← Check another domain

openai.com

70/100

B

Scanned 2026-05-12

Cached result — add ?fresh=1 to force a new scan

Subcheck breakdown

Check	Status	Score
DMARC policy	reject	25/25
SPF record	ok	10/10
DKIM selector	found	10/10
TLS certificate	ok	20/20
WHOIS integrity	whois rate limited	5/10
Subdomain takeover	vulnerable	0/15
MTA-STS / TLSRPT	missing	0/5
DNSSEC	unsigned	0/5

Recommendations

Publish MTA-STS: add _mta-sts.openai.com TXT and host a policy at https://mta-sts.openai.com/.well-known/mta-sts.txt
Enable DNSSEC on openai.com — DS records must be published to the com zone by your registrar
One or more openai.com subdomains may be vulnerable to takeover — audit and remove dangling DNS entries

Details

Area	Detail
DMARC	v=DMARC1; p=reject; rua=mailto:tdfyvl0n@ag.dmarcian.com; ruf=mailto:tdfyvl0n@fr.dmarcian.com; fo=1; aspf=r
SPF	v=spf1 include:_spf.google.com include:spf.protection.outlook.com include:8050860.spf04.hubspotemail.net include:mktomail.com include:spf_c.oraclecloud.com -all
DKIM selectors	google, selector1
TLS certificate	Ok (39 days remaining) — CN=WE1,O=Google Trust Services,C=US
WHOIS registrar	—
WHOIS expires	—
Subdomains (32 subdomains scanned, 4 at risk)	32 found
DNSSEC	Unsigned