Executive summary
ing.com
Good shape, with a few gaps worth closing this quarter.
Full coverage: every applicable check was assessed.
2026-11-15 19:34 UTC
Useful for your IT provider or a colleague. Anyone with the link can view the report.
Track your progress
Fix the findings, then come back and rescan. Your scan history is saved in this browser so you can see exactly what improved.
Spoofing email from this domain is hard.
Traffic to the site is encrypted and the certificate is valid.
Some browser protections are missing.
The domain's infrastructure is well hardened.
Help someone else check their domain
Share this public report with a colleague. They can review the evidence and check their own domain.
What to do first
- 1.
Limit what scripts your pages are allowed to run
This adds one layer of protection against injected scripts.
Who can fix it: Your website developer or web host
How to verify after the fix
curl -sIL https://ing.com/ | grep -i "Content-Security-Policy"
- 2.
Limit what your site shares when visitors click links
This reduces how much page address detail is passed to other websites.
Who can fix it: Your website developer or web host
How to verify after the fix
curl -sIL https://ing.com/ | grep -i "Referrer-Policy"
A starting point, not a security guarantee.
What this grade means
- Tested hostname
- ing.com
- Website request
- GET https://ing.com/
- Scan time
- 2026-11-15 19:34:33 UTC
- Grading method
- Version 2How grading works
- Unverified or excluded checks
- None. Every applicable check was assessed.
This is a snapshot of the public configuration checks listed in this report. It does not verify the site's owner, business legitimacy, application security, or absence of vulnerabilities. It is not a security certification.
Get the badge
Show the live grade for ing.com in a README, docs or site footer. The badge links to the public report and refreshes every 24 hours.
Scan shown on this page: 2026-11-15 19:34:33 UTC. The badge may display a cached result for up to 24 hours. Open the linked report to check its scan time.
[](https://getmirror.online/report/ing.com)<a href="https://getmirror.online/report/ing.com"><img src="https://getmirror.online/badge/ing.com.svg" alt="Domain Armor grade"></a>https://getmirror.online/badge/ing.com.svgScan history
AI fix plan
Pick scans from this browser's history. The AI compares them, explains what changed and builds a prioritized, step-by-step plan.
Scans to analyze
0 of 6 selectedThe current scan is always included.
AI-generated from your scan results only. Review each step before applying it; nothing is sent to or changed on the domain.
Agent access & discovery signals
Optional and unscored — it never changes the grade. Reads up to three public files from this site (robots.txt, llms.txt and /.well-known/security.txt) and reuses the homepage headers already fetched. llms.txt is an emerging proposal, not an official standard. It is informational and does not affect the grade.
Technical detail
Click a check to see the public data, a verification command, a safe fix recommendation and documentation sources.
Email security
30/30Encryption & certificate
25/25Browser protections
17/30DNS infrastructure
15/15Public DNS records
| A | ing.com | 2.21.9.234 2.21.9.236 |
| AAAA | ing.com | 2600:1407:e800:19::b81e:2a99 2600:1407:e800:19::b81e:2abc |
| MX | ing.com | 10 ing-com.mail.protection.outlook.com |
| NS | ing.com | a5-65.akam.net a8-65.akam.net a1-175.akam.net a12-67.akam.net a13-67.akam.net a24-65.akam.net |
| TXT | ing.com | VISA=C24A831E533D7E6794BCC7794FE87094 _vjqjo3696o6vphxztpn0knhd89gwuq5 apple-domain-verification=Vl5x3ZjESwc73YUc apple-domain-verification=w4LUmPEsSFoiZvok ibmid=4fc8b5b3-a0de-4ab3-8847-42372e6aa087 swisssign-check=Qb5NkU4oaRLfmvPFl1_a8mpjDQg swisssign-check=qbkfZXvGPk3kBFxmCiItq7H__bY swisssign-check=xYiSXGaZ11adqUmawSuqAOrJSvs flexera-domain-verification-yewobfnrbgotkvsq SFMC-ClTs8Q-n7-6JtFIqV68ECEdL5FZEZ0iUYFIdlaJZ docusign=70bf2c55-4ff3-4d27-8a30-078d9f4c494c jamf-site-verification=eo6GYVlXwGbX8-68lw7PMw adobe-sign-verification=691dcb4da341c14c26ff83385495b25d adobe-sign-verification=8d48ab1d618725e23a48887f8fc13b51 uber-domain-verification=e1cb3b21-6166-48db-b9d8-589b4df8e6f5 identrust_validate=00pp+H13n1jZ6hFOtSHM7uTIPb6dZfiqXAW4sIZmghuA identrust_validate=Ay3kt6yYQqsye/EKfTzAm7kECkKpEmSz32WVfpdL8kyc identrust_validate=U8+R2xcgjKqGe53sg2dzVd6Ecv15f/K7jTs+tKuKMemp google-site-verification=48Q-2h8786W8Qi6PWLN0CACy7Jk8RfflUYiUAJIhTYQ google-site-verification=Go_lt6TFVjaMjT8o1J5AEsQPCDWFSa0caNSPCDlGTRo google-site-verification=H-haxOxu7OZXIAzEnwo3z9bLbPs7H2XLtNubDC4h5No fjN9wsod4s6kXdghJ2/B/5V76XCQYybyAT0KOEU2n6+SPfjPzZH8hbmfpg271rQRLn+7fytZiWDD7LLQJ0U32Q== infoblox-domain-mastery=c63a02c2309f084a480cb9804e4265716e9b6ac00bef2acbef676f14df7f221da1 adobe-idp-site-verification=8b81f7b92ccac0b65bab7d47f9fcecaeda6f04ac870b79133d8ac54be7b53534 hpe-greenlake-domain-verification=644f4e33795a513537594b496633726e4373665049694c4c7157304a30327147 v=spf1 include:_spf.ing.net include:mailplus.nl include:slvmcp.nl ip4:89.20.160.55 ip4:78.136.53.254 ip4:95.138.135.251 ip4:92.52.81.2 ip4:146.148.26.249 ip4:83.231.160.128/26 ip4:212.187.169.64/26 ip4:192.254.112.185 ip4:83.217.248.35 ip4:170.207.39.152/31 ip4:170.207.37.144/31 -all |
| TXT | _dmarc.ing.com | v=DMARC1;p=reject;rua=mailto:ejdvezzq@ag.eu.dmarcadvisor.com |
| CAA | ing.com | 0 iodef "mailto:ing.certificate.management@ing.com" 0 issue "digicert.com" 0 issue "identrust.com" 0 issue "sectigo.com" 0 issue "swisssign.com" 0 issuevmc "identrust.com" 0 issuevmc "swisssign.com" 0 issuemail "ica.cz" 0 issuemail "identrust.com" 0 issuemail "swisssign.com" 0 issuewild "identrust.com" 0 issuewild "swisssign.com" |
| DS | ing.com | 10223 13 2 8f759bbbfd9867f3e0bb1439363a013ef4f23bb505a0486f178f29911f1becdf |