walgreens.com

Checked 22 October 2026, 11:23 UTC · via 8.8.8.8
✗Problems found
22 passed 4 warnings 1 failed 4 info

Registration

fail

.com generic · CSC Corporate Domains, Inc. · expires 2027-05-05

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
CSC Corporate Domains, Inc.
Registered
4 May 1995
Last changed
1 May 2026
Expires
5 May 2027
Status
client transfer prohibited, server delete prohibited, server transfer prohibited, server update prohibited
Registry nameservers
a1-90.akam.net, a10-67.akam.net, a3-65.akam.net, a8-64.akam.net, a9-64.akam.net, corp-eqix-ch4-dnsxs-001.walgreens.com, corp-eqix-dc5-dnsxs-001.walgreens.com
RDAP server
https://rdap.verisign.com/com/v1/
Lookup error: DNS query for com failed: read udp 46.225.38.91:45689->8.8.8.8:53: i/o timeout

Checks

  • i
    Could not be checked
    The TLD lookup failed, so this could not be checked: DNS query for com failed: read udp 46.225.38.91:45689->8.8.8.8:53: i/o timeout
    #1
  • ✗
    TLD not in the root zone
    .com is not delegated in the root zone, so names under it can't be resolved on the public internet.
    #2
  • ✓ Expires on 2027-05-05 #3
    The registration is valid until 2027-05-05 (194 days).
  • ✓ Transfer locked #4
    Registry status: client transfer prohibited, server delete prohibited, server transfer prohibited, server update prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

warn

a1-90.akam.net, a10-67.akam.net, a3-65.akam.net, a8-64.akam.net, a9-64.akam.net, corp-eqix-ch4-dnsxs-001.walgreens.com, corp-eqix-dc5-dnsxs-001.walgreens.com

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
a1-90.akam.net, a10-67.akam.net, a3-65.akam.net, a8-64.akam.net, a9-64.akam.net, corp-eqix-ch4-dnsxs-001.walgreens.com, corp-eqix-dc5-dnsxs-001.walgreens.com
NS in the zone
a1-90.akam.net, a10-67.akam.net, a3-65.akam.net, a4-67.akam.net, a8-64.akam.net, a9-64.akam.net, corp-eqix-ch4-dnsxs-001.walgreens.com, corp-eqix-dc5-dnsxs-001.walgreens.com
NameserverAddressesNetwork (AS)Glue
a1-90.akam.net193.108.91.90 2600:1401:2::5aAS20940 AKAMAI-ASN1 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
a10-67.akam.net96.7.50.67 2600:1480:d000::43AS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
a3-65.akam.net96.7.49.65 2600:1408:1c::41AS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
a4-67.akam.net (zone only)72.246.46.67 2600:1480:9000::43AS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
a8-64.akam.net2.16.40.64 2600:1403:a::40AS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
a9-64.akam.net184.85.248.64 2a02:26f0:117::40AS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
corp-eqix-ch4-dnsxs-001.walgreens.com208.200.126.28AS701 UUNET - Verizon Business, US208.200.126.28
corp-eqix-dc5-dnsxs-001.walgreens.com208.200.126.12AS701 UUNET - Verizon Business, US208.200.126.12

Checks

  • ✓ 7 nameservers #6
    Delegated to a1-90.akam.net, a10-67.akam.net, a3-65.akam.net, a8-64.akam.net, a9-64.akam.net, corp-eqix-ch4-dnsxs-001.walgreens.com, corp-eqix-dc5-dnsxs-001.walgreens.com.
  • !
    NS sets differ
    The nameservers at the parent and in the zone should be the same. Only in the zone: a4-67.akam.net. a1-90.akam.net, a10-67.akam.net, a3-65.akam.net, a4-67.akam.net, a8-64.akam.net, a9-64.akam.net, corp-eqix-ch4-dnsxs-001.walgreens.com, corp-eqix-dc5-dnsxs-001.walgreens.com report NS a1-90.akam.net a10-67.akam.net a3-65.akam.net a4-67.akam.net a8-64.akam.net a9-64.akam.net corp-eqix-ch4-dnsxs-001.walgreens.com corp-eqix-dc5-dnsxs-001.walgreens.com.
    #7
  • ✓ Glue present and correct #8
    Glue is published for the nameservers inside the zone: corp-eqix-ch4-dnsxs-001.walgreens.com, corp-eqix-dc5-dnsxs-001.walgreens.com.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 7 IPv4 /24s and 6 IPv6 /48s.
  • ✓ 3 autonomous systems #11
    The nameservers are spread over: AS20940 (AKAMAI-ASN1 - Akamai International B.V., NL): 1 address; AS21342 (AKAMAI-ASN2 - Akamai International B.V., NL): 11 addresses; AS701 (UUNET - Verizon Business, US): 2 addresses.
  • ✓ Nameserver names under 2 TLDs #12
    Nameserver names use the TLDs .com, .net.
  • i
    Partly IPv6
    These nameservers have no IPv6 address: corp-eqix-ch4-dnsxs-001.walgreens.com, corp-eqix-dc5-dnsxs-001.walgreens.com.
    #13

