SurfaceMap › u › univ-paris13.fr

univ-paris13.fr

Checked 2026-10-22 05:36 UTC · first added 2026-10-21
✗Problems found Score 53 of 100

Domain & DNS

fail

20 passed 4 warn 1 failed

Areas

iRegistration !Delegation ✗Nameservers ✓SOA !DNSSEC iRecords

Problems

  • ✗
    Nameservers not responding
    Nameservers · These addresses did not answer, so resolvers waste time on timeouts: up13p7.univ-paris13.fr (194.254.61.61): read udp 46.225.38.91:33791->194.254.61.61:53: i/o timeout.
    #14
  • !
    NS sets differ
    Delegation · The nameservers at the parent and in the zone should be the same. Only at the parent: up13p7.univ-paris13.fr. dns1.univ-paris13.fr, dns2.univ-paris13.fr report NS dns1.univ-paris13.fr dns2.univ-paris13.fr.
    #7
  • !
    Glue differs from the zone
    Delegation · The addresses at the parent (glue) differ from the addresses in the zone: up13p7.univ-paris13.fr (glue 194.254.61.61, 2001:660:3301:8003:212:3fff:fe60:599f, zone 194.254.61.61). Update the glue at your registrar.
    #8
  • !
    No IPv6
    Delegation · None of the nameservers has an IPv6 address, so IPv6-only resolvers can't reach them.
    #13
  • !
    Not signed
    DNSSEC · The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Recent checks

✗

Full report

Domain & DNS report for univ-paris13.fr ›

Mail

fail

24 passed 5 warn 1 failed

Areas

✓SPF ✗DMARC !DKIM !DNSSEC !MX !TLS iBIMI

Problems

  • ✗
    Policy: none (monitoring only)
    DMARC · DMARC policy is set to 'none', which only monitors but doesn't protect against spoofing. Consider upgrading to 'quarantine' or ideally 'reject'.
    #4
  • !
    Not enabled
    DNSSEC · DNSSEC is not enabled for this domain. Consider enabling DNSSEC to protect against DNS spoofing attacks.
    #8
  • !
    Hosts without IPv6
    MX · The following MX hosts could not be resolved to IPv6 addresses: mailgw1.univ-spn.fr, mailgw2.univ-spn.fr
    #11
  • !
    1024-bit DKIM key
    DKIM · 1024-bit RSA keys are the minimum and are considered weak today: mail (1024 bits). Rotate to a 2048-bit key.
    #23
  • !
    Policy in testing mode
    TLS · With mode: testing, senders only report TLS problems (via TLS-RPT) and still deliver without TLS. Switch to mode: enforce once reports are clean.
    #33
  • !
    MX hosts missing from policy
    TLS · These MX hosts are not listed in the MTA-STS policy (mx: mx1.univ-paris13.fr, mx2.univ-paris13.fr): mailgw1.univ-spn.fr, mailgw2.univ-spn.fr. This will break delivery once the policy is enforced.
    #34

Recent checks

✗

Full report

Mail report for univ-paris13.fr ›