DNS Spy
Connectivity: 100%
The following nameservers are available and responding correctly for DNS queries for your domain paypal.fr.
| Nameserver | IP address(es) | SOA serial |
|---|---|---|
| ns1.p57.dynect.net. |
108.59.161.57
2600:2000:2210::57 |
2009111364 |
| ns2.p57.dynect.net. |
108.59.162.57
2600:2000:2220::57 |
2009111364 |
| pdns100.ultradns.com. |
156.154.64.100
2001:502:f3ff::88 |
2009111364 |
| pdns100.ultradns.net. |
156.154.65.100
2610:a1:1014::88 |
2009111364 |
Good news, no warnings or errors were found.
We could not find any recommendations at this time.
Good news, we detected the following achievements in your DNS configuration. Each of these checks has increased your DNS Spy score.
- All nameservers reply with the same SOA serial number.
- The nameserver IPs are distributed across multiple subnets.
- All nameservers are online.
- Nameservers are available over IPv4.
- Nameservers are available over IPv6.
Performance: 100%
We tested each nameserver and measured the following response times.
| Nameserver | IP address(es) | Response time |
|---|---|---|
| ns1.p57.dynect.net. |
108.59.161.57
2600:2000:2210::57 |
9ms
1ms |
| ns2.p57.dynect.net. |
108.59.162.57
2600:2000:2220::57 |
1ms
1ms |
| pdns100.ultradns.com. |
156.154.64.100
2001:502:f3ff::88 |
1ms
1ms |
| pdns100.ultradns.net. |
156.154.65.100
2610:a1:1014::88 |
1ms
1ms |
Good news, no warnings or errors were found.
We could not find any recommendations at this time.
Good news, we detected the following achievements in your DNS configuration. Each of these checks has increased your DNS Spy score.
- Nameserver ns1.p57.dynect.net. (108.59.161.57) replied quickly (< 50ms).
- Nameserver ns1.p57.dynect.net. (2600:2000:2210::57) replied in a reasonable time.
- Nameserver ns2.p57.dynect.net. (108.59.162.57) replied quickly (< 50ms).
- Nameserver ns2.p57.dynect.net. (2600:2000:2220::57) replied in a reasonable time.
- Nameserver pdns100.ultradns.com. (156.154.64.100) replied quickly (< 50ms).
- Nameserver pdns100.ultradns.com. (2001:502:f3ff::88) replied in a reasonable time.
- Nameserver pdns100.ultradns.net. (156.154.65.100) replied quickly (< 50ms).
- Nameserver pdns100.ultradns.net. (2610:a1:1014::88) replied in a reasonable time.
Resilience & Security: 100%
These are the locations and providers of your nameservers.
| Nameserver | Location | ISP |
|---|---|---|
| ns1.p57.dynect.net. |
IPv4: US
IPv6: US |
AS31898 - ORACLE-BMC-31898, US
AS31898 - ORACLE-BMC-31898, US |
| ns2.p57.dynect.net. |
IPv4: US
IPv6: US |
AS31898 - ORACLE-BMC-31898, US
AS31898 - ORACLE-BMC-31898, US |
| pdns100.ultradns.com. |
IPv4: US
IPv6: US |
AS397215 397220 397224 397231 397233 -
AS397215 397220 397231 - |
| pdns100.ultradns.net. |
IPv4: US
IPv6: US |
AS397215 397218 397220 397224 397231 397235 -
AS397215 397218 397220 397231 - |
Good news, no warnings or errors were found.
We detected some possible recommendations for you to consider. No penalties were given for these, but resolving them can give you a higher DNS score.
- All IPv4 nameservers appear to be hosted in the same country (US). You might want to consider spreading the nameservers geographically.
- All IPv6 nameservers appear to be hosted in the same country (US). You might want to consider spreading the nameservers geographically.
- No CAA records found. Consider adding CAA records, as it adds increased security by limiting which Certificate Authorities can issue certificates for this domain. (more info)
Good news, we detected the following achievements in your DNS configuration. Each of these checks has increased your DNS Spy score.
- You have more than 1 nameserver.
- The IPv4 nameservers are distributed among multiple providers.
- The IPv6 nameservers are distributed among multiple providers.
- DNSSEC is enabled.
- The nameservers are being operated from multiple domains (dynect.net, ultradns.com, ultradns.net).
DNS records: 95%
Our scans detected the following publicly available DNS records.
