Executive summary
google.com
Critical findings in the observed public configuration. Some basic protections were not detected.
Partial coverage: the score is based on 95% of applicable check weight. 1 unverified check(s) are excluded, not counted as failures.
2026-11-15 19:34 UTC
Useful for your IT provider or a colleague. Anyone with the link can view the report.
Track your progress
Fix the findings, then come back and rescan. Your scan history is saved in this browser so you can see exactly what improved.
Spoofing email from this domain is hard.
Encryption is in place, but a gap could expose users.
Several browser hardening headers are missing, which removes layers of protection against script injection and framing.
The domain's infrastructure works, but recommended hardening is missing.
Help someone else check their domain
Share this public report with a colleague. They can review the evidence and check their own domain.
What to do first
- 1.
Tell browsers to always use the secure version
Helps browsers use HTTPS on future visits after they have received the policy.
Who can fix it: Your web host
How to verify after the fix
curl -sIL https://google.com/ | grep -i "Strict-Transport-Security"
- 2.
Limit what scripts your pages are allowed to run
This adds one layer of protection against injected scripts.
Who can fix it: Your website developer or web host
How to verify after the fix
curl -sIL https://google.com/ | grep -i "Content-Security-Policy"
A starting point, not a security guarantee.
What this grade means
- Tested hostname
- google.com
- Website request
- GET https://google.com/ → https://www.google.com/sorry/index?continue=https://google.com/&q=EgSsRxzDGMiS6NcGIikUFu32vQeCf8P4sqVG71pJT9mRQZx2pKnD3OguO3ozHaSIyjtI1iprzDICclJaAUNggfO9kY-m44Ez
- Scan time
- 2026-11-15 19:34:32 UTC
- Grading method
- Version 2How grading works
- Unverified or excluded checks
- DKIM — digital signature on email · Not detected (common selectors only)
This is a snapshot of the public configuration checks listed in this report. It does not verify the site's owner, business legitimacy, application security, or absence of vulnerabilities. It is not a security certification.
Get the badge
Show the live grade for google.com in a README, docs or site footer. The badge links to the public report and refreshes every 24 hours.
Scan shown on this page: 2026-11-15 19:34:32 UTC. The badge may display a cached result for up to 24 hours. Open the linked report to check its scan time.
[](https://getmirror.online/report/google.com)<a href="https://getmirror.online/report/google.com"><img src="https://getmirror.online/badge/google.com.svg" alt="Domain Armor grade"></a>https://getmirror.online/badge/google.com.svgScan history
AI fix plan
Pick scans from this browser's history. The AI compares them, explains what changed and builds a prioritized, step-by-step plan.
Scans to analyze
0 of 6 selectedThe current scan is always included.
AI-generated from your scan results only. Review each step before applying it; nothing is sent to or changed on the domain.
Agent access & discovery signals
Optional and unscored — it never changes the grade. Reads up to three public files from this site (robots.txt, llms.txt and /.well-known/security.txt) and reuses the homepage headers already fetched. llms.txt is an emerging proposal, not an official standard. It is informational and does not affect the grade.
Technical detail
Click a check to see the public data, a verification command, a safe fix recommendation and documentation sources.
Email security
24/25Encryption & certificate
18/25Browser protections
0/30DNS infrastructure
8/15Public DNS records
| A | google.com | 172.253.151.100 172.253.151.101 172.253.151.113 172.253.151.138 172.253.151.102 172.253.151.139 |
| AAAA | google.com | 2607:f8b0:4023:1431::71 2607:f8b0:4023:1431::8a 2607:f8b0:4023:1431::66 2607:f8b0:4023:1431::65 |
| MX | google.com | 10 smtp.google.com |
| NS | google.com | ns2.google.com ns3.google.com ns4.google.com ns1.google.com |
| TXT | google.com | onetrust-domain-verification=0d477fe608074e6f9c12bca7826035cc google-site-verification=TV9-DBe4R80X4v0M4U_bd_J9cpOJM0nikft0jAgjmsQ docusign=1b0a6754-49b1-4db5-8540-d2c12664b289 google-site-verification=4ibFUgB-wXLQ_S7vsXVomSTVamuOXBiVAzpR5IZ87D0 work-accounts-domain-verification=Tcj6JjIMZOw2KsSEw2Nt2rLae89tN6 MS=E4A68B9AB2BB9670BCE15412F62916164C0B20BB Z29vZ2xl arcules-domain-verification=2R4t5G7nI6tRCo61lpxxbLksPYstxhGmtV75cpr8x9K cisco-ci-domain-verification=47c38bc8c4b74b7233e9053220c1bbe76bcc1cd33c7acf7acd36cd6a5332004b apple-domain-verification=30afIBcvSuDV2PLX v=spf1 include:_spf.google.com ~all _r4rd1pvwyrpi7sw4a3hzmw8e51yh9td google-site-verification=wD8N7i1JTNTkezJ49swvWW48f8_9xveREV4oB-0Hf5o docusign=05958488-4752-4ef2-95eb-aa7ba8a3bd0e facebook-domain-verification=22rm551cu4k0ab0bxsw536tlds4h95 onetrust-domain-verification=6d685f1d41a94696ad7ef771f68993e0 globalsign-smime-dv=CDYX+XFHUw2wml6/Gb8+59BsH31KzUr6c1l2BPvqKX8= |
| TXT | _dmarc.google.com | v=DMARC1; p=reject; rua=mailto:mailauth-reports@google.com |
| CAA | google.com | 0 issue "pki.goog" |
| DS | google.com | — |