Nameservers

warn

14 of 14 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
a1-90.akam.net 193.108.91.90NOERROR, 3 ms, authoritativenoyes / yesrefused41824.8
a1-90.akam.net 2600:1401:2::5aNOERROR, 4 ms, authoritativenoyes / yesrefused41824.8
a10-67.akam.net 96.7.50.67NOERROR, 3 ms, authoritativenoyes / yesrefused48878.33
a10-67.akam.net 2600:1480:d000::43NOERROR, 4 ms, authoritativenoyes / yesrefused48878.31
a3-65.akam.net 96.7.49.65NOERROR, 3 ms, authoritativenoyes / yesrefused41824.6
a3-65.akam.net 2600:1408:1c::41NOERROR, 3 ms, authoritativenoyes / yesrefused41824.8
a4-67.akam.net 72.246.46.67NOERROR, 4 ms, authoritativenoyes / yesrefused48878.31
a4-67.akam.net 2600:1480:9000::43NOERROR, 4 ms, authoritativenoyes / yesrefused48878.29
a8-64.akam.net 2.16.40.64NOERROR, 4 ms, authoritativenoyes / yesrefused48878.30
a8-64.akam.net 2600:1403:a::40NOERROR, 4 ms, authoritativenoyes / yesrefused48878.33
a9-64.akam.net 184.85.248.64NOERROR, 4 ms, authoritativenoyes / yesrefused41824.10
a9-64.akam.net 2a02:26f0:117::40NOERROR, 3 ms, authoritativenoyes / yesrefused41824.5
corp-eqix-ch4-dnsxs-001.walgreens.com 208.200.126.28NOERROR, 113 ms, authoritativenoyes / yesrefusedGo Away!!!
corp-eqix-dc5-dnsxs-001.walgreens.com 208.200.126.12NOERROR, 99 ms, authoritativenoyes / yesrefusedGo Away!!!

Checks

  • ✓ All respond #14
    All 14 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • !
    Software version disclosed
    These nameservers report their software version via version.bind/version.server, which helps attackers find known vulnerabilities: a1-90.akam.net: "41824.8"; a10-67.akam.net: "48878.33"; a10-67.akam.net: "48878.31"; a3-65.akam.net: "41824.6"; a3-65.akam.net: "41824.8"; a4-67.akam.net: "48878.31"; a4-67.akam.net: "48878.29"; a8-64.akam.net: "48878.30"; a8-64.akam.net: "48878.33"; a9-64.akam.net: "41824.10"; a9-64.akam.net: "41824.5". Hide or replace the version string.
    #17
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

info

serial 715321769 · primary corp-eqix-ch4-dnscr-001.walgreens.com

Found

Primary (MNAME)
corp-eqix-ch4-dnscr-001.walgreens.com
Contact (RNAME)
postmaster.no.email.please
Serial
715321769
Refresh / retry
1200 s / 180 s
Expire
1209600 s
Negative TTL
3600 s

Serial per nameserver

NameserverSerial
a1-90.akam.net (193.108.91.90)715321769
a1-90.akam.net (2600:1401:2::5a)715321769
a10-67.akam.net (96.7.50.67)715321769
a10-67.akam.net (2600:1480:d000::43)715321769
a3-65.akam.net (96.7.49.65)715321769
a3-65.akam.net (2600:1408:1c::41)715321769
a4-67.akam.net (72.246.46.67)715321769
a4-67.akam.net (2600:1480:9000::43)715321769
a8-64.akam.net (2.16.40.64)715321769
a8-64.akam.net (2600:1403:a::40)715321769
a9-64.akam.net (184.85.248.64)715321769
a9-64.akam.net (2a02:26f0:117::40)715321769
corp-eqix-ch4-dnsxs-001.walgreens.com (208.200.126.28)715321769
corp-eqix-dc5-dnsxs-001.walgreens.com (208.200.126.12)715321769

Checks

  • ✓ Serial 715321769 everywhere #22
    All nameservers serve the same version of the zone.
  • ✓ Timers within recommendations #23
    SOA refresh 20m, retry 3m, expire 14d, negative TTL 1h.
  • i
    Hidden master (not resolvable)
    The primary nameserver corp-eqix-ch4-dnscr-001.walgreens.com is not listed as a nameserver and does not resolve publicly: a hidden master, or a placeholder name. Some tools (e.g. dynamic updates) use MNAME to find the primary.
    #24
  • ✓ Contact postmaster@no.email.please #25
    The SOA RNAME postmaster.no.email.please means postmaster@no.email.please.
  • ✓ Counter serial #26
    The serial 715321769 is a plain counter.

