Strale Domain Trust Check

{
  "domain": "openai.com"
}

{
  "_meta": {
    "payment": {
      "method": "x402",
      "price_usd": 0.43200000000000005,
      "settlement_id": "0x93d32c9518ceb9a56cb5d6d15e2c91a5a0ece0cf46797c834f47458a5de4dc0e"
    },
    "solution": "domain-trust",
    "latency_ms": 51,
    "step_count": 5
  },
  "steps": {
    "ssl-check": {
      "valid": true,
      "domain": "openai.com",
      "issuer": "Let's Encrypt",
      "subject": "openai.com",
      "protocol": "TLSv1.3",
      "valid_to": "2026-08-26T19:33:25.000Z",
      "is_expired": false,
      "valid_from": "2026-05-28T19:33:26.000Z",
      "cipher_name": "TLS_AES_256_GCM_SHA384",
      "serial_number": "05755338FD0104B8562ED4021335AA604C2E",
      "cipher_version": "TLSv1.3",
      "is_expiring_soon": false,
      "days_until_expiry": 75,
      "subject_alt_names": [
        "*.email.openai.com",
        "openai.com"
      ],
      "fingerprint_sha256": "98:73:6B:F6:68:54:EB:3C:34:03:17:8D:65:57:69:B5:E4:E0:10:E7:61:3D:0E:F4:0B:5E:F2:9A:A0:F2:77:BF"
    },
    "dns-lookup": {
      "domain": "openai.com",
      "has_spf": true,
      "a_records": [
        "104.18.33.45",
        "172.64.154.211"
      ],
      "has_dmarc": true,
      "mx_records": [
        {
          "exchange": "aspmx.l.google.com",
          "priority": 1
        },
        {
          "exchange": "alt2.aspmx.l.google.com",
          "priority": 5
        },
        {
          "exchange": "alt1.aspmx.l.google.com",
          "priority": 5
        },
        {
          "exchange": "alt4.aspmx.l.google.com",
          "priority": 10
        },
        {
          "exchange": "alt3.aspmx.l.google.com",
          "priority": 10
        }
      ],
      "ns_records": [
        "ns4-02.azure-dns.info",
        "ns2-02.azure-dns.net",
        "ns3-02.azure-dns.org",
        "ns1-02.azure-dns.com"
      ],
      "txt_records": [
        "pylon-domain-verification-na3cfk=bYVknYT5uGxjut616RQY8fCHj",
        "onetrust-domain-verification=7acf44f596f84700bc82bfaaeb9b388c",
        "smartsheet-site-validation=b4J2lcr0i94a3_8qW2jIQxWjyqlGUmF1",
        "google-site-verification=9sG4lDm5hmXEmnwpVGkId_ftzq-b84TYi0rwy9J-f9s",
        "jamf-site-verification=2ysWIpJrXkO40kW1SNc8Qg",
        "airtable-verification=dea7eaaa4d90e623ec30a9b2fa12ca5f",
        "postman-domain-verification=dc3e890ca92455e54d07dcec9ea8404fc401b0a5a900dfb759062cd1dc68b28f7bc7db58254e4936ff8a9303f38cb9719e1af16757b09e0067c635510c90cde8",
        "onetrust-domain-verification=6bfaeb2a9cdf438bad3b7b30e745f3ed",
        "mgverify=22d53df776e7e9198e72a000c4056f5ba1624b8f2a50e3d0f4925fcea15bb5d4",
        "parsec-domain-verification=td_30Hu4AtBG9pDT9HTJCFK42bxN3q",
        "wrike-verification=NjMwNjgwMjo0NmU2YjQ1NjgzNGJkN2M3MmYwNWUyMTNhOWUwOGY0OTQxYjBlNWJmZTEwYjYzOWU5MDNlMDlkYzAxNGZlZDRh",
        "tukj3psjdk",
        "google-site-verification=dU3pms6hgznfQnTCxkcq6P4jGjd8LMra0v429l4oElA",
        "google-site-verification=BDCE3pqO3BG5T5jWaEmQl10f5gqe3GAXgjyV0pmA5Jo",
        "google-site-verification=3uGPpoo5B2gXoFNwT4pfAJwH-1gjVj-fLqVSE6rCXGk",
        "airalo-domain-verification=xFzIMCLQ9JTlUFK",
        "twilio-domain-verification=c7745eae53aa58c5874d7a8508c510bc",
        "MS=ms50231473",
        "ZOOM_verify_Ji3VecODDwjBgU1GccqGAC",
        "miro-verification=0ee819554f4ff63f853affdf30d1cf76a15c6846",
        "notion-domain-verification=GZFdn3LQ77QuL3XKYZT6BmKDkFfmbiAorjzDIdvLRd6",
        "hiAwXiKX20HcM9FtFK90WRyUFLSV1w",
        "v=spf1 include:_spf.google.com include:spf.protection.outlook.com include:8050860.spf04.hubspotemail.net include:mktomail.com include:spf_c.oraclecloud.com -all",
        "apple-domain-verification=EgaXvYuVUgRwJTk3",
