medtronic.com

Checked 22 October 2026, 09:44 UTC · via 8.8.8.8
!Passed with warnings
25 passed 2 warnings 0 failed 4 info

Registration

info

.com generic · MarkMonitor Inc. · expires 2027-06-06

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
MarkMonitor Inc.
Registered
7 June 1990
Last changed
5 May 2025
Expires
6 June 2027
Status
client delete prohibited, client transfer prohibited, client update prohibited
Registry nameservers
ns2.medtronic.com, ns3.medtronic.com, ns4.medtronic.com, ns5.medtronic.com
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2027-06-06 #3
    The registration is valid until 2027-06-06 (226 days).
  • ✓ Transfer locked #4
    Registry status: client delete prohibited, client transfer prohibited, client update prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

warn

ns2.medtronic.com, ns3.medtronic.com, ns4.medtronic.com, ns5.medtronic.com

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
ns2.medtronic.com, ns3.medtronic.com, ns4.medtronic.com, ns5.medtronic.com
NS in the zone
ns2.medtronic.com, ns3.medtronic.com, ns4.medtronic.com, ns5.medtronic.com
NameserverAddressesNetwork (AS)Glue
ns2.medtronic.com144.15.255.10AS13684 ASN-MEDTRONIC-1 - Medtronic, Incorporated, US144.15.255.10
ns3.medtronic.com144.15.238.202AS13684 ASN-MEDTRONIC-1 - Medtronic, Incorporated, US144.15.238.202
ns4.medtronic.com144.15.255.33AS13684 ASN-MEDTRONIC-1 - Medtronic, Incorporated, US144.15.255.33
ns5.medtronic.com144.15.238.210AS13684 ASN-MEDTRONIC-1 - Medtronic, Incorporated, US144.15.238.210

Checks

  • ✓ 4 nameservers #6
    Delegated to ns2.medtronic.com, ns3.medtronic.com, ns4.medtronic.com, ns5.medtronic.com.
  • ✓ Parent and zone agree #7
    The parent delegation and the zone's NS records list the same nameservers.
  • ✓ Glue present and correct #8
    Glue is published for the nameservers inside the zone: ns2.medtronic.com, ns3.medtronic.com, ns4.medtronic.com, ns5.medtronic.com.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 2 IPv4 /24s and 0 IPv6 /48s.
  • i
    All nameservers in one AS
    All nameserver addresses are announced by one network operator (AS13684 (ASN-MEDTRONIC-1 - Medtronic, Incorporated, US): 4 addresses). An outage or attack on that network affects all nameservers; large anycast providers mitigate this, but a secondary DNS provider adds independence.
    #11
  • i
    All nameserver names under .com
    All nameserver names are under one TLD, so a problem with that TLD also makes the nameservers unreachable. Some operators use names under two TLDs for extra resilience.
    #12
  • !
    No IPv6
    None of the nameservers has an IPv6 address, so IPv6-only resolvers can't reach them.
    #13

Nameservers

pass

4 of 4 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
ns2.medtronic.com 144.15.255.10NOERROR, 128 ms, authoritativenoyes / yesrefused-
ns3.medtronic.com 144.15.238.202NOERROR, 125 ms, authoritativenoyes / yesrefused-
ns4.medtronic.com 144.15.255.33NOERROR, 130 ms, authoritativenoyes / yesrefused-
ns5.medtronic.com 144.15.238.210NOERROR, 128 ms, authoritativenoyes / yesrefused-

Checks

  • ✓ All respond #14
    All 4 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • ✓ No version disclosed #17
    The nameservers don't reveal their software version.
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

pass

serial 2015047809 · primary ns2.medtronic.com

Found

Primary (MNAME)
ns2.medtronic.com
Contact (RNAME)
hostmaster.medtronic.com
Serial
2015047809
Refresh / retry
1800 s / 300 s
Expire
2419200 s
Negative TTL
3600 s

Serial per nameserver

NameserverSerial
ns2.medtronic.com (144.15.255.10)2015047809
ns3.medtronic.com (144.15.238.202)2015047809
ns4.medtronic.com (144.15.255.33)2015047809
ns5.medtronic.com (144.15.238.210)2015047809

Checks

  • ✓ Serial 2015047809 everywhere #22
    All nameservers serve the same version of the zone.
  • ✓ Timers within recommendations #23
    SOA refresh 30m, retry 5m, expire 28d, negative TTL 1h.
  • ✓ Primary is a public nameserver #24
    The primary nameserver ns2.medtronic.com is one of the listed nameservers.
  • ✓ Contact hostmaster@medtronic.com #25
    The SOA RNAME hostmaster.medtronic.com means hostmaster@medtronic.com.
  • ✓ Timestamp serial #26
    The serial 2015047809 is a Unix timestamp (2033-11-08 07:30 UTC).

