Executive summary
medium.com
Good shape, with a few gaps worth closing this quarter.
Full coverage: every applicable check was assessed.
2026-11-15 19:34 UTC
Useful for your IT provider or a colleague. Anyone with the link can view the report.
Track your progress
Fix the findings, then come back and rescan. Your scan history is saved in this browser so you can see exactly what improved.
Spoofing email from this domain is hard.
Traffic to the site is encrypted and the certificate is valid.
The site instructs browsers to block common attacks.
The domain's infrastructure works, but recommended hardening is missing.
Help someone else check their domain
Share this public report with a colleague. They can review the evidence and check their own domain.
What to do first
- 1.
Turn on DNS signing for your domain
Signing helps resolvers detect forged answers about your domain.
Who can fix it: Your domain registrar or DNS provider
How to verify after the fix
dig +short DS medium.com
- 2.
Limit what scripts your pages are allowed to run
This adds one layer of protection against injected scripts.
Who can fix it: Your website developer or web host
How to verify after the fix
curl -sIL https://medium.com/ | grep -i "Content-Security-Policy"
A starting point, not a security guarantee.
What this grade means
- Tested hostname
- medium.com
- Website request
- GET https://medium.com/
- Scan time
- 2026-11-15 19:34:32 UTC
- Grading method
- Version 2How grading works
- Unverified or excluded checks
- None. Every applicable check was assessed.
This is a snapshot of the public configuration checks listed in this report. It does not verify the site's owner, business legitimacy, application security, or absence of vulnerabilities. It is not a security certification.
Get the badge
Show the live grade for medium.com in a README, docs or site footer. The badge links to the public report and refreshes every 24 hours.
Scan shown on this page: 2026-11-15 19:34:32 UTC. The badge may display a cached result for up to 24 hours. Open the linked report to check its scan time.
[](https://getmirror.online/report/medium.com)<a href="https://getmirror.online/report/medium.com"><img src="https://getmirror.online/badge/medium.com.svg" alt="Domain Armor grade"></a>https://getmirror.online/badge/medium.com.svgScan history
AI fix plan
Pick scans from this browser's history. The AI compares them, explains what changed and builds a prioritized, step-by-step plan.
Scans to analyze
0 of 6 selectedThe current scan is always included.
AI-generated from your scan results only. Review each step before applying it; nothing is sent to or changed on the domain.
Agent access & discovery signals
Optional and unscored — it never changes the grade. Reads up to three public files from this site (robots.txt, llms.txt and /.well-known/security.txt) and reuses the homepage headers already fetched. llms.txt is an emerging proposal, not an official standard. It is informational and does not affect the grade.
Technical detail
Click a check to see the public data, a verification command, a safe fix recommendation and documentation sources.
Email security
29/30Encryption & certificate
25/25Browser protections
27/30DNS infrastructure
8/15Public DNS records
| A | medium.com | 162.159.152.4 162.159.153.4 |
| AAAA | medium.com | 2606:4700:7::a29f:9804 2606:4700:7::a29f:9904 |
| MX | medium.com | 1 aspmx.l.google.com 10 aspmx2.googlemail.com 10 aspmx3.googlemail.com 5 alt1.aspmx.l.google.com 5 alt2.aspmx.l.google.com |
| NS | medium.com | alina.ns.cloudflare.com kip.ns.cloudflare.com |
| TXT | medium.com | 07ecf60c9da442a9b3bcce99190ff60a Domain Verification for Digicert (10/05/2022)y7ncgbyk39tw482zsbwcnfx0t775d85j anthropic-domain-verification-p32bnn=TlzaDtedEYyM5ccLdU8NsQIPP apple-domain-verification=Ls6JkesM8aOd8xyQ cursor-domain-verification-54pwxn=8yHL5J3FELu0JwETv8iGeZt4A dropbox-domain-verification=d7wsnlvbz6l3 facebook-domain-verification=eqviiajbkkhum35vciytgngt69oan0 google-site-verification=QuRrrbvTtvFC0uq2BLr_CcuuuDEiNGDJjI7XkPV3s60 google-site-verification=TUaeSBwTARWW1ntR_TLK0FwD5WKnFCpB5gYVuXkBmlg google-site-verification=jUulFqySbosf7Fvi1pvOm1KL3AeQ5L5s18CDIU30xek google-site-verification=nlPBDLGxOufYa5DdXnQ8d28h5dJjwy0bSakZq-tSios google-site-verification=qmNSvk4iAfYY_fZYv821myqWI4vaInKsGaBTkg4wNRw linear-domain-verification=tyjcyfd4thj2 notion-domain-verification=FPUVTTLhldYnVqE4496kGbBhDpf54Y4O7eA8SxkbAHk openai-domain-verification=dv-G8sPcKCsIq9tKkWTNFJZh3RE tollbit-domain-verification=ad88649c05afef85ddba3e3910778960d3d7bf85193e167281d4e0767d855153 v=spf1 include:amazonses.com include:_spf.google.com include:mail.zendesk.com include:sendgrid.net include:spf.tipalti.com include:_spf.psm.knowbe4.com ~all yahoo-verification-key=nOxcdTfSy6txWr8ZAJ8EevOZHdrxuX4qFKljmgTLsu8= |
| TXT | _dmarc.medium.com | v=DMARC1; p=reject; sp=reject; pct=100; fo=1; ri=3600; rua=mailto:dmarc.rua@medium.com,mailto:dmarc_agg@vali.email; ruf=mailto:dmarc.rua@medium.com,mailto:ruf@dmarc.medium.com,mailto:dmarc_agg@vali.email; |
| CAA | medium.com | 0 issue "amazon.com" 0 issue "amazonaws.com" 0 issue "amazontrust.com" 0 issue "awstrust.com" 0 issue "digicert.com" 0 issue "letsencrypt.org" 0 issue "pki.goog" 0 issuewild "awstrust.com" 0 issuewild "digicert.com" 0 issuewild "pki.goog" |
| DS | medium.com | — |