        "docker-verification=e315e0c2-f866-4bec-ac0c-844fa287bbec",
        "autodesk-domain-verification=C3oU6DmT-SfRlU0htRMR",
        "central-10085",
        "whimsical=a3593eda7e8523a75b01fd953cac04549faefe0c",
        "hibp-verify=dweb_bngtm5m5asvzv8o0xxyy9pxb",
        "stripe-verification=b1d42b65d1782470604a6dbb360e9dfe8bd7426974e5110605e86b22d945288d",
        "dtm-domain-verification=yaoiU11N90j1RKR3IObEMhQO8WHP8K4zTGmCYlUIr6k",
        "box-domain-verification=e2ecedffb7ea6f02e5f7a4afdbb83e2892f81db3acd85ff600633ad76096d459",
        "calendly-site-verification=fBZScJDPHrHKIWIb9dKdryZqPPcCkxGISR8z5xSdX",
        "canva-site-verification=3pgWM7c4EwmBo5rsy9b2Mg",
        "dropbox-domain-verification=mra9n6toqbqj",
        "figma-domain-verification=274542735efe890a700405d9916de07a971b531a0d1595c237b09d68770febf4-1762810003",
        "TAILSCALE-FAWYbK3UOL8Tf83rkJoc",
        "atlassian-domain-verification=Q2BUDjXbr3zZaNROQ1MyCjvItM31fbzhL/GR5YEn96BAAyQzrQfkxaxxWC2qj/s5",
        "openai-domain-verification=dv-un30neQJyISDPkxgKgArFtEc",
        "uber-domain-verification=77dfb7a6-1534-4c1b-a4e2-ba173fa8e9a3",
        "atlassian-domain-verification=xdHUKPdNqeX/XU/VMyGIRWfzqvhwWmcHR1DhX2J3JllvjIY3A0Aw9Ctst0DXGIgt",
        "hubspot-developer-verification=NDFmMGNmMTYtZWYxNS00YTNlLWFkM2ItMjEwYzhmYTk0NTNi",
        "ms-domain-verification=a14381d7-1e61-4cbf-97fa-4ac14336f0cf",
        "uber-domain-verification=faf07776-4ec9-4fd0-9ac5-2a6f8c514318",
        "linear-domain-verification=83vxugur897f"
      ],
      "aaaa_records": [],
      "dmarc_record": "v=DMARC1; p=reject; rua=mailto:tdfyvl0n@ag.dmarcian.com; ruf=mailto:tdfyvl0n@fr.dmarcian.com; fo=1; aspf=r",
      "cname_records": []
    },
    "whois-lookup": {
      "domain": "openai.com",
      "created": "2007-01-19T19:28:24Z",
      "expires": "2029-01-19T19:28:24Z",
      "updated": "2024-10-17T22:20:04Z",
      "statuses": [
        "clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited",
        "clientTransferProhibited https://icann.org/epp#clientTransferProhibited",
        "clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited",
        "serverDeleteProhibited https://icann.org/epp#serverDeleteProhibited",
        "serverTransferProhibited https://icann.org/epp#serverTransferProhibited",
        "serverUpdateProhibited https://icann.org/epp#serverUpdateProhibited",
        "//icann.org/epp"
      ],
      "raw_whois": "   Domain Name: OPENAI.COM\r\n   Registry Domain ID: 764064142_DOMAIN_COM-VRSN\r\n   Registrar WHOIS Server: whois.markmonitor.com\r\n   Registrar URL: http://www.markmonitor.com\r\n   Updated Date: 2024-10-17T22:20:04Z\r\n   Creation Date: 2007-01-19T19:28:24Z\r\n   Registry Expiry Date: 2029-01-19T19:28:24Z\r\n   Registrar: MarkMonitor Inc.\r\n   Registrar IANA ID: 292\r\n   Registrar Abuse Contact Email: abusecomplaints@markmonitor.com\r\n   Registrar Abuse Contact Phone: +1.2086851750\r\n   Domain Status: clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited\r\n   Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited\r\n   Domain Status: clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited\r\n   Domain Status: serverDeleteProhibited https://icann.org/epp#serverDeleteProhibited\r\n   Domain Status: serverTransferProhibited https://icann.org/epp#serverTransferProhibited\r\n   Domain Status: serverUpdateProhibited https://icann.org/epp#serverUpdateProhibited\r\n   Name Server: NS1-02.AZURE-DNS.COM\r\n   Name Server: NS2-02.AZURE-DNS.NET\r\n   Name Server: NS3-02.AZURE-DNS.ORG\r\n   Name Server: NS4-02.AZURE-DNS.INFO\r\n   DNSSEC: unsigned\r\n   URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/\r\n>>> Last update of whois database: 2026-06-12T04:35:23Z <<<\r\n\r\nFor more information on Whois status codes, please visit https://icann.org/epp\r\n\r\nNOTICE: The expiration date displayed in this record is the date the\r\nregistrar's sponsorship of the domain name registration in the registry is\r\ncurrently set to expire. This date does not necessarily reflect the expiration\r\ndate of the domain name registrant's agreement with the sponsoring\r\nregistrar.  