stryker.com

Checked 22 October 2026, 10:52 UTC · via 8.8.8.8
!Passed with warnings
24 passed 1 warning 0 failed 6 info

Registration

info

.com generic · CSC Corporate Domains, Inc. · expires 2027-05-31

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
CSC Corporate Domains, Inc.
Registered
1 June 1995
Last changed
27 May 2026
Expires
31 May 2027
Status
client transfer prohibited
Registry nameservers
dns1.cscdns.net, dns2.cscdns.net
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2027-05-31 #3
    The registration is valid until 2027-05-31 (220 days).
  • ✓ Transfer locked #4
    Registry status: client transfer prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

info

dns1.cscdns.net, dns2.cscdns.net

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
dns1.cscdns.net, dns2.cscdns.net
NS in the zone
dns1.cscdns.net, dns2.cscdns.net
NameserverAddressesNetwork (AS)Glue
dns1.cscdns.net156.154.130.100 2610:a1:1022::100AS12008 VERCARA - Vercara, LLC, US AS12008 VERCARA - Vercara, LLC, US-
dns2.cscdns.net156.154.131.100 2610:a1:1023::100AS12008 VERCARA - Vercara, LLC, US AS12008 VERCARA - Vercara, LLC, US-

Checks

  • i
    2 nameservers
    Two nameservers meet the minimum; RFC 2182 recommends three or more for important zones: dns1.cscdns.net, dns2.cscdns.net.
    #6
  • ✓ Parent and zone agree #7
    The parent delegation and the zone's NS records list the same nameservers.
  • ✓ No glue needed #8
    All nameservers are outside the zone, so no glue records are needed.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 2 IPv4 /24s and 2 IPv6 /48s.
  • i
    All nameservers in one AS
    All nameserver addresses are announced by one network operator (AS12008 (VERCARA - Vercara, LLC, US): 4 addresses). An outage or attack on that network affects all nameservers; large anycast providers mitigate this, but a secondary DNS provider adds independence.
    #11
  • i
    All nameserver names under .net
    All nameserver names are under one TLD, so a problem with that TLD also makes the nameservers unreachable. Some operators use names under two TLDs for extra resilience.
    #12
  • ✓ All reachable over IPv6 #13
    Every nameserver has an IPv6 address.

Nameservers

info

4 of 4 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
dns1.cscdns.net 156.154.130.100NOERROR, 32 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver
dns1.cscdns.net 2610:a1:1022::100NOERROR, 32 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver
dns2.cscdns.net 156.154.131.100NOERROR, 3 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver
dns2.cscdns.net 2610:a1:1023::100NOERROR, 3 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver

Checks

  • ✓ All respond #14
    All 4 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • i
    Identifying string disclosed
    These nameservers answer version queries with a string that is not a version number: dns1.cscdns.net: "UltraDNS Nameserver"; dns2.cscdns.net: "UltraDNS Nameserver".
    #17
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

pass

serial 2012094138 · primary dns1.cscdns.net

Found

Primary (MNAME)
dns1.cscdns.net
Contact (RNAME)
hostmaster.cscdns.net
Serial
2012094138
Refresh / retry
2400 s / 360 s
Expire
1209600 s
Negative TTL
86400 s

Serial per nameserver

NameserverSerial
dns1.cscdns.net (156.154.130.100)2012094138
dns1.cscdns.net (2610:a1:1022::100)2012094138
dns2.cscdns.net (156.154.131.100)2012094138
dns2.cscdns.net (2610:a1:1023::100)2012094138

Checks

  • ✓ Serial 2012094138 everywhere #22
    All nameservers serve the same version of the zone.
  • ✓ Timers within recommendations #23
    SOA refresh 40m, retry 6m, expire 14d, negative TTL 1d.
  • ✓ Primary is a public nameserver #24
    The primary nameserver dns1.cscdns.net is one of the listed nameservers.
  • ✓ Contact hostmaster@cscdns.net #25
    The SOA RNAME hostmaster.cscdns.net means hostmaster@cscdns.net.
  • ✓ Timestamp serial #26
    The serial 2012094138 is a Unix timestamp (2033-10-05 03:02 UTC).

