Reports / auth0.com

auth0.com

Generated 2026-10-03 06:59 UTC Refresh data

We found 186 subdomains of auth0.com in certificate transparency logs, passive DNS and DNS brute force, including 120.auth0.com, any.auth0.com and f4u.auth0.com. auth0.com is registered with MarkMonitor Inc. since 2012-10-18 and expires 2027-10-18. Its SSL certificate from Let's Encrypt expires in 48 days. For email it has an SPF record, DMARC set to quarantine and DKIM keys on 6 common selectors.

Registration: MarkMonitor Inc.Since 2012-10-18 · expires 2027-10-18
SSL certificate: 48 days leftLet's Encrypt
Subdomains: 186 foundChecking which are live…
Email authentication: SPF, DMARC, DKIMDMARC policy: quarantine

DNS records

6 of 7 types

GET/domain/auth0.com/dns

A2	172.64.150.238 104.18.37.18
AAAA2	2a06:98c1:310b::6812:2512 2606:4700:4407::ac40:96ee
MX2	10 mxb-00553301.gslb.pphosted.com. 10 mxa-00553301.gslb.pphosted.com.
TXT26	"v=spf1 include:spf.mandrillapp.com include:amazonses.com include:_spf.intacct.com include:mktomail.com ip4:74.125.0.0/16 ip4:209.85.128.0/17 ip6:2001:4860:4864::/56 ip6:2404:6800:4864::/56 ip6:2607:f8b0:4864::/56 ip6:2800:3f0:4864::/56 ip6:2a00:1450:4864:" ":/56 ip6:2c0f:fb50:4864::/56 exists:%{i}._spf.mta.salesforce.com ip4:205.220.176.21 ip4:205.220.164.21 ip4:168.245.48.84 ip4:168.245.73.252 ip4:50.31.57.204 ip4:198.21.5.209 ip4:167.89.21.169 ip4:167.89.14.31 ip4:167.89.126.180 ip4:167.89.110.192 ip4:208." "185.229.0/24 ip4:208.185.235.0/24 ip4:148.59.108.0/23 ip4:148.59.106.0/23 ip4:159.183.193.109 ip4:159.183.213.105 ip4:159.183.213.107 ip4:159.183.214.96 ip4:159.183.213.204 ip4:159.183.200.101 ip4:149.72.233.170 ip4:149.72.90.103 ip4:192.254.124.136 ip4:1" "98.37.159.181 ip4:167.89.51.134 ip4:192.174.90.242 ip4:159.183.191.229 -all" "google-site-verification=QD7mK1DSeZAG1v6_cSyKGWw07CA7Eo4SxKaeNP8eii0" "google-site-verification=t_TqvyQaU_8mENXuC5DKXhWHDJfXkf2TYeCoU1gZFVc" "stripe-verification=16883763b763e1f186f8b457a62e6e8c8e271097d3039e4c61311b5a1857251f" "heroku-domain-verification=wy6s0kho27b7wwx0mqqypotojzwpxhvogdcrbl24uno" "smartsheet-site-validation=LsLbY5NwoKd2avlrxMVVDPRxQ_1EXRtm" Show all 26 "mongodb-site-verification=u6v5K7NNHrlBXhkD6oA9d6cD5TeAldfK" "v=MCPv1; k=ed25519; p=OAH+eQVEJoO1vwtnhyUBqWF628IBkf/8GTsF8ah5+/4=" "adobe-idp-site-verification=2ec548128df4fbccb40fa3bd89255013f93dd4e820ccf7827e13a848b9852c68" "google-site-verification=ZcKBdDakQVqk80uRRuO9wsKLpBUcZ1ipNaaPliTQKjg" "intacct-esk=4FED1A517BA8769BE0538C06A8C0589E" "mongodb-site-verification=Ps4fCFZFa6dUCH1KJMwrl3oumaCE0Jel" "miro-verification=7e1b949aa782998962514b4867a2c78156c8e5bb" "bugcrowd-verification=0c5422b6d5fc998dd934361620b97993" "d2a8o3jtx3i5xv.cloudfront.net" "atlassian-domain-verification=l+qyT57o2RRiPzd8OoFmKyYQwak0zooBv8cvGyY0cYJY4U1eWOVCY4RxSzoJlLws" "cloudbees-domain-verification=98a9b45129adb6e8036d956adda9e86db90e40c5" "atlassian-domain-verification=Zwms6wYibNl10yHl8rJaGNFzJq96MUSWCIbyNg1WuDMgusi9fbuJanqeCKADWjBf" "MS=ms59194513" "drift-domain-verification=2d529019a29b7f2f58bd59a41a0abdde872c80cf584e20d1b58cfb628af61b8e" "stripe-verification=a586899fe9532223a9a3a3405f7f99d9e1286b8cf116a9c412d644708f1a104e" "google-site-verification=7wgY2mcAyS67VorHGL-rIMc4Gy7Hd1tOrRcfBgegdeg" "mongodb-site-verification=L4rNn1yNZmY392AVsc3S24hHtIqIyIU0" "browserstack-domain-verification=177928a5-5243-4000-8f1d-70f8cc190f89" "apple-domain-verification=R8abEXzqodj1WhoR" "onetrust-domain-verification=7b3d00b1e32140bb929f2a21735bae16"
NS2	monroe.ns.cloudflare.com. kolton.ns.cloudflare.com.
CAA	No CAA records
SOA1	kolton.ns.cloudflare.com. dns.cloudflare.com. 2416448767 10000 2400 604800 1800

