Executive summary
reddit.com
Good shape, with a few gaps worth closing this quarter.
Full coverage: every applicable check was assessed.
2026-11-15 19:34 UTC
Useful for your IT provider or a colleague. Anyone with the link can view the report.
Track your progress
Fix the findings, then come back and rescan. Your scan history is saved in this browser so you can see exactly what improved.
Spoofing email from this domain is hard.
Traffic to the site is encrypted and the certificate is valid.
The site instructs browsers to block common attacks.
The domain's infrastructure works, but recommended hardening is missing.
Help someone else check their domain
Share this public report with a colleague. They can review the evidence and check their own domain.
What to do first
- 1.
Turn on DNS signing for your domain
Signing helps resolvers detect forged answers about your domain.
Who can fix it: Your domain registrar or DNS provider
How to verify after the fix
dig +short DS reddit.com
- 2.
Limit what your site shares when visitors click links
This reduces how much page address detail is passed to other websites.
Who can fix it: Your website developer or web host
How to verify after the fix
curl -sIL https://reddit.com/ | grep -i "Referrer-Policy"
A starting point, not a security guarantee.
What this grade means
- Tested hostname
- reddit.com
- Website request
- GET https://reddit.com/ → https://www.reddit.com/
- Scan time
- 2026-11-15 19:34:33 UTC
- Grading method
- Version 2How grading works
- Unverified or excluded checks
- None. Every applicable check was assessed.
This is a snapshot of the public configuration checks listed in this report. It does not verify the site's owner, business legitimacy, application security, or absence of vulnerabilities. It is not a security certification.
Get the badge
Show the live grade for reddit.com in a README, docs or site footer. The badge links to the public report and refreshes every 24 hours.
Scan shown on this page: 2026-11-15 19:34:33 UTC. The badge may display a cached result for up to 24 hours. Open the linked report to check its scan time.
[](https://getmirror.online/report/reddit.com)<a href="https://getmirror.online/report/reddit.com"><img src="https://getmirror.online/badge/reddit.com.svg" alt="Domain Armor grade"></a>https://getmirror.online/badge/reddit.com.svgScan history
AI fix plan
Pick scans from this browser's history. The AI compares them, explains what changed and builds a prioritized, step-by-step plan.
Scans to analyze
0 of 6 selectedThe current scan is always included.
AI-generated from your scan results only. Review each step before applying it; nothing is sent to or changed on the domain.
Agent access & discovery signals
Optional and unscored — it never changes the grade. Reads up to three public files from this site (robots.txt, llms.txt and /.well-known/security.txt) and reuses the homepage headers already fetched. llms.txt is an emerging proposal, not an official standard. It is informational and does not affect the grade.
Technical detail
Click a check to see the public data, a verification command, a safe fix recommendation and documentation sources.
Email security
30/30Encryption & certificate
25/25Browser protections
25/30DNS infrastructure
8/15Public DNS records
| A | reddit.com | 151.101.129.140 151.101.65.140 151.101.193.140 151.101.1.140 |
| AAAA | reddit.com | 2a04:4e42:200::396 2a04:4e42:600::396 2a04:4e42:400::396 2a04:4e42::396 |
| MX | reddit.com | 1 aspmx.l.google.com 10 aspmx2.googlemail.com 10 aspmx3.googlemail.com 5 alt1.aspmx.l.google.com 5 alt2.aspmx.l.google.com |
| NS | reddit.com | ns-1029.awsdns-00.org ns-1887.awsdns-43.co.uk ns-378.awsdns-47.com ns-557.awsdns-05.net |
| TXT | reddit.com | 00DV90000052YKT=1TBV90000000AsD 00Dbf000005OCRl=1TBbf0000000MJt 00Dbf000005OCTN=1TBbf0000000Mer 00Do0000000I6Pa=1TBcv0000000HQh 614ac4be-8664-4cea-8e29-f84d08ad875c MS=ms71041902 a5897185-49e1-4181-9065-51bd24737466 apple-domain-verification=qC3rSSKrh10DoMI7 atlassian-domain-verification=aGWDxGvt+oY3p7qTWt5v2uJDVJkoJAeHxwGqKmGQLMEsUXUJJe/Pm/k+GGNPpn6M atlassian-domain-verification=vBaV6PXyyu4OAPLiQFbxFMCboSTjoR/qxKJ2OlpI46ZEpZL/FVTIfMlgoM5Hy9eY box-domain-verification=95c33f4ee4b11d8827190dbc5371ca7df25b961019116e5565ce4aa36de9be3a cursor-domain-verification-f9fw38=WVB8yAMGTZXO7Je9DLuj1DIZB docusign=6ba0c5a9-5a5e-41f8-a7c8-8b4c6e35c10c google-site-verification=0uv13-wxlHK8FFKaUpgzyrVmL1YdNYW6v3PupLdw3JI google-site-verification=5Qzlkl8HJJSBKnMI7rQGDr9Sgiir4Ey6klx1rWQCJ2M google-site-verification=QO4VY1PRzsG-MxiQn3j0kxd_ZaFjcTk6MWBfKru0_5I google-site-verification=oh_YJE560y0e6FHP1RT7NIjyTlBhACNMvD2EgSss0sc google-site-verification=zZHozYbAJmSLOMG4OjQFoHiVqkxtdgvyBzsE7wUGFiw jamf-site-verification=EGK11tNR4hezQg0jZaIDpA jetbrains-domain-verification=bjn7o9fxbduga0omhaepeewtx liveramp-site-verification=hNZ5ZAy1ufTpXrpCELrrtSzTlb4KU4h7UtDPpZdj9XA onetrust-domain-verification=6b98ba3dd087405399bbf45b6cbdcd37 postman-domain-verification=ad4c89daaf83d06f70cb6e8737cb323b039aeaae9e0e288c75081b0a715812a2d30e7c31402da867c70287ad8216da42074ffe7b4fcfcbf86f9316301329308f protonmail-verification=24cb91442caf54c8b820f4a0347292f143531210 stripe-verification=80aa7e2c9775fee2653f61b04b46da6fd227b56fecd9499e5f63cd0dcf563984 stripe-verification=9bd70dd1884421b47f596fea301e14838c9825cdba5b209990968fdc6f8010c7 twilio-domain-verification=5e37855d7c9445e967b31c5e0371ebb5 v=spf1 include:spf0.reddit.com -all yahoo-verification-key=I0We5FayJi0Q8XdjDgE5oN0ujM08heSVe46o/FvsMkk= |
| TXT | _dmarc.reddit.com | v=DMARC1; p=reject; fo=1; ruf=mailto:reddit@us.cp-dmarc.com; rua=mailto:reddit@us.cp-dmarc.com |
| CAA | reddit.com | 0 issue "digicert.com; cansignhttpexchanges=yes" 0 issue "pki.goog" |
| DS | reddit.com | — |