Domain Intelligence Report

okta.com

DNS records, WHOIS/RDAP registration, SSL certificate, subdomain enumeration, and email-security posture — aggregated in real time and cached.

6
DNS record types
203d
SSL cert remaining
54
Subdomains found
SPF + DMARC
Email security
DNS

DNS Records

All record types resolved from authoritative DNS for okta.com.

A 4 records
  • 3.171.100.108
  • 3.171.100.119
  • 3.171.100.12
  • 3.171.100.23
MX 2 records
  • 10 mxb-00553301.gslb.pphosted.com.
  • 10 mxa-00553301.gslb.pphosted.com.
TXT 55 records
  • "google-site-verification=41ykvFV64A31vEWpmVuaHosmUTDQxYzCDgUxfvtfFxU"
  • "handlecrew-domain-verification-by2g01=2QF8jDay0vidg920hF9od2cLB"
  • "mongodb-site-verification=WALX2iwbUJSJUcBzD8qMPLs8Q5ESvH3Z"
  • "dTsCzHkFV4h1vVUuaRjg4Q"
  • "google-site-verification=rxZL1YDk_N7aCTgmTquA-ISduD-5vx1HMC2l-1QbxRc"
  • "adobe-idp-site-verification=2ec548128df4fbccb40fa3bd89255013f93dd4e820ccf7827e13a848b9852c68"
  • "mgverify=ded6138d5e8551550951c1062a6c72f400b1f7e74ee21f0846744ec201ea9b54"
  • "google-site-verification=FU16wuJnNc3ldhYja1BOemEdlMmS67hk6mDhWo8rRjQ"
  • "v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~all"
  • "north-pole-security-domain-verification-1pz26b=ZjEAVs73vO18GYrEcEw0Yi3P8"
  • "vmware-cloud-verification-ade55cf1-cfe6-4292-bdfb-a008b2b7d826"
  • "zoom-domain-verification=72479dc7-8727-486a-a3a0-1dc8774df145"
  • "_cf-custom-hostname.security.okta.com=c04801e0-f804-4953-bda2-7558d7df2ece"
  • "mongodb-site-verification=GAEBYdJiXeHYafheDvlFh7RoZbOXrS7X"
  • "linear-domain-verification=962945"
  • "google-site-verification=5gEp4ZC0isOgvZcmUzu8U3EA4ezMPiYmZk3Fq68l2fY"
  • "docker-verification=6b22a016-44f7-4bd9-b16b-55dd801a76e8"
  • "elevenlabs=XHQubW-R3WsFxNrgZpzOD1KR-PJ05sncl9KtjdZ4xoQ"
  • "postman-domain-verification=92e5fcd18e179ee6c452620f40fe18564780c90e9d9cd3df00b416a54c251e1787df47796f3f9d213e1911430cdc24603ffa2bd6ab6f12947deeec54683a144b"
  • "neat-pulse-domain-verification-r1vBn7v=1bbac189-96e0-4998-88ce-6706f841f939"
  • "kTzMCUYmgJ5yskaSrnX17ONYMoE"
  • "mongodb-site-verification=8ubA2wBLmpMJnbKeTl1wxNLqoCfdk5w5"
  • "canva-site-verification=O2TSnrbZLq2Zsmc59AZYuw"
  • "miro-verification=de40aec19ca469948512b053eec7fd3fa1d64856"
  • "docusign=3eca8259-748e-4a0c-900c-d5374132c19a"
  • "apple-domain-verification=pRLdlj1oAGiVDghH4-T_rycGuO6dvx4JZqhsS4f4MFM"
  • "onetrust-domain-verification=8c0f53f3da06477d935922a2dbd05948"
  • "google-site-verification=Wd7ispQHsLXDbaUABLqQSRZ13P8haUPcgNod9CdH2g0"
  • "v=zoomadn us.zoom.idp.commercial=okta.okta.com"
