whirlpool.com

Checked 22 October 2026, 11:30 UTC · via 8.8.8.8
!Passed with warnings
22 passed 4 warnings 0 failed 5 info

Registration

info

.com generic · CSC Corporate Domains, Inc. · expires 2026-12-09

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
CSC Corporate Domains, Inc.
Registered
10 December 1998
Last changed
5 December 2025
Expires
9 December 2026
Status
client transfer prohibited
Registry nameservers
ns.whirlpool.com, ns2.whirlpool.com
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2026-12-09 #3
    The registration is valid until 2026-12-09 (47 days).
  • ✓ Transfer locked #4
    Registry status: client transfer prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

warn

ns.whirlpool.com, ns2.whirlpool.com

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
ns.whirlpool.com, ns2.whirlpool.com
NS in the zone
ns.whirlpool.com, ns2.whirlpool.com
NameserverAddressesNetwork (AS)Glue
ns.whirlpool.com162.159.9.142AS13335 CLOUDFLARENET - Cloudflare, Inc., US162.159.9.142
ns2.whirlpool.com173.245.58.8AS13335 CLOUDFLARENET - Cloudflare, Inc., US173.245.58.8

Checks

  • i
    2 nameservers
    Two nameservers meet the minimum; RFC 2182 recommends three or more for important zones: ns.whirlpool.com, ns2.whirlpool.com.
    #6
  • ✓ Parent and zone agree #7
    The parent delegation and the zone's NS records list the same nameservers.
  • ✓ Glue present and correct #8
    Glue is published for the nameservers inside the zone: ns.whirlpool.com, ns2.whirlpool.com.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 2 IPv4 /24s and 0 IPv6 /48s.
  • i
    All nameservers in one AS
    All nameserver addresses are announced by one network operator (AS13335 (CLOUDFLARENET - Cloudflare, Inc., US): 2 addresses). An outage or attack on that network affects all nameservers; large anycast providers mitigate this, but a secondary DNS provider adds independence.
    #11
  • i
    All nameserver names under .com
    All nameserver names are under one TLD, so a problem with that TLD also makes the nameservers unreachable. Some operators use names under two TLDs for extra resilience.
    #12
  • !
    No IPv6
    None of the nameservers has an IPv6 address, so IPv6-only resolvers can't reach them.
    #13

Nameservers

warn

2 of 2 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
ns.whirlpool.com 162.159.9.142NOERROR, 14 ms, authoritativenoyes / yesrefused2026.10.2
ns2.whirlpool.com 173.245.58.8NOERROR, 14 ms, authoritativenoyes / yesrefused2026.10.2

Checks

  • ✓ All respond #14
    All 2 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • !
    Software version disclosed
    These nameservers report their software version via version.bind/version.server, which helps attackers find known vulnerabilities: ns.whirlpool.com: "2026.10.2"; ns2.whirlpool.com: "2026.10.2". Hide or replace the version string.
    #17
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

warn

serial 2026102102 · primary ns.whirlpool.com

Found

Primary (MNAME)
ns.whirlpool.com
Contact (RNAME)
root.ns.whirlpool.com
Serial
2026102102
Refresh / retry
1500 s / 7200 s
Expire
1209600 s
Negative TTL
7200 s

Serial per nameserver

NameserverSerial
ns.whirlpool.com (162.159.9.142)2026102102
ns2.whirlpool.com (173.245.58.8)2026102102

Checks

  • ✓ Serial 2026102102 everywhere #22
    All nameservers serve the same version of the zone.
  • !
    Unusual SOA timers
    retry 2h should be shorter than refresh 25m. Current values: refresh 25m, retry 2h, expire 14d, negative TTL 2h.
    #23
  • ✓ Primary is a public nameserver #24
    The primary nameserver ns.whirlpool.com is one of the listed nameservers.
  • ✓ Contact root@ns.whirlpool.com #25
    The SOA RNAME root.ns.whirlpool.com means root@ns.whirlpool.com.
  • ✓ Date-based serial #26
    The serial 2026102102 follows the YYYYMMDDnn convention (2026-10-21).

