← Check another domain

zendesk.com

85/100

A

Scanned 2026-05-14

Cached result — add ?fresh=1 to force a new scan

Subcheck breakdown

Check	Status	Score
DMARC policy	reject	25/25
SPF record	ok	10/10
DKIM selector	found	10/10
TLS certificate	ok	20/20
WHOIS integrity	ok	10/10
Subdomain takeover	ct logs busy	10/15
MTA-STS / TLSRPT	missing	0/5
DNSSEC	unsigned	0/5

Recommendations

Publish MTA-STS: add _mta-sts.zendesk.com TXT and host a policy at https://mta-sts.zendesk.com/.well-known/mta-sts.txt
Enable DNSSEC on zendesk.com — DS records must be published to the com zone by your registrar

Details

Area	Detail
DMARC	v=DMARC1; p=reject
SPF	v=spf1 ip4:103.151.192.0/23 ip4:104.43.243.237 ip4:149.97.173.180 ip4:163.116.128.0/17 ip4:170.10.128.0/24 ip4:170.10.129.0/24 ip4:170.10.132.56/29 ip4:170.10.132.64/29 ip4:170.10.133.0/24 ip4:18.194.
DKIM selectors	s1, s2, k1, k2, mandrill, smtpapi, intercom, zendesk1, zendesk2
TLS certificate	Ok (76 days remaining) — CN=E8,O=Let's Encrypt,C=US
WHOIS registrar	MarkMonitor Inc.
WHOIS expires	2027-05-16T18:05:12Z
Subdomains	CT logs temporarily unavailable — retry shortly
DNSSEC	Unsigned