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

info

65 records at the apex

Found

Read from
144.15.255.10:53
TypeValueTTL
SOAns2.medtronic.com. hostmaster.medtronic.com. 2015047809 1800 300 2419200 3600300
NSns3.medtronic.com.300
NSns5.medtronic.com.300
NSns4.medtronic.com.300
NSns2.medtronic.com.300
A144.15.206.531800
MX0 medtronic-com.mail.protection.outlook.com.300
TXT"ZOOM_verify_-nq6i9plSoG3eRYmwYqlrw"300
TXT"mongodb-site-verification=edo3tNVde8e8SEY1t87QpXqrbjQygTH9"300
TXT"amazonses:dRiUjoj4gKI2SZxX/PByHX1ofPvTC6Xd3TUxlK0MR70="300
TXT"amazonses:Rdhw1dsPc7Y5rMDBCIOkIFPWMArnIfWnv+Q29oXLD30="300
TXT"twilio-domain-verification=1fb2cfaed3f8a42df74947eeb6b4f533"300
TXT"atlassian-domain-verification=RxkWlE/GaJUCkQtafORpH1uJ0SffEOywHAq8JWvGfTxF4LJL00uKV6COAYAentaa"300
TXT"vmware-cloud-verification-e3825db3-664b-44a7-9650-457f85a7868e"300
TXT"RxkWlE/GaJUCkQtafORpH1uJ0SffEOywHAq8JWvGfTxF4LJL00uKV6COAYAentaa"300
TXT"amazonses:AYpI1SqJTwb73QsicbAOlD3SAlD6XdcfvAc5Kpf6IoE="300
TXT"miro-verification=8b28e6d0673da871972d88ff611267648e20596e"300
TXT"prodpad-domain-verification=p9p4vv59uxIMwGLBoWZ9fXTnH949kfv0LZ+VuD8U6qk="300
TXT"atlassian-domain-verification=lAeaS3x9MEpJ/QuwlJqgz5bnylxBmsbkj8PWWDgLLxhwb3QzxnE1T2/SbjKJYdit"300
TXT"apple-domain-verification=DaB0lsb69bkEzqYh"300
TXT"mixpanel-domain-verify=688d6db5-03d4-46a3-b8a9-8394ce7a3dde"300
TXT"google-site-verification=LpzHqCe88BVF3k7PXedZbAQePRiDZqvbpiO8_zoX2bI"300
TXT"Dynatrace-site-verification=f7cbc8d6-4565-4482-b409-9d13bee3a6b5__9oo6p2v49h6dfoheqi884chs2e"300
TXT"adobe-idp-site-verification=752e8969a90c9747d158aa7171327c0d8996d99a78f557831b2b52951fc997f7"300
TXT"0zr8m6rw7dsnh97v8mqxjsf63bwk7wkf"300
TXT"0Jh1Kz8ylXqH2LqiR+bSwBxO4HWwYIJ12uXUi6doFO/Xwrp70QU6xuVPbG8K+Wst+ATdSTzQY1taLXX0nInRWw=="300
TXT"atlassian-domain-verification=8boKBy4PflJnhB7saKnrVjm0/5MwVvZFPU9zpsd0zIIzObQ6ZIkV1vYpN5uqQNY4"300
TXT"docker-verification=ee827100-15d6-457c-bd36-eb621a327851"300
TXT"smartsheet-site-validation=NOpg1x7uCYfRPP0uhp-7Fe9e55cOoNoP"300
TXT"pexip-ms-tenant-domain-verification=a6313476-26b2-499e-9d4c-6670a925266d"300
TXT"_fn961e65gqcwn92hq70w77kazzvzxaz"300
TXT"_u2y93w14xrqet4vbcc42m9u6g7v0fb4"300
TXT"amazonses:Zr8wJ3wQ1PbqNCVTvBtN64P5QuvDaMOKRIEp7DG52/A="300
TXT"workplace-domain-verification=8436R9WsGWvdPDhGRh54udPpee5ix8"300
TXT"smartsheet-site-validation=gtPNi9npC-79LxRjAknlxsc9An8lG5V3"300