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

warn

47 records at the apex

Found

Read from
193.108.91.90:53
TypeValueTTL
SOAcorp-eqix-ch4-dnscr-001.walgreens.com. postmaster.no.email.please. 715321769 1200 180 1209600 36003600
NScorp-eqix-ch4-dnsxs-001.walgreens.com.3600
NSa9-64.akam.net.3600
NSa4-67.akam.net.3600
NSa1-90.akam.net.3600
NSa3-65.akam.net.3600
NSa8-64.akam.net.3600
NScorp-eqix-dc5-dnsxs-001.walgreens.com.3600
NSa10-67.akam.net.3600
A23.1.106.10160
A184.31.10.10160
A184.31.3.9860
A23.1.99.9860
MX10 usb-smtp-inbound-2.mimecast.com.300
MX10 usb-smtp-inbound-1.mimecast.com.300
TXT"uber-domain-verification=80c45927-79a5-4e11-b898-5f80f42f8ddf"3600
TXT"google-site-verification=Ip9t68zEN4Pu0b1WGjZhuqW5TejqJFuB62Y-axOmVEM"3600
TXT"slack-domain-verification=59WikB0MivfpD8YkJSklaExPMULdVn8kZaFwmaEQ"3600
TXT"T5CTBtfMVr2v3DjUjvNzxCDq5aXeApUB6vQ0UeP4KR+eoT5ieU+KHTKiOvYIFi+L0KGWxzkxiMSIbc3nCFWPNQ=="3600
TXT"infoblox-domain-mastery=c9428a2cf511af668f57a9e155d46ab452c800005c63a98332544885a19dc96162"3600
TXT"did=did:plc:gncuhzcwzbtyj4uo5qbgvcw3"3600
TXT"cisco-ci-domain-verification=7d6da6349d05264079634e1f78aee2b5dc277b5fa2e249cabe74d502c687f7ab"3600
TXT"bv-domain-verification=e0af2a43b237343d2273b7e26846c58e74d37885c0d25ab3ee320e7b0b084514"3600
TXT"pardot61522=de4fc0352c1a81bfee1f8d249e1ac466901c91e5d1d5f98495f5014089021a7d"3600
TXT"apple-domain-verification=5wXrzXaXc9FC7wv7"3600
TXT"adobe-idp-site-verification=f3d3a39763d085bd2b18e6a31838ede28cfd528a6892da0511b84b16085a6bf0"3600
TXT"axway-amplify=ecd943ad-1ca0-41f2-8eb0-69582db6d6fe"3600
TXT"facebook-domain-verification=9qfi4d4w1irc6eeahec9kydvsiab54"3600
TXT"v=spf1 exists:%{i}.spf.hc2985-66.iphmx.com include:5786991e._1.usb.2._d.mim.ec -all"3600
TXT"jamf-site-verification=iLPY30eY7a0my70Cj99inw"3600
TXT"docusign=127cf9ae-f6d7-4b9d-bab5-66901c2765ed"3600
TXT"_zr9gs4j0ullnq7kma7o9p37b7m1x2a0"3600
TXT"fe533009bf4f4afbb8374f097733cefa"3600
TXT"Dynatrace-site-verification=90500b9a-bd85-4570-9104-9f5d47df7acd__gq6b56esnnv0hg7ffrpjnh76l5"3600
TXT"mongodb-site-verification=sp4CVawij0Dg08olZPwoMw4A6KjwvYNT"3600
TXT"google-gws-recovery-domain-verification=74746983"3600
TXT"Dynatrace-site-verification=d8462443-43f8-4196-a1d9-14666c3b1ade__9ndmbrvq8qmp1913c88biqokl7"3600
TXT"_zyq9paqye88n97m9kkra2and03i5pck"3600
TXT"_g70zwz1vn58yze8pr4riyl5nj5m24of"3600
TXT"pexip-ms-tenant-domain-verification=afefb789-7e09-4926-b1f6-547702e45f15"3600
TXT"Dynatrace-site-verification=84606470-b7f9-4d5c-92d4-040eac391954__3bm2lbljg2icttlbvi5svbn8c5"3600
TXT"_u2z1oknchyyemwm6g07ujn5oa2pg5j0"3600
TXT"onetrust-domain-verification=45537cffc2f44b21b9c99fbccb4f2a16"3600
TXT"b4292fece1544cc5ac0adbd23db88d87"3600
TXT"onetrust-domain-verification=1249e63c90544049ad21bd4170c266a3"3600
TXT"knowbe4-site-verification=adce7473628ec1ac45418d42a0fe33aa"3600
TXT"onetrust-domain-verification=b4292fece1544cc5ac0adbd23db88d87"3600

Checks

  • !
    Very low TTLs
    These records have a TTL below 5m, causing extra queries and slower lookups: A (1m). Low TTLs are useful just before a planned change. The NS TTL at the parent is 2d and in the zone 1h; resolvers may use either.
    #32
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • i
    No CAA records
    Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.
    #35