Users may consult the sponsoring registrar's Whois database to\r\nview the registrar's reported date of expiration for this registration.\r\n\r\nTERMS OF USE: You are not authorized to access or query our Whois\r\ndatabase through the use of electronic processes that are high-volume and\r\nautomated except as reasonably necessary to register domain names or\r\nmodify existing registrations; the Data in VeriSign Global Registry\r\nServices' (\"VeriSign\") Whois database is provided by VeriSign for\r\ninformation purposes only, and to assist persons in obtaining information\r\nabout or related to a domain name registration record. VeriSign does not\r\nguarantee its accuracy. By submitting a Whois query, you agree to abide\r\nby the following terms of use: You agree that you may use this Data only\r\nfor lawful purposes and that under no circumstances will you use this Data\r\nto: (1) allow, enable, or otherwise support the transmission of mass\r\nunsolicited, commercial advertising or solicitations via e-mail, telephone,\r\nor facsimile; or (2) enable high volume, automated, electronic processes\r\nthat apply to VeriSign (or its computer systems). The compilation,\r\nrepackaging, dissemination or other use of this Data is expressly\r\nprohibited without the prior written consent of VeriSign. You agree not t",
      "registrar": "whois.markmonitor.com",
      "name_servers": [
        "ns1-02.azure-dns.com",
        "ns2-02.azure-dns.net",
        "ns3-02.azure-dns.org",
        "ns4-02.azure-dns.info"
      ]
    },
    "domain-reputation": {
      "grade": "A",
      "checks": {
        "has_mx": true,
        "has_csp": false,
        "has_spf": true,
        "has_xfo": true,
        "has_hsts": true,
        "has_xcto": true,
        "mx_count": 5,
        "resolves": true,
        "has_dmarc": true,
        "https_works": true,
        "https_status": 403,
        "ip_addresses": [
          "104.18.33.45",
          "172.64.154.211"
        ]
      },
      "domain": "openai.com",
      "issues": [],
      "issue_count": 0,
      "reputation_score": 100
    },
    "header-security-check": {
      "url": "https://openai.com",
      "cors": null,
      "grade": "C",
      "score": 75,
      "server": "cloudflare",
      "missing": [
        {
          "header": "content-security-policy",
          "severity": "high",
          "recommendation": "Add Content-Security-Policy to prevent XSS and injection attacks"
        }
      ],
      "present": [
        {
          "value": "max-age=31536000; includeSubDomains; preload",
          "header": "strict-transport-security",
          "status": "present"
        },
        {
          "value": "SAMEORIGIN",
          "header": "x-frame-options",
          "status": "present"
        },
        {
          "value": "nosniff",
          "header": "x-content-type-options",
          "status": "present"
        },
        {
          "value": "same-origin",
          "header": "referrer-policy",
          "status": "present"
        },
        {
          "value": "accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),s",
          "header": "permissions-policy",
          "status": "present"
        }
      ],
      "response_status": 403
    }
  },
  "solution": "domain-trust"
}