TXT"hcp-domain-verification=c783ac5c3b3dda670aeb9f7cf0331c14d8a65fd4ea95b6ac65ca927f23af5134"300
TXT"pardot1030131=6539736d75eb2574c5ac26abf70644954dacd30f8804d4faf90a35e6d515b0a5"300
TXT"sending_domain1030131=be343a959e321cb8949cbf7204cd7aa6b073b0257eaa2585bf7fdfe574882a92"300
TXT"_tdeuys4jcb7s1suco86pz7za4om0pvw"300
TXT"_e9cvymgd54dpicl22x9hyy7io8ucrxe"300
TXT"_y5oiu2vu3s6bf8yr3nc46q6djjfeyz1"300
TXT"_6uyoyuhjuuilx9uvsxs43yf41tko4bp"300
TXT"_fn3yl56z2k7h7jk8xaxkmptwhqrhkxi"300
TXT"postman-domain-verification=0983420b9d48f5e591ae2ccfbd60632f7ea10ae48f73197080528f6b86812beb093da30cc956ac566c6bdcee665d76af61748cf4fbd7ecf59d769f6898a90ae7"300
TXT"google-gws-recovery-domain-verification=62345475"300
TXT"cursor-domain-verification-8me692=X7oL807kK3cC4k4BedWtlXsho"300
TXT"google-gws-recovery-domain-verification=62479616"300
TXT"Dynatrace-site-verification=90ac70d1-1d8c-43eb-a763-f51b28429b45__7qjpc4vef7dg5iurp629ect67j"300
TXT"flexera-domain-verification-xxlhdfzozxwwkkdl"300
TXT"atlassian-domain-verification=KmfTKCXxctdPa4sv3pa169dF/c11y4HJGRZaqwpgdCtNvvs3RCMSu55pEXf8swyH"300
TXT"jamf-site-verification=GmQ5bPFrU2eaSjI1DqX_KA"300
TXT"atlassian-sending-domain-verification=22ceb805-7b6d-4583-8077-24ec5688067c"300
TXT"atlassian-domain-verification=k0PpsasWaqWeQixUw8F3iJcbzvm16tQ6IuXNsvYK2W36y7ehmNZ5rSqiX/OwV/wp"300
TXT"smartsheet-site-validation=r9Es1MSvxSiYcoE-ON3l8z38WFy4q1wa"300
TXT"_2ki135g635nz93brmutdkwmsxqvwxo5"300
TXT"v=spf1 include:spf.protection.outlook.com include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email -all"300
TXT"iXaakgZ3CdsLnOQ9E1ewJJp3K9F3FnQjJLxzJzauUh95rFZPL5b8SA2+Y+LSLiBHIfwxS5JLshTG16L4J/IE2w=="300
TXT"MS=ms98427762"300
TXT"docusign=c5686768-bc86-4693-b3ad-48062b9cfc67"300
TXT"ciscocidomainverification=2dd5e0753698f55fe36b7c360bbf88456daf3292b49bb3d42968823bd9688fc8"300
TXT"docusign=f5d27b82-7162-4f16-816e-106b45e695f3"300
TXT"webexdomainverification.190ES=0ea0aaa7-405c-4874-be9e-c1cc8106a269"300
TXT"facebook-domain-verification=xfkaqd4ko7xxmebck44jsmdmcrfiyt"300
TXT"teamviewer-sso-verification=47986782c714412c9d23135b51aaa935"300
TXT"docusign=2fc5cc1d-23dd-425c-acbd-5957f0762dad"300

Checks

  • ✓ TTLs within range #32
    TTLs: A 30m, MX 5m, NS 5m. The NS TTL at the parent is 2d and in the zone 5m; resolvers may use either.
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • i
    No CAA records
    Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.
    #35