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

info

63 records at the apex

Found

Read from
156.154.130.100:53
TypeValueTTL
SOAdns1.cscdns.net. hostmaster.cscdns.net. 2012094138 2400 360 1209600 8640086400
NSdns1.cscdns.net.86400
NSdns2.cscdns.net.86400
A172.169.11.156300
MX0 stryker-com.mail.protection.outlook.com.3600
TXT"MS=ms92917981"300
TXT"y-avtYYqDPfvD4SkL3q0QMRU7X-oDxY"300
TXT"bdn4c22zl7h6tykclt0zd25qysm0wpgf"300
TXT"msfpkey=5rhwcp417ngc3lgto4ls1ct84"300
TXT"healthassessmentapp.azurewebsites.net"300
TXT"mandrill_verify.WGTWJgx0NOEJ4Z7QOt8B9g"300
TXT"linear-domain-verification=dy8ichuqidj3"300
TXT"dropbox-domain-verification=t8x627dkawcy"300
TXT"qa-healthassessmentapp.azurewebsites.net"300
TXT"EAwakLy3nKO4M3lLeyD8GT7DiduCXBLdlb0onWgMnEM="300
TXT"docusign=02358c0a-9361-4b17-9cb6-f059ee58bd3b"300
TXT"jamf-site-verification=xMxxOrrrAq6EBKAUv_gcTg"300
TXT"qYo4yVLeB/Hh2OXttJeUm1dTY4IzRQcD2k4QdoIBpnM=."300
TXT"vertexinc-cloud-6a02dc8f-d513-44f4-b032-a5c251d8ae02"300
TXT"airtable-verification=25029519111da525dacb8c9045a6d095"300
TXT"openai-domain-verification=dv-2KxufsIV7AJnjFmx8moPpWCA"300
TXT"docker-verification=855b1f46-8c43-481a-850e-7f9bffe70d07"300
TXT"read-ai-verification=018cf4cc-a504-717e-a917-799ee2eb29c3"300
TXT"miro-verification=c6cfe9e572ddae130db898d25c7b43e2cf1c674b"300
TXT"facebook-domain-verification=59tcjtalrsgwojgdnsgwrm4l88dnz5"300
TXT"facebook-domain-verification=94iy8ctmdsgrg1n2on5m1wnr23y4xh"300
TXT"ms-domain-verification=dace49dc-b7a1-4124-93fe-069503ce1b2c"300
TXT"smartsheet-site-validation=7lCmqOFW-KJPZ-lyKFmtBUrlLNPnd70E"300
TXT"smartsheet-site-validation=GaofXk0_zqHRLrr22QbSf3X0htebWzFO"300
TXT"smartsheet-site-validation=iqV6zjC7IAiynOp28UJTAPFMqD8Hy4v7"300
TXT"smartsheet-site-validation=sx7q4K2oM6AqAkmofJq-h3gdf6okm9pB"300
TXT"smartsheet-site-validation=xkXJyUW_7C8kJP9uU2FaY9x_JKwRrNVy"300
TXT"onetrust-domain-verification=57191e9f56b043d8a6f2b79ac72f0997"300
TXT"onetrust-domain-verification=70c19fe1d6314dee9d2d243b425c7e10"300
TXT"onetrust-domain-verification=906974c2835849a8a06c2d64ea7e7fe9"300
TXT"onetrust-domain-verification=aaa128fdc91a43fda757eb781e67355f"300
TXT"anthropic-domain-verification-b7nw9d=S7RpkKRbPFoVAprJxk75kNYqP"300
TXT"anthropic-domain-verification-t8svfn=QFi49Y0hLemfz672FlwWb38oy"300
TXT"3BBB6C270748110EA3A2FCD59B80610E844D423D6D171D41B98BFE02D42BA5D1"300
TXT"adobe-idp-site-verification=1dd4c488-610d-4a6f-b881-8f8e166a8a91"300
TXT"gitpod-verification=ilvLHn-GShNX2KLTZSX9PI6vx04q4CZ2pFCLU6Swjgc="300
TXT"google-site-verification=7p14R-GRf1z_2vGQMy9pHD6qG2R2wDp3N5KggZMYmy4"300
TXT"google-site-verification=Evl-iIVJ0E2XxL47mnGktcqsyW5STiJ0YopiEglQTzw"300
TXT"google-site-verification=RkMITOzbcua-U52358oUu_R8c8VXK6emIX1gs0AmuaU"300
TXT"pexip-ms-tenant-domain-verification=3474f296-3dd3-42db-bc58-c4cbe65ac358"300
TXT"_globalsign-domain-verification=yp2GLwJxCoB-sXMI_uu4JUbQH2bk5TckxmGYsrTrY1"300
TXT"atlassian-sending-domain-verification=3e67d58f-942b-452f-a77d-a77e85483412"300
TXT"atlassian-sending-domain-verification=711ac25d-46d8-434b-962d-20a68f869937"300
