Executive summary
ebay.com
High exposure. Significant weaknesses put the brand, customers and email at risk.
Full coverage: every applicable check was assessed.
2026-11-15 19:34 UTC
Useful for your IT provider or a colleague. Anyone with the link can view the report.
Track your progress
Fix the findings, then come back and rescan. Your scan history is saved in this browser so you can see exactly what improved.
Spoofing email from this domain is hard.
Traffic to the site is encrypted and the certificate is valid.
Several browser hardening headers are missing, which removes layers of protection against script injection and framing.
The domain's infrastructure works, but recommended hardening is missing.
Help someone else check their domain
Share this public report with a colleague. They can review the evidence and check their own domain.
What to do first
- 1.
Limit what scripts your pages are allowed to run
This adds one layer of protection against injected scripts.
Who can fix it: Your website developer or web host
How to verify after the fix
curl -sIL https://ebay.com/ | grep -i "Content-Security-Policy"
- 2.
Turn on DNS signing for your domain
Signing helps resolvers detect forged answers about your domain.
Who can fix it: Your domain registrar or DNS provider
How to verify after the fix
dig +short DS ebay.com
A starting point, not a security guarantee.
What this grade means
- Tested hostname
- ebay.com
- Website request
- GET https://ebay.com/ → https://www.ebay.com/
- Scan time
- 2026-11-15 19:34:35 UTC
- Grading method
- Version 2How grading works
- Unverified or excluded checks
- None. Every applicable check was assessed.
This is a snapshot of the public configuration checks listed in this report. It does not verify the site's owner, business legitimacy, application security, or absence of vulnerabilities. It is not a security certification.
Get the badge
Show the live grade for ebay.com in a README, docs or site footer. The badge links to the public report and refreshes every 24 hours.
Scan shown on this page: 2026-11-15 19:34:35 UTC. The badge may display a cached result for up to 24 hours. Open the linked report to check its scan time.
[](https://getmirror.online/report/ebay.com)<a href="https://getmirror.online/report/ebay.com"><img src="https://getmirror.online/badge/ebay.com.svg" alt="Domain Armor grade"></a>https://getmirror.online/badge/ebay.com.svgScan history
AI fix plan
Pick scans from this browser's history. The AI compares them, explains what changed and builds a prioritized, step-by-step plan.
Scans to analyze
0 of 6 selectedThe current scan is always included.
AI-generated from your scan results only. Review each step before applying it; nothing is sent to or changed on the domain.
Agent access & discovery signals
Optional and unscored — it never changes the grade. Reads up to three public files from this site (robots.txt, llms.txt and /.well-known/security.txt) and reuses the homepage headers already fetched. llms.txt is an emerging proposal, not an official standard. It is informational and does not affect the grade.
Technical detail
Click a check to see the public data, a verification command, a safe fix recommendation and documentation sources.