Live lookup, cached up to 5 min.

WHOIS / RDAP

via rdap.org

GET/domain/auth0.com/whois

Registrar: MarkMonitor Inc.
Registered: 2012-10-18
Expires: 2027-10-18
Last updated: 2025-09-17
Registry handle: 1753111764_DOMAIN_COM-VRSN
Nameservers: kolton.ns.cloudflare.commonroe.ns.cloudflare.com
Status: client delete prohibitedclient transfer prohibitedclient update prohibitedserver delete prohibitedserver transfer prohibitedserver update prohibited

RDAP with port-43 WHOIS fallback, cached up to 1 h.

SSL certificate

Valid, 48 days left

GET/domain/auth0.com/ssl

Issuer: Let's EncryptCN=YE1,O=Let's Encrypt,C=US
Subject: auth0.com
Valid from: 2026-08-22 11:39 UTC
Valid until: 2026-11-20 11:39 UTC
Serial number: 459536989275259855141151439795827404504216
Names covered (5): *.auth0.com*.edge.tenants.auth0.com*.guardian.auth0.com*.webtask.auth0.comauth0.com

Live TLS handshake on port 443, cached up to 6 h.

Subdomains

186 found

GET/domain/auth0.com/subdomains

Slow sources are still finishing. This list updates by itself.

