← Check another domain

segment.com

93/100

A

Scanned 2026-05-21

Cached result — add ?fresh=1 to force a new scan

Subcheck breakdown

Check	Status	Score
DMARC policy	reject	25/25
SPF record	ok	10/10
DKIM selector	found	10/10
TLS certificate	ok	20/20
WHOIS integrity	ok	10/10
Subdomain takeover	clean	15/15
MTA-STS / TLSRPT	missing	0/5
DNSSEC	unsigned	0/5

Recommendations

Publish MTA-STS: add _mta-sts.segment.com TXT and host a policy at https://mta-sts.segment.com/.well-known/mta-sts.txt
Enable DNSSEC on segment.com — DS records must be published to the com zone by your registrar
Add includeSubDomains to the HSTS header on https://segment.com/ to extend protection to every subdomain.

Details

Area	Detail
DMARC	v=DMARC1; p=reject; pct=100; rua=mailto:dmarc_agg@vali.email,mailto:53c7d092@inbox.ondmarc.com; ruf=mailto:53c7d092@inbox.ondmarc.com; fo=1; ri=3600
SPF	v=spf1 include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email ~all
DKIM selectors	google, s1, s2, smtpapi, mailo, zendesk1, zendesk2
TLS certificate	Ok (147 days remaining) — CN=Amazon RSA 2048 M04,O=Amazon,C=US
WHOIS registrar	MarkMonitor Inc.
WHOIS expires	2026-07-05T04:00:00Z
Subdomains (91 subdomains scanned, 0 at risk)	91 found
DNSSEC	Unsigned