Executive summary
ft.com
Good shape, with a few gaps worth closing this quarter.
Full coverage: every applicable check was assessed.
2026-11-15 19:34 UTC
Useful for your IT provider or a colleague. Anyone with the link can view the report.
Track your progress
Fix the findings, then come back and rescan. Your scan history is saved in this browser so you can see exactly what improved.
Spoofing email from this domain is hard.
Traffic to the site is encrypted and the certificate is valid.
Some browser protections are missing.
The domain's infrastructure works, but recommended hardening is missing.
Help someone else check their domain
Share this public report with a colleague. They can review the evidence and check their own domain.
What to do first
- 1.
Limit what scripts your pages are allowed to run
This adds one layer of protection against injected scripts.
Who can fix it: Your website developer or web host
How to verify after the fix
curl -sIL https://ft.com/ | grep -i "Content-Security-Policy"
- 2.
Turn on DNS signing for your domain
Signing helps resolvers detect forged answers about your domain.
Who can fix it: Your domain registrar or DNS provider
How to verify after the fix
dig +short DS ft.com
A starting point, not a security guarantee.
What this grade means
- Tested hostname
- ft.com
- Website request
- GET https://ft.com/ → https://www.ft.com/
- Scan time
- 2026-11-15 19:34:33 UTC
- Grading method
- Version 2How grading works
- Unverified or excluded checks
- None. Every applicable check was assessed.
This is a snapshot of the public configuration checks listed in this report. It does not verify the site's owner, business legitimacy, application security, or absence of vulnerabilities. It is not a security certification.
Get the badge
Show the live grade for ft.com in a README, docs or site footer. The badge links to the public report and refreshes every 24 hours.
Scan shown on this page: 2026-11-15 19:34:33 UTC. The badge may display a cached result for up to 24 hours. Open the linked report to check its scan time.
[](https://getmirror.online/report/ft.com)<a href="https://getmirror.online/report/ft.com"><img src="https://getmirror.online/badge/ft.com.svg" alt="Domain Armor grade"></a>https://getmirror.online/badge/ft.com.svgScan history
AI fix plan
Pick scans from this browser's history. The AI compares them, explains what changed and builds a prioritized, step-by-step plan.
Scans to analyze
0 of 6 selectedThe current scan is always included.
AI-generated from your scan results only. Review each step before applying it; nothing is sent to or changed on the domain.
Agent access & discovery signals
Optional and unscored — it never changes the grade. Reads up to three public files from this site (robots.txt, llms.txt and /.well-known/security.txt) and reuses the homepage headers already fetched. llms.txt is an emerging proposal, not an official standard. It is informational and does not affect the grade.
Technical detail
Click a check to see the public data, a verification command, a safe fix recommendation and documentation sources.
Email security
30/30Encryption & certificate
25/25Browser protections
22/30DNS infrastructure
8/15Public DNS records
| A | ft.com | 18.155.75.110 18.155.75.100 18.155.75.25 18.155.75.102 |