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

info

55 records at the apex

Found

Read from
162.159.9.142:53
TypeValueTTL
SOAns.whirlpool.com. root.ns.whirlpool.com. 2026102102 1500 7200 1209600 72007200
NSns.whirlpool.com.7200
NSns2.whirlpool.com.7200
A54.175.185.69600
MX1 ASPMX.L.GOOGLE.com.300
MX10 ASPMX2.GOOGLEMAIL.com.300
MX10 ASPMX3.GOOGLEMAIL.com.300
MX5 ALT1.ASPMX.L.GOOGLE.com.300
MX5 ALT2.ASPMX.L.GOOGLE.com.300
TXT"00Dbn000001heGA=1TBbn00000008dV"7200
TXT"1g6kx90hq2nt53p7wksjw8s20phkv8pp"7200
TXT"BFafzWk6rZvFyZkAFkz47SvywacYflArVgk7IX5jUMs="7200
TXT"Dynatrace-site-verification=2bbf0dae-8700-48db-a1d8-4f53b9e68131__9srm4im3j1e50grskavs3h234d"7200
TXT"MS=FBF63B62D67CBDDCA03E94DA9F49C8C78A342579"7200
TXT"MS=ms 9T6-m7w-E4u"7200
TXT"Sendinblue-code:ab014805b23f19da2c8a50aa5b136cff"7200
TXT"ZOOM_verify_zh-SDBwgR36zuFRq5Qds_g"7200
TXT"_nxqfsqxvrfhoblu3ch95zykrxhv5p0i"7200
TXT"aafa525245d57ae1f58c5414bb8bb6f2bfc48db4"7200
TXT"adobe-idp-site-verification=d958e54dd2815029a84494953946c41dd235b2bf46f3972b373372fad46851c9"7200
TXT"adobe-sign-verification=f94b2c5a2a7b23715cb801cdc54bb07"7200
TXT"adobe-sign-verification=fe83651d96e78e4eb829c16324ad4606"7200
TXT"apple-domain-verification=qaU2JsZtareytcE7"7200
TXT"atlassian-domain-verification=gMx/0yawh/Zh/SuwQEKoNw13Zvedysr667rdiuLQmhv6GbZOExaKJx7u9FHrxegB"7200
TXT"canva-site-verification=8sAFInSYQ1ztjeGXawF-IQ"7200
TXT"cisco-ci-domain-verification=1aa978dc703f79399703c5717f6a80aa7e1c5b229a865f17c2246a4c1f80ec3b"7200
TXT"facebook-domain-verification=nvyrhn61owx00tmsbmsb41hylwsd1e"7200
TXT"google-site-verification=3TKBXl7Bpq2gBxf2B3ZYgvUanXhcZR0BBEFdin6a730"7200
TXT"google-site-verification=D4N9O2AKz9JVV0S2_1as0q_KcWxi-Wh7e4a12PKQmiI"7200
TXT"google-site-verification=J-c9JfsEo_25CZcLTOqJasljKeLA60SXYq16ocVSBmU"7200
TXT"google-site-verification=OS0FZ1MNgqUevUEr_MdUYPGB-B_ydR13MVyQ__bhX5w"7200
TXT"google-site-verification=OzQQjkHd2p6qZ2tgJ95oFAicuNZzLBhslVvsWAm1fjM"7200
TXT"google-site-verification=ThbWdbwveJPPBPMEZlmtOMNDodLIpueLKNk4o99LenQ"7200
TXT"google-site-verification=bQDXbX79KfWvUZXsOLUJCwIuxA95hV-H_kLDYbAKRyI"7200
TXT"google-site-verification=bRLyXHbMiipnFGugzxPwfwa4R4t8exKjj2a9KN0Ws5k"7200
TXT"google-site-verification=kzKlCo1lGvNdj6n4okI2_bCRNX3oymO0KdWTCC_QKdo"7200
TXT"google-site-verification=lhVaznmcb94_kZF_yVUk4ILPPDBMqdhw1uTqd9ssnss"7200
TXT"google-site-verification=nCaxXLWDvXwGh4ymq9A-5Z-7IcYyb_CVhNlkYIBxQeA"7200