  • "google-site-verification=bHLRhOuuyzr_6yukxwkIL9ftCYgVtvzwgUPPlqcEVes"
  • "paloaltonetworks-site-verification=9af81156c72da99968a8c67fe13fae9f31896544b753d34447bfc5cfabd90b9f"
  • "google-site-verification=rpDnbdPzx7AZKURMbNYuq-3XrGQzH74qm8lxQgzvklo"
  • "atlassian-domain-verification=Zwms6wYibNl10yHl8rJaGNFzJq96MUSWCIbyNg1WuDMgusi9fbuJanqeCKADWjBf"
  • "loom-site-verification=ae54727b5beb4f1d81f7c3ea50549082"
  • "fastly-domain-delegation-67v7EJ9cwh7RdkWE-575288-2023-02-20"
  • "SFMC-DIr-TtVeSfs7kqjf5wOzLpY7ECchXh7vwdTW_dcP"
  • "v=BIMI1; l=https://www.okta.com/sites/default/files/Favicon_Logomark.svg;"
  • "sinch-domain-verification=c5da2c59-e630-4e56-8c60-a7d01cee2b09"
  • "google-site-verification=XHAZzRkz6gIHlR-e6SPcGdGusA4d7jFMu6U9fPpzq5A"
  • "twilio-domain-verification=16eae8c3b53caf7d425877239f2f84b4"
  • "air_xx=d27bdeeb3663413eac740e87860d8ae4"
  • "google-site-verification=OaCfe83J8e1CIBzGHSM2NPDkc_KCbQh_GFKFFXfGPOQ"
  • "jamf-site-verification=Az6mZIKdruDZf-TDNBfGvA"
  • "astro-domain-verification=cmdn74mpo2s6i01n6j9xa1k7b"
  • "fastly-domain-delegation-00461086-20250711"
  • "00D3R0000008ix8=1TBco00000002WW;00D8y0000008aPA=1TBcr00000004q1"
  • "notion-domain-verification=MATLqlLiSvHSDYZEDMdkLAWxdaqERmHce8teR6dbZZt"
  • "apple-domain-verification=DAncgAk2RZSGrygz"
  • "zapier-domain-verification-challenge=91ba05c3-d70c-49ee-b3cf-4a1b96bae041"
  • "mongodb-site-verification=8z6a5UrsZ7kRnQon4JrnncX5dVHWttYU"
  • "stripe-verification=8fe88582423fc4d3b75ce1d191806730daafddbc24cc9c5519cce814a6d55c79"
  • "docusign=e6719448-3020-425c-9a75-8ecbb24f155b"
  • "mongodb-site-verification=oNoOzcPusRVMDpLSB1rYfPfx9OpEEJjY"
  • "trend-micro-v1-domain-verification.c8bc38a904082fdb532aaec9494b3adb=9736bcf6-0cff-4a13-b166-249362d69c18"
  • "smartsheet-site-validation=6fYyga7yEfdE1DGfmybQjPiWMUgWkhAr"
NS 8 records
  • ns-cloud-a1.googledomains.com.
  • ns-cloud-a2.googledomains.com.
  • ns-cloud-a3.googledomains.com.
  • ns-cloud-a4.googledomains.com.
  • ns-1459.awsdns-54.org.
  • ns-1563.awsdns-03.co.uk.
  • ns-285.awsdns-35.com.
  • ns-684.awsdns-21.net.
CAA 9 records
  • 0 issue "digicert.com"
  • 0 iodef "mailto:security-alert@okta.com"
  • 0 issue "globalsign.com"
  • 0 issue "amazonaws.com"
  • 0 iodef "mailto:ops@okta.com"
  • 0 issue "letsencrypt.org"
  • 0 issue "pki.goog"
  • 0 issuewild "digicert.com"
  • 0 issuewild "globalsign.com"
SOA 1 record
  • ns-cloud-a1.googledomains.com. cloud-dns-hostmaster.google.com. 1 21600 3600 259200 300
Registration

WHOIS / RDAP

Registration data for okta.com via the RDAP protocol, with port-43 WHOIS fallback if RDAP is unavailable.