Email security
29/30Encryption & certificate
25/25Browser protections
7/30DNS infrastructure
8/15Public DNS records
| A | ebay.com | 23.212.185.151 23.212.185.140 |
| AAAA | ebay.com | — |
| MX | ebay.com | 10 mx1.hc2186-24.iphmx.com 10 mx2.hc2186-24.iphmx.com |
| NS | ebay.com | dns1.p06.nsone.net dns2.p06.nsone.net dns3.p06.nsone.net dns4.p06.nsone.net ns01.ebaydns.com ns02.ebaydns.com ns03.ebaydns.com ns04.ebaydns.com |
| TXT | ebay.com | have-i-been-pwned-verification=0c602ead0d5752884611ab6da8130888 v=spf1 include:c._spf.ebay.com include:p._spf.ebay.com include:p2._spf.ebay.com ~all docusign=2f99919f-4b97-48a8-a0d6-f37c1b878a6f docusign=5afbc33d-5902-429f-9da5-85f53225ff2c xsvrwb8728vd31dxf3kmr6f7b35jwtv9 google-site-verification=8kHr3jd3Z43q1ovwo0KVgo_NZKIEMjthBxti8m8fYTg google-site-verification=-8fQa1t-LZYGDBqA-7xKMviyt-eGhzgndjqCWAQHEzY google-site-verification=xpINMAhIxiBLIZOm3mpwtqKK9jni654vv9yx-3D4IiI fnvlknmfzmxvfc4v88jbv36zhplsv128 pardot563182=373a008e0946cf587e680c9104875fd76e28a5bd37b20c795d4ec7a56fae03e3 atlassian-domain-verification=9CqXy0mqLrw8leKzrtncxQ7AVcomaaLh5g4ncvJK++dWfAE1p+e5zG3y+uz2IRAf pardot563182=588d6bdc918af063439a2f58820bbaaa2c3341a2a8b404faff87569d9a940843 f3zqqffl85bsg0nycdx77p875zdbvf4v 00148017 google-site-verification=QZC4rpLc5fD4UwxHWQ_f1ptHuYmVU-ZYwpPnF6J2rao 2ddxq7hm99sr1rhmmvnnsqt8kd88pmkf stripe-verification=013C595CE6A7D9E1C4D41AAC1AC4E5483A9C9CC8A22DFFB1160EC678B16F3938 _9x1syjn55mozh6ex8vj2ixddxbkrmce sending_domain1089322=0814af61325323d2c36344de0c658ecb1ecb129f974dc796476a06c49c972b35 docker-verification=d3182388-9ec4-417c-8652-9571bdb9b3ee mongodb-site-verification=0KbWg9avVs7GPjaBJldDoF0CfAGL2HUf atlassian-domain-verification=uvfxaVajGgKJNySN0c1wbjqBEQYOxtcFYxvWagz9ZBP6jCdJm7kCwYtZAVGAU3AD mandrill_verify.YuABo1H2VBgb3wllz5Dqgw docker-verification=4a9cee40-6d52-4a4c-ab5f-fbdaa3da927a cursor-domain-verification-d27pc8=W2aj00Pbge7oaONyKsnFPuJUS adobe-idp-site-verification=25164687e15a57a865a83d05e79e15242cfbfbbcaeeba52d3c370b6ea4b91a7b jamf-site-verification=RiiVDX1RYjbvmkAEOB4wgQ stripe-verification=2BE98F2CCF89BEDBCE2EF950F4B6F2CE9B71438E1035BA541F66ABB63FE238BD notion-domain-verification=Xk4EwbjNFy5jUH1CK5pLHuvjpSTiLerRQL5PeUHPpCm dtm-domain-verification=p4f-YbZxtydZd6rQLcoMgPLxkhJn1R2jCO7XvEHHxCM 00DVD000007Key9=1TBVD00000003xB liveramp-site-verification=tfFruiL1CvM4nqfV-LGzr0vfFrFZGJMJEZmHbdUdb1o lucidlink-verification=T9N32V0VCH6R1QG09SV73JAMFG jetbrains-domain-verification=2qvxb7a0486fg9954coaclyr0 anthropic-domain-verification-8cb923=prAmdJb4Vn2aXxQ8ykkNJGeje vercel-domain-verification-bhqa57=viYmWOqbTXnw9w2hniLtLUCJH stripe-verification=B3201E89648A6B609B906EA5D21F2BEAD2F178AFB87D38544BB836027DC75B41 verification_token=_8jf6o5isr8wg7518jhemwj5tpl69h50 atlassian-sending-domain-verification=b4526eb7-2164-49a6-9b7c-45a6dcabe49e 00D80000000PQip=1TBRP0000000CpB 00D5A00000175Io=1TBVb0000000AIj 00D1I000001UkRS=1TBPO00000007fp |
| TXT | _dmarc.ebay.com | v=DMARC1; p=reject; rua=mailto:ebay@rua.agari.com; ruf=mailto:ebay@ruf.agari.com; fo=1; rf=afrf; pct=100 |
| CAA | ebay.com | 0 issue "symantec.com" 0 iodef "mailto:dl-ebay-caa@ebay.com" 0 issue "digicert.com" 0 issue "sectigo.com" |
| DS | ebay.com | — |