120.auth0.com
700-concertohealthai-cd-m3zjl4glxi66bmfb.edge.tenants.us.auth0.com
700-concertohealthai.us.auth0.com
a.auth0.com
acimacredit-qa.auth0.com
acwp-aws-prod.auth0.com
addressblock.auth0.com
advancedturf.auth0.com
alemana-poc.auth0.com
alertlogic-integration.auth0.com
alexfalkowski.auth0.com
alexjpaz.auth0.com
alpaca.auth0.com
amperity-dev.auth0.com
any.auth0.com
applicaster-insights.auth0.com
apteka.auth0.com
argos.auth0.com
aricourses.auth0.com
asbadmin.auth0.com
b-id-mufg-jd2.auth0.com
beaconstac.auth0.com
bidchuckcom.auth0.com
blokable-qa-cd-mwwj2socfbtoba6i.edge.tenants.auth0.com
cadstrom.auth0.com
catchfashion.auth0.com
celsius.auth0.com
cf.auth0.com
ckbk.auth0.com
cloudelements-snapshot.auth0.com
coinledger.auth0.com
combat.auth0.com
comcapitalone.auth0.com
company.prod-us.auth0.com
comtelsystems.auth0.com
comune.auth0.com
confluence.auth0.com
confluent-devel-1.auth0.com
confluent-devel.auth0.com
confluent-development.auth0.com
confluent-staging.auth0.com
consul.prod-us.auth0.com
converter.auth0.com
cs0234.auth0.com
daphne.auth0.com
decapod.auth0.com
deltadore-eu.auth0.com
deltadorefr.auth0.com
demoeng.auth0.com
dev-5xt3fb-m.auth0.com
dev-es9aobth.us.auth0.com
dev-obk84v4k.auth0.com
dev-raptortech.auth0.com
dev-xxx.auth0.com
dev-xxxx.auth0.com
direqt-cd-gmqflwrur5pxshgh.edge.tenants.us.auth0.com
direqt.us.auth0.com
dronedeploy-local.auth0.com
dronedeploy-stage.auth0.com
easternwarehouse.auth0.com
ecobee.auth0.com
etalogin.auth0.com
etapp-cloud-account.auth0.com
exponent.auth0.com
f4u.auth0.com
fcdn.auth0.com
fireball.auth0.com
gainsight-auth0-dev.auth0.com
genetics.auth0.com
grc2go.auth0.com
gsnlink.auth0.com
hub-production.auth0.com
influencecloud.auth0.com
internetintel.auth0.com
interviewerai-dev.auth0.com
introvoke.auth0.com
ir.auth0.com
ira.auth0.com
iraqi.auth0.com
ironcorelabs.auth0.com
italent-prod.auth0.com
jah7nm.us.auth0.com
jk2cm5.au.auth0.com
junedesk-cd-6lr68ge4kts0n3nf.edge.tenants.eu.auth0.com
junedesk.eu.auth0.com
k5.auth0.com
kaixo.auth0.com
kftest.auth0.com
kubeflow.auth0.com
l2wm6v.us.auth0.com
la2-dev.eu.auth0.com
labs13codingclone.auth0.com
lc7qtm.eu.auth0.com
learning.auth0.com
legoguy1000.auth0.com
limvus.auth0.com
litefarm.auth0.com
loews.auth0.com
lorejs.auth0.com
lyft.auth0.com
madmin.auth0.com
mamund.auth0.com
mg2-ss-dev.auth0.com
moody.auth0.com
moonpay.auth0.com
movableink-production.auth0.com
mydeltadore.auth0.com
ndax.auth0.com
nikos-cd-frqfcir4jehh1gyk.edge.lab.testland.auth0.com
nikos-cd-qoxwbudyy60d6yi4.edge.ap-lab.testland.auth0.com
nrg-auth.auth0.com
ns109.auth0.com
ns115.auth0.com
o1.auth0.com
ocio-production.auth0.com
oly.auth0.com
openphone-dev.auth0.com
openphone-staging.auth0.com
ovj06z.eu.auth0.com
park1.auth0.com
patty.auth0.com
pc11.auth0.com
pele.auth0.com
periculum-technologies-inc.auth0.com
planme.auth0.com
poc-tenant.auth0.com
polarisdealersdev.auth0.com
pomerium.auth0.com
production-tech-external-dev2.auth0.com
project.auth0.com
public.auth0.com
pvsty8.eu.auth0.com
q4inc.auth0.com
qcegpk.us.auth0.com
quadpay-dev.auth0.com
raw.auth0.com
rbz.auth0.com
rdxqe9.eu.auth0.com
reed.auth0.com
release-babyscripts.auth0.com
revelup-stage.auth0.com
revved-dev.auth0.com
robinhood.auth0.com
rpm.auth0.com
rr1.auth0.com
satcompany-cd-subaqtctqjiw80pu.edge.tenants.us.auth0.com
satcompany.us.auth0.com
skutrak-staging.eu.auth0.com
skymirror.auth0.com
smartsave-uat-cd-nkllnarnacehwq34.edge.tenants.eu.auth0.com
sofi.auth0.com
sonic-dev.auth0.com
sonic-preprod.auth0.com
stake.auth0.com
tcg-lpc-sec-cd-fm5d9wik5spbxawi.edge.tenants.auth0.com
tenants.au.auth0.com
tenants.eu.auth0.com
tensar.auth0.com
testing2.auth0.com
the-scholars-brand-publishing-com-1.auth0.com
thefrontside.auth0.com
trinary.auth0.com
truepillars-dev.auth0.com
tufinio.auth0.com
tydom.auth0.com
umbrella.auth0.com
undock-dev.auth0.com
undock.auth0.com
unlog.auth0.com
usms.auth0.com
vaultlambda.auth0.com
vc1.auth0.com
virgo.auth0.com
wandaspace-cd-2wqygt26dglvslwa.edge.tenants.eu.auth0.com
web18434.auth0.com
whitson.auth0.com
winchester.auth0.com
www-aem.auth0.com
www-cms.auth0.com
www-preview.auth0.com
www-publish.auth0.com
www.prestashop.auth0.com
wy.auth0.com
x.auth0.com
you.auth0.com
zooid-cd-otae8y5y5zatabhp.edge.ca-vroy-1.testland.auth0.com