| Record | TTL | Value | |
|---|---|---|---|
| A | paypal.fr | 5m |
151.101.3.1 151.101.67.1 192.229.210.155 |
| DNSKEY | paypal.fr | 172800s |
ZSK | RSA/SHA-256 | AwEAAb7zzMss83HMwMM+Wd3U8ixmWQDNg0U1UTN5FTB2vLJgyJVHCPb7 KfKzjjEODYRR27oJAdgPMhWIH6hxsdp4+GQbAHyslboLTGzAXoKHxzj8 Uxo57YUOAq4km1WESq3rFdtuTDwkuuG4PyKI/0eAwvQLB4i+tMh/ohIZ pPWw7+jb ZSK | RSA/SHA-256 | AwEAAbwLW8hX1ugoplKdBg+BuSCGi5Fi58gykaAxx3O5S7600Vd67wnJ wWQfY/JCtHfD7nIr+zSVz+KUjQgVwNDCT7AOmSgMwZAJLg9LULbWT1Sx cxrJPyqI2YVhxHZhM7+VBIAr3I5HKfni/yJy7ajdnd7T1hsTf77cxbcm rhE1c6BF ZSK | RSA/SHA-256 | AwEAAfL3SL49Rd4pcaKZWhLaiT7IhfN5MsQw5NAwUv18vRzad11Uawm7 JAtmszJMnyrbsFV8zZF/EynE5MpvVDzDyKnb2AovERBrE82OU3bMT+QB 4f6nKhow9ru/ZtLm6FsLqkeKnoJYiqXF+BNW1CRPAkvVLGE7Vv84gz4q PmXbwHhj KSK | RSA/SHA-256 | AwEAAbchXU0+XR5DWRrkmjVaIpTsPpSGvJir3qnomLUmPw6AG4t8CVOq V4rqLNGLsdwkEIyRT3df6/cj3Cf1rkbbU7waR6LpyDOjmaNhm4BdDG0y PY19OG5HSHDJGqji6KkmQLXt5r6n0JhNKUA89oRDaF5u3F7cKnpmtz9V tOTLUfBkmcJAYIGKmK0VDdYlY2cL7CnmOmgnGFpsIMKFUCctKQcnIIu1 SrdbkcwpsyA05lcCmhixBXX36jJfX6McOCGgf73dSYpJQGqYApxXDdBj 7JJxdv/NvMxhMBCw1hTiLA9Qz5M9ydHHf9pu5Lrw66Vz5zc7U1eWV/ii tYzE9aOjRs8= KSK | RSA/SHA-256 | AwEAAdrK6JiZM2KE0x0EE1YJ1WStZoOhQVR6bU4TzUwXjOKk1R6PVagE FMIpLn9U6TzNNyxGq9hB5qwf10hBvWnxv9R0eA/HhoV3zkmu8dkrRS5z MTF5HeVeZa24WnxTBylS/lLglk1/yLeaAqeskPptLMjhwHPg7T1wsPyB TygJdHIrIrNCSYkjZwOY7FD4w2gkFrqNEp4bB7NiDcZ5fOZlF7dMmdJg BfS52PA5UV4ONJyvYP6JERcouJ9mIfHnqA6E48F5XoJ4jAILRR9Fcep/ l8/p/JTNtkTTK7do7kucnqSp+K8BtGiT+f/VOAlq9RzuWexnrolFXlRJ AQFKb4JiVbE= |
| MX | paypal.fr | 1h |
10 mx1.paypalcorp.com. 10 mx2.paypalcorp.com. |
| NS | paypal.fr | 5m |
ns1.p57.dynect.net. ns2.p57.dynect.net. pdns100.ultradns.com. pdns100.ultradns.net. |
| SOA | paypal.fr | 5m | ppdns.paypal.com. hostmaster.paypal.com. 2009111364 7200 600 1209600 300 |
| TXT | paypal.fr | 1h |
"MS=ms81043509" "google-site-verification=N3520mWwyS9Tx335WumpPxPwPWj1-zQy4xDkP7fXU8s" "v=spf1 mx include:pp._spf.paypal.com include:3rdparty._spf.paypal.com include:3rdparty1._spf.paypal.com include:3rdparty2._spf.paypal.com include:consultix.paypal.fr ~all" "xcw3vtmwkqcmhpl4gz3v7mbv6k6x7cwx" |
| TXT | _dmarc.paypal.fr | 1h | "v=DMARC1; p=reject; rua=mailto:[email protected]; ruf=mailto:[email protected]" |
| CNAME | autodiscover.paypal.fr | 1h | autodiscover.outlook.com. |
| A | mail.paypal.fr | 1h | 159.127.187.12 |
| CNAME | www.paypal.fr | 1h | www-intl.glb.paypal.com. |
We detected the following errors or warnings about your DNS configuration. These caused your DNS rating to be lowered. Resolving these will grant a higher DNS Spy rating for your domain.
- Consider giving the NS records for "paypal.fr" a longer TTL, as those don't change often (1h+).
We detected some possible recommendations for you to consider. No penalties were given for these, but resolving them can give you a higher DNS score.
- No IPv6 record has been found on the zone apex (paypal.fr). Consider enabling IPv6 in the infrastructure by adding an AAAA record on this domain.
Good news, we detected the following achievements in your DNS configuration. Each of these checks has increased your DNS Spy score.
- The root DNS records points to multiple IPs using Round Robin.
- Multiple MX records found.
- MX records with different priorities found (main + fall-back mailservers).
- The MX record for "paypal.fr" has a long TTL (1h+).
- The MX records points to multiple mailservers.
- Your SOA serial number follows the best practice YYYYMMDDxx format.
- SPF records have been found.
- SPF records are set up restrictively.
- DMARC records have been found.
- DMARC records are set up restrictively.
- Found a root (apex) DNS record.
- Found a www DNS record.
- The active nameservers match the NS records.
- The DNS records appear to be RFC compliant.
Have a look at other public DNS scans.