← Check another domain

auth0.com

83/100

B

Scanned 2026-05-21

Cached result — add ?fresh=1 to force a new scan

Subcheck breakdown

Check	Status	Score
DMARC policy	quarantine	15/25
SPF record	ok	10/10
DKIM selector	found	10/10
TLS certificate	ok	20/20
WHOIS integrity	ok	10/10
Subdomain takeover	clean	15/15
MTA-STS / TLSRPT	missing	0/5
DNSSEC	unsigned	0/5

Recommendations

Tighten _dmarc.auth0.com from p=quarantine to p=reject once RUA reports confirm low false positives
Publish MTA-STS: add _mta-sts.auth0.com TXT and host a policy at https://mta-sts.auth0.com/.well-known/mta-sts.txt
Enable DNSSEC on auth0.com — DS records must be published to the com zone by your registrar
Add includeSubDomains to the HSTS header on https://auth0.com/ to extend protection to every subdomain.

Details

Area	Detail
DMARC	v=DMARC1; p=quarantine; pct=100; rua=mailto:dmarc@okta.com; sp=quarantine; fo=1;
SPF	v=spf1 include:spf.mandrillapp.com include:amazonses.com include:_spf.intacct.com include:mktomail.com ip4:74.125.0.0/16 ip4:209.85.128.0/17 ip6:2001:4860:4864::/56 ip6:2404:6800:4864::/56 ip6:2607:f8
DKIM selectors	google, s1, s2, mandrill, intercom, zendesk1, zendesk2
TLS certificate	Ok (65 days remaining) — CN=E8,O=Let's Encrypt,C=US
WHOIS registrar	MarkMonitor Inc.
WHOIS expires	2027-10-18T18:46:46Z
Subdomains (146 subdomains scanned, 0 at risk)	146 found
DNSSEC	Unsigned