnsa.perf1.fr.86400
NSnsc.perf1.com.86400
NSns1.thalesgroup.com.86400
NSns2.thalesgroup.com.86400
NSnsb.perf1.com.86400
A107.154.76.603600
A107.154.214.603600
MX10 mx02.thalesgroup.com.86400
MX10 mx01.thalesgroup.com.86400
TXT"d6ckrh8i92omeb82blikqcq5oi"86400
TXT"00DcX000003Yz9I=1TBcX00000004TW"86400
TXT"b2cvrnha2ipmn73u2a2hslk6f4"86400
TXT"atlassian-domain-verification=rBJE2yFc7keNCJbkJbMD8pT1rBUjapGaz1gwCEY26VMJEiSW8aWaEvn9n6mggRbM"86400
TXT"box-domain-verification=acc4ffbec3edacf60e2e9e692a949a186d731f1ae02ae4b527301ec7363232c1"86400
TXT"cisco-ci-domain-verification=6fc601866dd489362d09d08e78445585b6e92fc640c024f864b9fca28c1b461f"86400
TXT"hvs9elcn2us2bmmr4lb217iqbr"86400
TXT"status-page-domain-verification=6c590zq20csn"86400
TXT"v=spf1 include:_spf.thalesgroup.com -all"86400
TXT"pendo-domain-verification=CF_-rQCUzGm-SYQ9PPuLhCo4B0w"86400
TXT"00D20000000082L=1TBUU000000021u"86400
TXT"_1axj2rzchxezkqw0oc4gea71egqelwi"86400
TXT"stripe-verification=61B187947CCA16D0A3A2474834921E83DC33DCDA485DB744E9FC35ABE133A4D0"86400
TXT"pardot128881=d94d95cd1e95d1ba52129899fa698283281594bb461c87806c0e9e5cb1de73a7"86400
TXT"google-gws-recovery-domain-verification=40875700"86400
TXT"atlassian-domain-verification=C8udnPAPnyatzbI4a0shdz5eVoY9BNckAvgfI99VAKwR3QiHSn4/EXa120OTZ9/Y"86400
TXT"kiro-site-verification=1b77d56e-430c-485f-a566-795b59035692"86400
TXT"sira8n255q3eerml42cnap84vq"86400
TXT"atlassian-domain-verification=YMGUP8dtRBMsiOsafGlbeTiDEhR9qLFZftiFgRuKJ3wb21VhxZNI4gLY889nGbKh"86400
TXT"monday-com-verification=WGu507HMpAaVXhGlx3MFTj8N_gTWVc4P169OBWSGq4w"86400
TXT"_d49pol435n49yiy9w1qv5ne99s3lml3"86400
TXT"n3r0i5dfdh6s2j147759bjqc9g"86400
TXT"onetrust-domain-verification=e84c2e4e1c404b7f89251829627370e5"86400
TXT"h9pjos01vgfld5qmp5otsg8goi"86400
TXT"adobe-idp-site-verification=84253922d9f14b77c7b36641372e8c6c92f90e6ec02b32b46f25303d598dc3b4"86400
TXT"google-gws-recovery-domain-verification=41180339"86400
TXT"dtm-domain-verification=AQbpph_AlMx5E1O0tldoQc090OAPwHhr0zNaD7d15Og"86400
TXT"pardot1065712=be4c40ee770f4993ae59e60862b789b6f15b4ba4e8a2b5f22394f35dbd42c5f0"86400
TXT"docusign=a706bb1e-98da-4486-bf34-bc3ba14c1a42"86400
TXT"00D200000007Cr4=1TBSg00000001to"86400
TXT"cisco-ci-domain-verification=7dfc7f852b0e0d4d8ee4813ed29133d2775615bbb24903c07b24aaae07fe3e0d"86400
TXT"00DE200000JCXaR=1TBE200000017Am"86400
TXT"2d586c6048079206995c542925f5b6d6b9bd86bcb2d6500c563cb8bb29b32b07"86400
TXT"cisco-ci-domain-verification=64495b16d25804907bea9e4ae83419db5e190204f54175c28c49bdec8eaac246"86400
TXT"cisco-ci-domain-verification=40f4f333defc02ef6e3f607ee7bbc5dbaecd4ba7a838156e4c399ef49f8e3d5d"86400
TXT"parkable-domain-verification=KuSRPxVkcuVRN7997PFq7HuEKE_3Nr96aSjoHl4C-_c="86400
TXT"box-domain-verification=1488c4fa92053c9774352272eebca47a72f4c4f8e3dc3be8aa1ec3f60b5acbcf"86400
TXT"mongodb-site-verification=urJggNtlDng5wmv1jcjrXmBo9Eb0XGwN"86400
TXT"atlassian-domain-verification=QeBfwUoyAGJnMRmwGDlvGZQt9aOGErqK0xbA/Qj3WVKAwPPfn4eDvkOMsrp9MDuU"86400
TXT"atlassian-domain-verification=owkhwuAcFuyTiUw4/EgbOofPLoJBM6ysS9MH1qLWXs3RAvZ14t7CSOFgh64ObH9t"86400
TXT"atlassian-domain-verification=vLY7nBwvQAoPuK077ly9s1x3MDaKBP3iSkDrigs82hcW51Z7p5f9W78Fq/HcaGZZ"86400

Checks

  • ✓ TTLs within range #32
    TTLs: A 1h, MX 1d, NS 1d. The NS TTL at the parent is 2d and in the zone 1d; resolvers may use either.
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • i
    No CAA records
    Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.
    #35