| AAAA | ft.com | 2600:9000:2106:5e00:8:c5e2:6700:93a1 2600:9000:2106:7200:8:c5e2:6700:93a1 2600:9000:2106:ee00:8:c5e2:6700:93a1 2600:9000:2106:6600:8:c5e2:6700:93a1 2600:9000:2106:b600:8:c5e2:6700:93a1 2600:9000:2106:1400:8:c5e2:6700:93a1 2600:9000:2106:a800:8:c5e2:6700:93a1 2600:9000:2106:b400:8:c5e2:6700:93a1 |
| MX | ft.com | 10 mxa.germany.inbound.cf-emailsecurity.net 10 mxb.germany.inbound.cf-emailsecurity.net |
| NS | ft.com | ns-1447.awsdns-52.org ns-1984.awsdns-56.co.uk ns-52.awsdns-06.com ns-530.awsdns-02.net |
| TXT | ft.com | /9JIaeVTZTKIvRQN3nbfJN6BNbLYOjQelBjl6qUN4/s= IktKRV0FPEeiosHW0zf4Lw MS=ms15735648 MS=ms23088425 MS=ms23619679 MS=ms39959132 MS=ms50570352 MS=ms54676079 MS=ms87193117 access-domain-verification=436fdc74c8ebd0d982301a0c1a3b752176a55246a7c97b159d335f195ea09288 adobe-idp-site-verification=c5baff41-b308-42c8-8ace-9393ace1d783 amazonses:Dw3ndQPO42StK7/Toh+RBHUOydpp514RsYbCJWony5A= amazonses:HvBZtqew7lgZbGfdU4V/Gd07PT9PXZUEHTkH5eHdwYw= amazonses:NceEuFJaVFhkB7aKpzAp27vTpU0Z/HHD/LBjG/Jg9yk= apple-domain-verification=hiRNMTWYN1yBRwg4 asv=d0c9c01ad65bddcc0eee60ecfc13201f atlassian-domain-verification=/flKBbAdKfXx7mblo5+qFf5hD7psLK8FrrnR9vB5xL5zyvD19GRnuo4/PrNPij84 atlassian-domain-verification=hVzdk0lf3NQ/udMQWFZWxWA8eOjXyOjGD6e+1kcBpqqsLX8LHdqE5pNv+c32u0ho cloudflare_dashboard_sso=cb52a8597e3ed22ef489d879b270709f docker-verification=f23e7fb2-5705-49f2-a965-506add981f13 docusign=c04c5b8c-58c7-4024-99f3-fb1f636da0d0 facebook-domain-verification=15ore8k5t6ft96p6lt8sb02m8dls4w facebook-domain-verification=k64kwvkb345rz292m21kltvaf1r5d5 facebook-domain-verification=k7y14n0l2qtawyedyyz5fiu9ngsvg7 facebook-domain-verification=wb6970zko03f90a0lxi4gpt89lnybl facebook-domain-verification=wnuqdndij8zjroogp6jlsu8ud0yu3q figma-domain-verification=8ea20ad3e142b70da670a8313afdeb991a189ec78f024825dd321a4f186a9dc7-1762176141 google-site-verification=nqX1TPP8SIFG3F_1ULz5qPw7qEqO4Bowh14fkxdESfo google-site-verification=sXoPNkEqXt3ce7rT9MnH2bnjNLKFR3oizWMMmkQFDLI jamf-site-verification=lbgmfPGJwTYfXRt8qeKWNA make-domain-verification=25fb721f-943e-4b5d-8268-48ff60f61191 mandrill_verify.JufTb8PUBLcJ8tPLkojezA mongodb-site-verification=l2ACYeoZMEwgZw4T5SPbJiGRPoBKC3wt notion-domain-verification=mkIjxnyKOdeLmDtzKbgWoLKngPBDT5U2dmxXWbCzf7l openai-domain-verification=dv-bxQol3maMz9EffWDUvCsa5cG pardot596911=26c4369191477541d69fe3837196409e805f282f3e4aef8171e20293d42957ad pardot_218412=760e83e8fe2a693cf55ad39557c5d2ffa643883ebace2abcb9c1ce7397544cb0 slack-domain-verification=z853Xxvh1FXWNfobsGsdZp626tQCj0k4tvSa2w4O sophos-domain-verification=67ec68273fd952a93f6de23473f7209d3f10f79602e68759b4a0fbf41588d36b v=spf1 include:_spf.google.com include:mktomail.com include:_spf.salesforce.com include:email.hivebrite.com include:spf.mandrillapp.com include:24982124.spf07.hubspotemail.net include:spf.alida.io -all |
| TXT | _dmarc.ft.com | v=DMARC1; p=reject; pct=100; rua=mailto:dmarc@ft.com; ruf=mailto:dmarc@ft.com |
| CAA | ft.com | 0 iodef "mailto:cyber.security@ft.com" 0 issue "amazon.com" 0 issue "certainly.com" 0 issue "digicert.com" 0 issue "globalsign.com" 0 issue "letsencrypt.org" 0 issue "pki.goog; cansignhttpexchanges=yes" 0 issuewild "amazon.com" 0 issuewild "certainly.com" 0 issuewild "digicert.com" 0 issuewild "letsencrypt.org" 0 issuewild "pki.goog; cansignhttpexchanges=yes" |
| DS | ft.com | — |