whois via rdap.org
Registrar
MarkMonitor Inc.
Created
2004-06-11T18:02:50Z
Updated
2025-05-11T09:47:21Z
Expires
2027-06-11T18:02:50Z
Handle
122289201_DOMAIN_COM-VRSN
Nameservers
NS-1459.AWSDNS-54.ORGNS-1563.AWSDNS-03.CO.UKNS-285.AWSDNS-35.COMNS-684.AWSDNS-21.NETNS-CLOUD-A1.GOOGLEDOMAINS.COMNS-CLOUD-A2.GOOGLEDOMAINS.COMNS-CLOUD-A3.GOOGLEDOMAINS.COMNS-CLOUD-A4.GOOGLEDOMAINS.COM
Status
client delete prohibitedclient transfer prohibitedclient update prohibited
TLS

SSL Certificate

Live TLS handshake against okta.com. No third-party scanner.

ssl 203 days remaining
Issuer
CN=Amazon RSA 2048 M01,O=Amazon,C=US
Subject
CN=okta.com
Valid from
2025-11-03T00:00:00+00:00
Valid to
2026-12-02T23:59:59+00:00
Serial
20543894227448829197564273264225536613
SANs (3)
okta.comokta-emea.comwww.okta.com
Reconnaissance

Subdomains discovered

Aggregated from Certificate Transparency logs (crt.sh, certspotter, hackertarget) with DNS bruteforce fallback if all CT sources fail.

⚠ Partial results — crt.sh ReadTimeout: · certspotter rate-limited · hackertarget limited: API count exceeded - Increase Quota with Membership
subdomains 54 found
crt.sh ReadTimeout: certspotter rate-limited hackertarget limited: API count exceeded - Increase Quota with Membership dns-brute ok +54 (wordlist 54)
  • admin.okta.com
  • administrator.okta.com
  • api.okta.com
  • app.okta.com
  • apps.okta.com
  • assets.okta.com
  • autoconfig.okta.com
  • autodiscover.okta.com
  • beta.okta.com
  • blog.okta.com
  • cdn.okta.com
  • cpanel.okta.com
  • demo.okta.com
  • dev.okta.com
  • dns1.okta.com
  • dns2.okta.com
  • docs.okta.com
  • email.okta.com
  • ftp.okta.com
  • help.okta.com
  • imap.okta.com
  • m.okta.com
  • mail.okta.com
  • mail2.okta.com
  • media.okta.com
  • mobile.okta.com
  • mx.okta.com
  • mx1.okta.com
  • mx2.okta.com
  • my.okta.com
  • new.okta.com
  • ns1.okta.com
  • ns2.okta.com
  • ns3.okta.com
  • old.okta.com
  • pop.okta.com
  • pop3.okta.com
  • portal.okta.com
  • remote.okta.com
  • secure.okta.com
  • shop.okta.com
  • smtp.okta.com
  • stage.okta.com
  • staging.okta.com
  • static.okta.com
  • status.okta.com
  • store.okta.com
  • support.okta.com
  • test.okta.com
  • vpn.okta.com
  • webdisk.okta.com
  • webmail.okta.com
  • whm.okta.com
  • www.okta.com
Email

Email Security Posture

SPF and DMARC presence and records for okta.com. DKIM requires a known selector and is not auto-discoverable.

SPF present
  • v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~all
DMARC present
  • v=DMARC1; p=reject; rua=mailto:dmarc_rua@emaildefense.proofpoint.com,mailto:bt_dmarc_monitor@okta.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com,mailto:bt_dmarc_monitor@okta.com;
DKIM selector required

DKIM requires selector; not auto-discoverable

Run this on any domain.

Same data, JSON response, REST API. Free tier available, no card required.

View API → RapidAPI Listing
Related

More domain reports

Browse intelligence reports for other popular domains.

yahoo.com proton.me fastmail.com duckduckgo.com bing.com brave.com kagi.com mozilla.org