{
  "port": 700,
  "protocol": "tcp",
  "service": "EPP",
  "oneLiner": "Extensible Provisioning Protocol — how domain registrars create and update domains at a registry.",
  "whatItIs": "EPP (RFC 5730) is the XML request/response protocol registrars use to register, renew, transfer and delete domain names, hosts and contacts at a registry such as Verisign or a ccTLD operator. RFC 5734 defines its TCP transport: each session runs inside TLS on port 700, opens with a greeting, and requires a login command with registrar credentials. Registries restrict it to allowlisted registrar source IPs with client certificates, so it is public-by-design but never open to the world. If you find 700 open, it is a registry, a registrar's test/OT&E endpoint, or an EPP server implementation someone is developing against.",
  "exposure": {
    "verdict": "careful",
    "note": "Legitimately reachable across the internet, but only ever from allowlisted registrar IPs with mutual TLS — an EPP endpoint accepting arbitrary sources is misconfigured."
  },
  "checkCommand": "openssl s_client -connect TARGET:700",
  "links": [
    {
      "title": "RFC 5730 — Extensible Provisioning Protocol (EPP)",
      "url": "https://www.rfc-editor.org/rfc/rfc5730.html",
      "kind": "spec"
    },
    {
      "title": "RFC 5734 — EPP Transport over TCP",
      "url": "https://www.rfc-editor.org/rfc/rfc5734.html",
      "kind": "spec"
    },
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml",
      "kind": "iana"
    }
  ]
}