weleda.fr
!Passed with warnings
27 passed
1 warning
0 failed
3 info
Registration
info.fr country-code · GANDI · expires 2028-06-03
Found
- TLD
- .fr (country-code)
- ICANN policies apply
- no
- Registrar
- GANDI
- Registered
- 14 February 2000
- Last changed
- 22 May 2026
- Expires
- 3 June 2028
- Status
- client transfer prohibited
- Registry nameservers
- ns-100-c.gandi.net, ns-114-b.gandi.net, ns-141-a.gandi.net
- RDAP server
- https://rdap.nic.fr/
Checks
-
i#1.fr is a country-code TLD (ccTLD)
-
✓ TLD delegated and signed #2
-
✓ Expires on 2028-06-03 #3
-
✓ Transfer locked #4
-
✓ Registry and delegation match #5
Delegation
infons-100-c.gandi.net, ns-114-b.gandi.net, ns-141-a.gandi.net
Found
- Parent zone
- fr
- Delegation from
- d.nic.fr (194.0.9.1)
- NS at the parent
- ns-100-c.gandi.net, ns-114-b.gandi.net, ns-141-a.gandi.net
- NS in the zone
- ns-100-c.gandi.net, ns-114-b.gandi.net, ns-141-a.gandi.net
| Nameserver | Addresses | Network (AS) | Glue |
|---|---|---|---|
| ns-100-c.gandi.net | 217.70.187.101 2604:3400:aaac::65 | AS209453 GANDI-LIVEDNS - GANDI SAS, FR AS209453 GANDI-LIVEDNS - GANDI SAS, FR | - |
| ns-114-b.gandi.net | 213.167.230.115 2001:4b98:aaab::73 | AS209453 GANDI-LIVEDNS - GANDI SAS, FR AS209453 GANDI-LIVEDNS - GANDI SAS, FR | - |
| ns-141-a.gandi.net | 173.246.100.142 2001:4b98:aaaa::8e | AS29169 GANDI-AS - GANDI SAS, FR AS209453 GANDI-LIVEDNS - GANDI SAS, FR | - |
Checks
-
✓ 3 nameservers #6
-
✓ Parent and zone agree #7
-
✓ No glue needed #8
-
✓ All names resolve #9
-
✓ Nameservers in different networks #10
-
✓ 2 autonomous systems #11
-
i#12All nameserver names under .net
-
✓ All reachable over IPv6 #13
Nameservers
pass6 of 6 addresses answer authoritatively
Found
| Nameserver | Answer | Recursion | TCP / EDNS | AXFR | Version |
|---|---|---|---|---|---|
| ns-100-c.gandi.net 217.70.187.101 | NOERROR, 3 ms, authoritative | no | yes / yes | refused | - |
| ns-100-c.gandi.net 2604:3400:aaac::65 | NOERROR, 4 ms, authoritative | no | yes / yes | refused | - |
| ns-114-b.gandi.net 213.167.230.115 | NOERROR, 5 ms, authoritative | no | yes / yes | refused | - |
| ns-114-b.gandi.net 2001:4b98:aaab::73 | NOERROR, 5 ms, authoritative | no | yes / yes | refused | - |
| ns-141-a.gandi.net 173.246.100.142 | NOERROR, 3 ms, authoritative | no | yes / yes | refused | - |
| ns-141-a.gandi.net 2001:4b98:aaaa::8e | NOERROR, 4 ms, authoritative | no | yes / yes | refused | - |
Checks
-
✓ All respond #14
-
✓ All authoritative #15
-
✓ No recursion #16
-
✓ No version disclosed #17
-
✓ Zone transfers refused #18
-
✓ TCP supported #19
-
✓ EDNS supported #20
-
✓ Public addresses #21
SOA
infoserial 1792627200 · primary ns1.gandi.net
Found
- Primary (MNAME)
- ns1.gandi.net
- Contact (RNAME)