TXT"pardot272622=09cc9886d6f3a222ef874a1edeac3b79a7dd20219b0b78b5756296f3603b5436"300
TXT"pardot429542=f124fbc8eaca0d1c49623e47cf63e164bab11dd79ae63decb012bef53ee0605a"300
TXT"pardot968953=005509da5e1063ac4259bf695ae7c35b85e816001c999761570dfdcada09906c"300
TXT"pardot968953=56c90505327b518fb80f80a433aa782a5822e7dbead13ee53f7d4381ade3185c"300
TXT"pardot1091533=50119305b89fef62a431d3e1a315fb99a5c6ccc6dea9ba5b645f71b208e3bfc0"300
TXT"sending_domain1091533=70861fe916c02e8364fccb62248644319e11bc24c44c7cb081c7c6d4dfd81f97"300
TXT"VQhIy4GjaWZjWPtK4XHC3fMDKbayoE6bTW76ztGy04AVjnWlyP7xUi7kKsAoLMS+QwGc99YJOLCYMk3/ooDV6w=="300
TXT"box-domain-verification=b53f55ecff81cdfa3087c323f2ced56d0a8c7aee6bbb7f8b3e6d506084adcc42"300
TXT"box-domain-verification=edadcc921ebad75441f775e4ed08d45545e6c1c14489ef3af699b62a3bc11bbd"300
TXT"hcp-domain-verification=2faeb1264ea57aa343dc81062c032cabf32530bbc62f5245cb104873e7bdc79f"300
TXT"infoblox-domain-mastery=7350324fd1d0fb5d45c0a28eab3119d1614eacd766278d0ef9cb907d03d918f103"300
TXT"atlassian-domain-verification=stxAfRAcW2HhbmaAhoB80KUjkwX4Neo1g2mdQuycC2t4rHB8ubao9UyvWKOQcqLj"300
TXT"atlassian-domain-verification=zSovkQLvT/vepOPnyq3JxWj00xhEBAIaL4bHBtnzGDZ7pmrtk/q6ozvdXCqRjiGO"300
TXT"figma-domain-verification=9a152357d602af0e7cf6bb046a08a792861b9e2b4223457a1f3dca9b712c4725-1724415498"300
TXT"v=spf1 include:servers.mcsv.net include:mktomail.com include:spf.protection.outlook.com include:_spf.salesforce.com ip4:213.95.132.52 ip4:64.136.252.175 ip4:64.136.252.176 ip4:64.238.211.94 ip4:50.203.11.54 ip4:66.162.128.50 ip4:148.163.142.96 ip4:148.163" ".146.125 a:web.q4press.com include:spf.mandrillapp.com include:et._spf.pardot.com include:bpopen.capgemini.com ip4:192.200.190.165/30 ip4:104.195.80.16/28 ip4:192.200.181.144/28 ip4:174.37.85.64/28 ip4:75.126.150.248/30 ip4:63.141.144.128/28 ip4:104.195.1" "27.0/28 ip4:3.230.26.74 ip4:3.217.56.193 ip4:52.21.127.63 ip4:3.230.59.248 ip4:34.208.121.190 ip4:54.213.31.54 ip4:44.227.88.159 ip4:34.217.199.92 ip4:4.34.42.132 ip4:4.34.42.178 ip4:4.34.42.179 ip4:213.155.74.87 ip4:213.155.74.157 ip4:213.155.74.23 ip4:2" "13.155.74.133 ip4:3.21.23.140 ip4:3.22.102.251 ip4:3.23.36.254 ip4:3.23.38.224 ip4:3.132.65.8 ip4:3.216.57.69 ip4:3.221.39.20 ip4:23.21.137.69 ip4:34.234.250.32 ip4:44.222.17.95 ip4:52.12.139.153 ip4:52.13.73.26 ip4:52.13.126.222 ip4:54.188.101.235 ip4:54" ".212.187.12 ip4:147.253.221.31 ip4:156.70.17.123 ip4:156.70.17.124 ip4:156.70.17.125 ip4:156.70.17.126 ip4:156.70.17.127 ip4:164.136.252.163 ip4:14.202.162.82 ip4:148.59.100.16/28 ip4:148.59.101.16/28 ip4:138.1.36.217 ip4:147.154.18.119 ip4:149.72.251.202" " ip4:149.72.63.221 ip4:35.80.141.6 ip4:44.229.121.55 ip4:148.59.100.16/28 -all"300

Checks

  • ✓ TTLs within range #32
    TTLs: A 5m, MX 1h, NS 1d. The NS TTL at the parent is 2d and in the zone 1d; resolvers may use either.
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • i
    No CAA records
    Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.
    #35