okta.com

Observed Jul 24, 2026, 02:38 UTC (4h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Verify this receipt yourself + Watch this domain

Up right now

Runs onCloudflare

Email byProofpoint

Secured byAmazon

Registered withMarkMonitor Inc.

Also usesAtlassianDockerDocuSignGoogle Search ConsoleLinearMiroNotionStripe

1 subdomain · big_tech

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat okta.com actually stands on - every host below is a signed observation

okta.com

A / AAAA

3.171.100.123.171.100.1193.171.100.1083.171.100.23

Cloudflareserves the site

ns-1459.awsdns-54.orgns-1563.awsdns-03.co.ukns-285.awsdns-35.comns-684.awsdns-21.net+4 more

awsdns-54.org + awsdns-03.co.uk + moreanswers its DNS

mxa-00553301.gslb.pphosted.commxb-00553301.gslb.pphosted.com

Proofpointreceives its email

TLS

okta.com

Amazonissued its certificate

DNS Records

A 4

3.171.100.12
3.171.100.119
3.171.100.108
3.171.100.23

MX 2

10mxa-00553301.gslb.pphosted.com
10mxb-00553301.gslb.pphosted.com

TXT 62

00D3R0000008ix8=1TBco00000002WW;00D8y0000008aPA=1TBcr00000004q1
SFMC-DIr-TtVeSfs7kqjf5wOzLpY7ECchXh7vwdTW_dcP
_cf-custom-hostname.security.okta.com=c04801e0-f804-4953-bda2-7558d7df2ece
_elastic_domain_challenge.okta.com=b7d08a70c4d1b9e306ef5d72a333fff832011bc303ada9224ed4c2afaa65349b
adobe-idp-site-verification=2ec548128df4fbccb40fa3bd89255013f93dd4e820ccf7827e13a848b9852c68
air_xx=d27bdeeb3663413eac740e87860d8ae4
anthropic-domain-verification-3afp5n=Ue6iSAFIp8YVONVncMOqKHUKK
apple-domain-verification=DAncgAk2RZSGrygz
apple-domain-verification=pRLdlj1oAGiVDghH4-T_rycGuO6dvx4JZqhsS4f4MFM
astro-domain-verification=cmdn74mpo2s6i01n6j9xa1k7b

NS 8

ns-1459.awsdns-54.org
ns-1563.awsdns-03.co.uk
ns-285.awsdns-35.com
ns-684.awsdns-21.net
ns-cloud-a1.googledomains.com
ns-cloud-a2.googledomains.com
ns-cloud-a3.googledomains.com
ns-cloud-a4.googledomains.com

SOA 1

ns-cloud-a1.googledomains.com cloud-dns-hostmaster.google.com

SRV 5

talk.l.google.com:5222 p10
talk2.l.google.com:5222 p20
talk3.l.google.com:5222 p20
talk4.l.google.com:5222 p20
talk1.l.google.com:5222 p20

CAA 9

iodef "mailto:ops@okta.com"
iodef "mailto:security-alert@okta.com"
issue "amazonaws.com"
issue "digicert.com"
issue "globalsign.com"
issue "letsencrypt.org"
issue "pki.goog"
issuewild "digicert.com"
issuewild "globalsign.com"

TLS Certificates (3)

Common Name	Issuer	Expires
`okta.com`	C=US, O=Amazon, CN=Amazon RSA 2048 M01	Wed, 02 Dec 2026 23:59:59 +0000
`Amazon RSA 2048 M01`	C=US, O=Amazon, CN=Amazon Root CA 1	Fri, 23 Aug 2030 22:21:28 +0000
`Amazon Root CA 1`	C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Services Root Certificate Authority - G2	Thu, 31 Dec 2037 01:00:00 +0000

Subdomains (1)

www.okta.com

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for okta.com. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/okta.com">
  <img src="https://domaindrift.io/badge/okta.com.svg"
       width="300" height="64" alt="DomainDrift signed observations for okta.com">
</a>

Ed25519 Receipt

Receipt ID: rcpt_e7c7a1958d3bc0ad
Output Hash: 4b27123d2fd7c7b6f916982564d2d86c3d2f03c4b78045d6e6bb014e6cf8b4b0
Signature: ed25519:a64f2031e84ab896e1581828e7e63a0d31338dce59aa7c6eaba1dd924a00d09c36da0c2e57c0a71114c81ea58261375a33a43f1fa7a9b620065f2aa35a761a0e
Public Key: ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/okta.com