- hostmaster.gandi.net
- Serial
- 1792627200
- Refresh / retry
- 10800 s / 3600 s
- Expire
- 604800 s
- Negative TTL
- 10800 s
Serial per nameserver
| Nameserver | Serial |
|---|---|
| ns-100-c.gandi.net (217.70.187.101) | 1792627200 |
| ns-100-c.gandi.net (2604:3400:aaac::65) | 1792627200 |
| ns-114-b.gandi.net (213.167.230.115) | 1792627200 |
| ns-114-b.gandi.net (2001:4b98:aaab::73) | 1792627200 |
| ns-141-a.gandi.net (173.246.100.142) | 1792627200 |
| ns-141-a.gandi.net (2001:4b98:aaaa::8e) | 1792627200 |
Checks
-
✓ Serial 1792627200 everywhere #22
-
✓ Timers within recommendations #23
-
i#24Hidden master
-
✓ Contact hostmaster@gandi.net #25
-
✓ Timestamp serial #26
DNSSEC
warnNot signed
Found
- Validated by resolver
- no
Checks
-
!#27Not signed
Records
pass28 records at the apex
Found
- Read from
- 217.70.187.101:53
| Type | Value | TTL |
|---|---|---|
| SOA | ns1.gandi.net. hostmaster.gandi.net. 1792627200 10800 3600 604800 10800 | 10800 |
| NS | ns-114-b.gandi.net. | 10800 |
| NS | ns-141-a.gandi.net. | 10800 |
| NS | ns-100-c.gandi.net. | 10800 |
| A | 52.213.220.96 | 300 |
| A | 54.155.36.182 | 300 |
| A | 34.251.85.138 | 300 |
| MX | 5 mail.weleda.fr. | 300 |
| TXT | "domila=6f59693fb7464e1fbbe54f6f9738aba1" | 10800 |
| TXT | "facebook-domain-verification=wqhrw30x6gks021qxbdo97vdpjdjpa" | 10800 |
| TXT | "asap-site-verification-238f20c0-cea6-4731-bb62-2322c6d2ea34" | 10800 |
| TXT | "google-site-verification=Xd6_HaEA6h8aciyhHlpNbMOS0BpGyiFwTQbOhBUqPQc" | 10800 |
| TXT | "RSlbC/LhM7pplfHDPYTmf+HxtXgYqfm2QcgkRvBwyQ+yp+BFmrmFlnwyhBUODBuzvIf8u6teDJwEdOUty/3rcQ==" | 10800 |
| TXT | "v=spf1 a mx ptr:onehippo.com ptr:weleda.fr include:spfa_bo.touch-sell.net.weleda.fr include:spfb_eskerondemand.com.weleda.fr include:spfc_anpdm.com.weleda.fr include:spfd_cegid.com.weleda.fr include:spfe_cegedim.com.weleda.fr ip4:80.77.225.1 -all" | 10800 |
| TXT | "brevo-code:73bc92274d4c3ce509c5c3a9355a13f2" | 10800 |
| TXT | "neurodoron=f897cb878b7e2ad989c7ab8a4bf79f96" | 10800 |
| TXT | "duo_sso_verification=pjjUii9QkuslFSE4PGuhy8Jhz4AazXU8fRKowhshAe8kEUaK7JcqmFyS5V93GOpq" | 10800 |
| TXT | "google-site-verification=kJpVyksWMDYgei4utOMEs--1KG-JXpIy9Yj_ZdM19Rc" | 10800 |
| TXT | "apple-domain-verification=m5v0Mp4cjhraipqU" | 10800 |
| CAA | 0 issue "amazonaws.com" | 10800 |
| CAA | 0 issuewild "digicert.com" | 10800 |
| CAA | 0 issuewild "sectigo.com" | 10800 |
| CAA | 0 issue "amazon.com" | 10800 |
| CAA | 0 issue "letsencrypt.org" | 10800 |
| CAA | 0 issue "amazontrust.com" | 10800 |
| CAA | 0 issue "digicert.com" | 10800 |
| CAA | 0 issue "sectigo.com" | 10800 |
| CAA | 0 issue "awstrust.com" | 10800 |
Checks
-
✓ TTLs within range #32
-
✓ No CNAME at the apex #33
-
✓ No wildcard #34
-
✓ CAA restricts issuance #35