HOW.IS
?

How is okta.com?

Looks fine risk 0/100

Registered 22 years ago, on no blocklists we checked, valid HTTPS, the site answered 200 in 82 ms.

Why

02050100
finecarefulhigh risk
  • ·Nothing in the checks added risk.

Rule-based: domain age, blocklists, TLS. A heuristic, not a guarantee.

How okta.com looks right now
The home page, rendered by how.is in a sandboxed browser. Nothing on it is clickable here.
Site
200
82 ms · ends at www.okta.com
HTTPS
175 d
left on a Amazon certificate
Age
22 years
registered 2004-06-11
Blocklists
0
listings across 5 lists; 1 did not answer

Everything we looked at

DNS records5 record types
A3.171.100.23
3.171.100.119
3.171.100.12
3.171.100.108
MX10 mxa-00553301.gslb.pphosted.com
10 mxb-00553301.gslb.pphosted.com
NSns-1459.awsdns-54.org
ns-1563.awsdns-03.co.uk
ns-285.awsdns-35.com
ns-684.awsdns-21.net
ns-cloud-a1.googledomains.com
ns-cloud-a2.googledomains.com
ns-cloud-a3.googledomains.com
ns-cloud-a4.googledomains.com
TXT00D3R0000008ix8=1TBco00000002WW;00D8y0000008aPA=1TBcr00000004q1
SFMC-DIr-TtVeSfs7kqjf5wOzLpY7ECchXh7vwdTW_dcP
_cf-custom-hostname.security.okta.com=c04801e0-f804-4953-bda2-7558d7df2ece
_elastic_domain_challenge.okta.com=b7d08a70c4d1b9e306ef5d72a333fff832011bc303ada9224ed4c2afaa65349b
_generaltranslation-token-v9jzx73y70trn67eqp0zxgbr=LfbNTTwLLp0OuWIh24Zvako4
adobe-idp-site-verification=2ec548128df4fbccb40fa3bd89255013f93dd4e820ccf7827e13a848b9852c68
air_xx=d27bdeeb3663413eac740e87860d8ae4
anthropic-domain-verification-3afp5n=Ue6iSAFIp8YVONVncMOqKHUKK
apple-domain-verification=DAncgAk2RZSGrygz
apple-domain-verification=pRLdlj1oAGiVDghH4-T_rycGuO6dvx4JZqhsS4f4MFM
astro-domain-verification=cmdn74mpo2s6i01n6j9xa1k7b
atlassian-domain-verification=Zwms6wYibNl10yHl8rJaGNFzJq96MUSWCIbyNg1WuDMgusi9fbuJanqeCKADWjBf
bw=z1PZeeNn7RWLCYOAoM1HG8GL7hKuSn0b4rVvsoR5qlsx
canva-site-verification=O2TSnrbZLq2Zsmc59AZYuw
ccisso=b2d31909-da7a-4ff7-979d-978ccca0fc78
dTsCzHkFV4h1vVUuaRjg4Q
docker-verification=6b22a016-44f7-4bd9-b16b-55dd801a76e8
docusign=3eca8259-748e-4a0c-900c-d5374132c19a
docusign=e6719448-3020-425c-9a75-8ecbb24f155b
e73ddee93c179c7b899712cd49ad5c54320adce9c441cbd813ec3669e3d9d2e9
elevenlabs=XHQubW-R3WsFxNrgZpzOD1KR-PJ05sncl9KtjdZ4xoQ
fastly-domain-delegation-00461086-20250711
gJyVqh3W2O8VrJgBgzb1hQSqqpE8vLxO
google-site-verification=41ykvFV64A31vEWpmVuaHosmUTDQxYzCDgUxfvtfFxU
google-site-verification=5gEp4ZC0isOgvZcmUzu8U3EA4ezMPiYmZk3Fq68l2fY
google-site-verification=FU16wuJnNc3ldhYja1BOemEdlMmS67hk6mDhWo8rRjQ
google-site-verification=OaCfe83J8e1CIBzGHSM2NPDkc_KCbQh_GFKFFXfGPOQ
google-site-verification=Wd7ispQHsLXDbaUABLqQSRZ13P8haUPcgNod9CdH2g0
google-site-verification=XHAZzRkz6gIHlR-e6SPcGdGusA4d7jFMu6U9fPpzq5A
google-site-verification=bHLRhOuuyzr_6yukxwkIL9ftCYgVtvzwgUPPlqcEVes
google-site-verification=rpDnbdPzx7AZKURMbNYuq-3XrGQzH74qm8lxQgzvklo
google-site-verification=rxZL1YDk_N7aCTgmTquA-ISduD-5vx1HMC2l-1QbxRc
handlecrew-domain-verification-by2g01=2QF8jDay0vidg920hF9od2cLB
jamf-site-verification=Az6mZIKdruDZf-TDNBfGvA
jamie-domain-verification-dh3b0z=c56IVWvPpveWWGK6p9dJ47yDM
kTzMCUYmgJ5yskaSrnX17ONYMoE
linear-domain-verification=962945
loom-site-verification=ae54727b5beb4f1d81f7c3ea50549082
mgverify=ded6138d5e8551550951c1062a6c72f400b1f7e74ee21f0846744ec201ea9b54
miro-verification=de40aec19ca469948512b053eec7fd3fa1d64856
mongodb-site-verification=8ubA2wBLmpMJnbKeTl1wxNLqoCfdk5w5
mongodb-site-verification=8z6a5UrsZ7kRnQon4JrnncX5dVHWttYU
mongodb-site-verification=GAEBYdJiXeHYafheDvlFh7RoZbOXrS7X
mongodb-site-verification=Kl91m3O8fqZMZUMZCIeWNyjf7Z4kLgEs
mongodb-site-verification=WALX2iwbUJSJUcBzD8qMPLs8Q5ESvH3Z
mongodb-site-verification=oNoOzcPusRVMDpLSB1rYfPfx9OpEEJjY
neat-pulse-domain-verification-r1vBn7v=1bbac189-96e0-4998-88ce-6706f841f939
north-pole-security-domain-verification-1pz26b=ZjEAVs73vO18GYrEcEw0Yi3P8
notion-domain-verification=MATLqlLiSvHSDYZEDMdkLAWxdaqERmHce8teR6dbZZt
notion-domain-verification=OEBarcPYUA3NvDKfeMN4s3CsH6JccuJKwW2TJ1WFZWB
onetrust-domain-verification=8c0f53f3da06477d935922a2dbd05948
paloaltonetworks-site-verification=9af81156c72da99968a8c67fe13fae9f31896544b753d34447bfc5cfabd90b9f
postman-domain-verification=92e5fcd18e179ee6c452620f40fe18564780c90e9d9cd3df00b416a54c251e1787df47796f3f9d213e1911430cdc24603ffa2bd6ab6f12947deeec54683a144b
report-uri-verification=0692d29541d83e2f77d8092e454623c1
safetyculture-domain-verification=2504d9aa-f5e4-4d4f-92c1-e6670f46146f
safetyculture-domain-verification=9b01bcca-383a-47be-af88-88526ea197de
sinch-domain-verification=c5da2c59-e630-4e56-8c60-a7d01cee2b09
smartsheet-site-validation=6fYyga7yEfdE1DGfmybQjPiWMUgWkhAr
stripe-verification=8fe88582423fc4d3b75ce1d191806730daafddbc24cc9c5519cce814a6d55c79
trend-micro-v1-domain-verification.c8bc38a904082fdb532aaec9494b3adb=9736bcf6-0cff-4a13-
CAA{'type': 'CAA', 'iodef': 'mailto:ops@okta.com', 'critical': 0}
{'type': 'CAA', 'iodef': 'mailto:security-alert@okta.com', 'critical': 0}
{'type': 'CAA', 'issue': 'amazonaws.com', 'critical': 0}
{'type': 'CAA', 'issue': 'digicert.com', 'critical': 0}
{'type': 'CAA', 'issue': 'globalsign.com', 'critical': 0}
{'type': 'CAA', 'issue': 'letsencrypt.org', 'critical': 0}
{'type': 'CAA', 'issue': 'pki.goog', 'critical': 0}
{'type': 'CAA', 'critical': 0, 'issuewild': 'digicert.com'}
{'type': 'CAA', 'critical': 0, 'issuewild': 'globalsign.com'}
RegistrationMarkMonitor Inc.
registrarMarkMonitor Inc.
registered2004-06-11
expires2027-06-11
last changed2025-05-11
ownerREDACTED FOR PRIVACY
nameserversns-1459.awsdns-54.org
ns-1563.awsdns-03.co.uk
ns-285.awsdns-35.com
ns-684.awsdns-21.net
ns-cloud-a1.googledomains.com
ns-cloud-a2.googledomains.com
ns-cloud-a3.googledomains.com
ns-cloud-a4.googledomains.com
statusclient delete prohibited
client transfer prohibited
client update prohibited
registered 2004-06-11expires 2027-06-11
HTTPS certificate175 days left
validyes
issuerAmazon
coversokta.com, okta-emea.com, www.okta.com
protocolTLSv1.3
issued 2026-10-04expires 2027-04-19
DNSSECinsecure

