← Check another domain

x.com

85/100

A

Scanned 2026-05-12

Cached result — add ?fresh=1 to force a new scan

Subcheck breakdown

Check	Status	Score
DMARC policy	reject	25/25
SPF record	ok	10/10
DKIM selector	found	10/10
TLS certificate	ok	20/20
WHOIS integrity	whois rate limited	5/10
Subdomain takeover	clean	15/15
MTA-STS / TLSRPT	missing	0/5
DNSSEC	unsigned	0/5

Recommendations

Publish MTA-STS: add _mta-sts.x.com TXT and host a policy at https://mta-sts.x.com/.well-known/mta-sts.txt
Enable DNSSEC on x.com — DS records must be published to the com zone by your registrar

Details

Area	Detail
DMARC	v=DMARC1; p=reject; rua=mailto:caf935f12c8645b2921b0749d1fcd49e@dmarc-reports.cloudflare.net
SPF	v=spf1 ip4:199.16.156.0/22 ip4:199.59.148.0/22 include:_spf.google.com include:_spf.salesforce.com include:_oerp.x.com include:phx1.rp.oracleemaildelivery.com include:iad1.rp.oracleemaildelivery.com -
DKIM selectors	google
TLS certificate	Ok (75 days remaining) — CN=E8,O=Let's Encrypt,C=US
WHOIS registrar	—
WHOIS expires	—
Subdomains (128 subdomains scanned, 0 at risk)	128 found
DNSSEC	Unsigned