Sources: rapiddns 66 · virustotal 186

From CT logs, passive DNS (25+ sources) and brute-force. Live means it resolves now.

Email security

GET/domain/auth0.com/email-security

SPF Present

v=spf1 include:spf.mandrillapp.com include:amazonses.com include:_spf.intacct.com include:mktomail.com ip4:74.125.0.0/16 ip4:209.85.128.0/17 ip6:2001:4860:4864::/56 ip6:2404:6800:4864::/56 ip6:2607:f8b0:4864::/56 ip6:2800:3f0:4864::/56 ip6:2a00:1450:4864::/56 ip6:2c0f:fb50:4864::/56 exists:%{i}._spf.mta.salesforce.com ip4:205.220.176.21 ip4:205.220.164.21 ip4:168.245.48.84 ip4:168.245.73.252 ip4:50.31.57.204 ip4:198.21.5.209 ip4:167.89.21.169 ip4:167.89.14.31 ip4:167.89.126.180 ip4:167.89.110.192 ip4:208.185.229.0/24 ip4:208.185.235.0/24 ip4:148.59.108.0/23 ip4:148.59.106.0/23 ip4:159.183.193.109 ip4:159.183.213.105 ip4:159.183.213.107 ip4:159.183.214.96 ip4:159.183.213.204 ip4:159.183.200.101 ip4:149.72.233.170 ip4:149.72.90.103 ip4:192.254.124.136 ip4:198.37.159.181 ip4:167.89.51.134 ip4:192.174.90.242 ip4:159.183.191.229 -all

DMARC Present

p=quarantine

v=DMARC1; p=quarantine; pct=100; rua=mailto:dmarc@okta.com; sp=quarantine; fo=1;

DKIM 6 found

google._domainkeys1._domainkeys2._domainkeymandrill._domainkeyintercom._domainkeym1._domainkey

Show public keys

google._domainkey.auth0.com

v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTrmOfANDNbjTHLUjP4R3YWrA2ONgRXl0I/HNW6c/86MRTcHy7lVNd2iZ9gMftvnRwnIJsucweJnn7hTm36aoyWvMvsbV5T0e5v+ocYgOjRayTOaTeOfn6wUaj1U5SlolqG6mIR/BVecUq259t/vPE3fYfe92O3n360Uv1P+ieEmNL9B6RRAFSKtE66O62g7jEZ77rcTUEuAFsGlOH8I0A6MzY9CXxybx+bWsXUTbxLh40K/VBY1wgziJjq6roaaXNJLaiqxYMEAM28jdfTobZpqpP1PXGE2+lvq+zTxKyrdDVzpDDofTSS4/ARTVNjvNuhR9slSPThdCVVxoFRltQIDAQAB

s1._domainkey.auth0.com

k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9PPtCb+76N6WGwa5r3iBFM4x22Ua2O2kWGFRGGcjikEy2+3qdbtTnLWgoeLUDq8CPcMPq2FOVKGx34STLe+NrKiYLpSsuTaR+8OM5WD9Hx5xNoCvVMKGK3YWBrhlD514WGS6FgqA3Q5zPD/EDpW9mN9qTBPRPS08j1CKujGAssmXYgRo8ZubsaIsyKQ6kWgirlyXEjOy5vzOZpDR/W0PCh+HO3NPDSKhgfgTVSrhUmbIzdQG0U8/jc+5lDbeZ61VtcV5vAGfli5M/jisNmmOMjP0ZQJALINV/3bGUXKOvsI8eG483G/zLyAFE2sEpXIqWgrI8bP3oGqC0I0ILs68kQIDAQAB