TXT"google-site-verification=yzJubLhVx7M8cbGBam6CsYBGbm-2lFSxN5YwTWIeT5M"7200
TXT"hcp-domain-verification=8468b37f723b41290214733f3e6a823800d1eb4614a742696e7d648bbf405d89"7200
TXT"klaviyo-site-verification=XZ2URg"7200
TXT"miro-verification=18810b558e60574d091f4f47454ea36397b9cccc"7200
TXT"onetrust-domain-verification=f8f35fdfa5814d06a14e309af683b7d8"7200
TXT"pkhbzbq9xmj4y11lcy7x71slhmt2qzfm"7200
TXT"successfactors-site-verification=NTQzZGZmYmFlMjQ0NWIzZWEyZTcwYmZmMzE0YTA4MjFmNzNiMDZiMjQ3ZGM0ZGE1NDNiNTQzYWU1MjgzZjI3Yw=="7200
TXT"successfactors-site-verification=YzQyYmY4YzY0ODMyZDkzOGY5OTk0ZjAxM2VlM2I2Y2JhNDU2M2VhMjJkOTU3NGJjZmQzYjhjZmMwNzFiZjc2Zg=="7200
TXT"uber-domain-verification=153c3de9-450e-43f6-af5d-147ce2aefc73"7200
TXT"uber-domain-verification=25044c40-6f02-4845-ab46-92958d1a157d"7200
TXT"v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCrLHiExVd55zd/IQ/J/mRwSRMAocV/hMB3jXwaHH36d9NaVynQFYV8NaWi69c1veUtRzGt7yAioXqLj7Z4TeEUoOLgrKsn8YnckGs9i3B3tVFB+Ch/4mPhXWiNfNdynHWBcPcbJ8kjEQ2U8y78dHZj1YeRXXVvWob2OaKynO8/lQIDAQAB;"7200
TXT"v=DKIM1; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZaIsTVfGtzju9u72kkz+4MMKs030OFR4lf/F/4/UzRJtoZ14T2R7YyBCYWKTaKN03CybDG/T91FVUiIBbitzwwI8awmG+iPhjSNBffl61xNq0rWs91nD/PkWZ+69SZjOSddnJgeYt4YMsBh7VjJhj" "LUq83Mqco0OkZ7ni3kcOXx30pYJkgXxTnHVXtnwhPvOmFobmyb7+ivK1z4Ecsxn7RxHG15F2PzxM4NFsME0vy5Y+FYDqz8r1hLmyb/rPdaCgUM79uWqeZQMHx/3m8NI0sOKFeKOMMT/9oJQ3nKzo8lA8qNEuF+Q2PRNm0eHZITMkyUhlfuzEMNp6ef4mfK4wIDAQAB"7200
TXT"v=spf1 include:_spf1.esa.whirlpool.com ip4:141.8.225.31 ip4:108.171.165.162 ip4:108.171.165.165 ip4:108.166.85.69 ip4:108.166.18.54 ip4:54.213.101.90 ip4:46.37.28.46/31 ip4:208.43.106.232/29 ip4:192.155.197.208/29 ip4:46.37.28.68/31 ip4:162.211.141.9 " " " "include:_spf.google.com include:whispf.whirlpool.com include:_spf1.whirlpool.com ip4:128.177.154.7 ip4:128.177.144.60 ip4:128.177.154.60 ip4:128.177.144.7 a:extsmtp.zapproved.com ~all"7200
TXT"wiz-domain-verification=0ae22efdd38469a18693366e228d9b0043f0341bfb8cf493e20a1368af7a1b86"7200
TXT"yahoo-verification-key=ROva62l7XIbnZWtThtdSyvVpRZqAPmIssiNUMZQY6Sk="7200
TXT"zoho-verification=zb03689494.zmverify.zoho.com"7200
TXT"zoho-verification=zb71526406.zmverify.zoho.com."7200

Checks

  • ✓ TTLs within range #32
    TTLs: A 10m, MX 5m, NS 2h. The NS TTL at the parent is 2d and in the zone 2h; resolvers may use either.
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • i
    No CAA records
    Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.
    #35