Domain is not signed with DNSSEC

. → com → okta.com
Email authenticationexcellent
SPFpass v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com -all
DMARCpass policy reject
DKIMfound: s1, s2

Whether mail claiming to be from this domain can be checked as genuine.

Security scoregrade A · 180/205
Basic Security
20/40missing: DNSSEC Enabled
Record Security
45/45missing: DKIM Presence
Advanced Security
20/25missing: IPv6 Support
Domain Reputation
50/50
Threat Detection
45/45missing: Domain Age Check
Blocklists0 listings · 14 lookups
SURBL MultidomainURIBL MultidomainSpamCop13.33.45.49Barracuda13.33.45.49UCEPROTECT Level 113.33.45.49SpamCop13.33.45.14Barracuda13.33.45.14UCEPROTECT Level 113.33.45.14SpamCop13.33.45.90Barracuda13.33.45.90UCEPROTECT Level 113.33.45.90SpamCop13.33.45.40Barracuda13.33.45.40UCEPROTECT Level 113.33.45.40

Green: clean. Red: listed. Grey: the list did not answer.

Ask it yourself

Agents get this as data. Bought through the API, the checks behind this page cost $0.070: profile $0.025 + trust $0.020 + screenshot $0.020 + site status $0.005.

curl "https://how.is/v1/domain/trust?domain=okta.com" \ -H "Authorization: Bearer $HOWIS_KEY" # or pay per call in USDC (x402), no key: the 402 tells your agent the price curl -i "https://how.is/v1/domain/profile?domain=okta.com"

MCP: add https://how.is/mcp to Claude, Codex or Cursor (one-line install) and ask for domain_trust on okta.com. Reference: /llms.txt.

Watch okta.com. DNS read at the source every 5 minutes; certificate, blocklists and expiry every 6 hours. You get an email only when something changes.

Watch — $1 / 30 days