s2._domainkey.auth0.com

k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCx5mBXqMOgwHMF02T2on+BKDu889WQxvO0Q6X/XOnONZ4MhdAxWnDzlftWGpNg3L9U+HoW7IXoBUFNdajdTGe3U3yHC8o7LqnvRfcuXcfnRHVuEhp1xLI0TS9JQF3scAv++gB1TeQwoREav/aCiYYVQcg7ZVBNyrb7y6VrrdW0swIDAQAB

mandrill._domainkey.auth0.com

v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCrLHiExVd55zd/IQ/J/mRwSRMAocV/hMB3jXwaHH36d9NaVynQFYV8NaWi69c1veUtRzGt7yAioXqLj7Z4TeEUoOLgrKsn8YnckGs9i3B3tVFB+Ch/4mPhXWiNfNdynHWBcPcbJ8kjEQ2U8y78dHZj1YeRXXVvWob2OaKynO8/lQIDAQAB;

intercom._domainkey.auth0.com

k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC6QVRvvVkB7SqUxQMfHl3xFJTcXs7Lk1cd5zNj/JfbQLINd9W/6YcFyp93oXkLbmF04pp7yncrUxLB2oBCzX+TNfwIFWixOMXhM+7V3CDvFJphnoioOxC2LbtczqiLAEAhBGygAH9CV31PzfBLJYscLwNOd6JOP6akjZDcW2asFwIDAQAB

m1._domainkey.auth0.com

v=DKIM1;k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCuR+i0JwRTkPpnfZboQKiJlk/ZsOTOxr8EF4YdSP44rHp/5zmtwumVWovOfopuo42z/6pP77pizjR93b6hJq5x1QCXpJDvv//pB/C8mFxv/eI7c6yykQapDy78lSEl7cM2AlZ5oqG3c7KrpWuziZmtaMgNXMqeLvIlAmdpPVCy4wIDAQAB

DKIM checked on 29 common selectors; custom ones can't be discovered. Cached up to 1 h.

Get this report as JSON

One call returns everything on this page. Each section is also its own endpoint.

curl "https://domain-intelligence-api.p.rapidapi.com/lookup/auth0.com" \
  -H "X-RapidAPI-Host: domain-intelligence-api.p.rapidapi.com" \
  -H "X-RapidAPI-Key: YOUR_RAPIDAPI_KEY"

import requests

r = requests.get(
    "https://domain-intelligence-api.p.rapidapi.com/lookup/auth0.com",
    headers={
        "X-RapidAPI-Host": "domain-intelligence-api.p.rapidapi.com",
        "X-RapidAPI-Key": "YOUR_RAPIDAPI_KEY",
    },
    timeout=30,
)
print(r.json())

// Node 18+ (built-in fetch)
const res = await fetch(
  "https://domain-intelligence-api.p.rapidapi.com/lookup/auth0.com",
  { headers: {
      "X-RapidAPI-Host": "domain-intelligence-api.p.rapidapi.com",
      "X-RapidAPI-Key": "YOUR_RAPIDAPI_KEY",
  } }
);
console.log(await res.json());

<?php
$ch = curl_init("https://domain-intelligence-api.p.rapidapi.com/lookup/auth0.com");
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_HTTPHEADER, [
    "X-RapidAPI-Host: domain-intelligence-api.p.rapidapi.com",
    "X-RapidAPI-Key: YOUR_RAPIDAPI_KEY",
]);
$data = json_decode(curl_exec($ch), true);
print_r($data);

1,000 requests a month free, no card Paid plans up to 5M a month ?wait=1 waits for every subdomain source to finish

Get free API key See pricing

More reports

aliexpress.com bestbuy.com wayfair.com ikea.com netflix.com spotify.com hulu.com disneyplus.com All reports →