Executive summary
revolut.com
Moderate exposure. There are gaps an attacker could exploit — fix them soon.
Full coverage: every applicable check was assessed.
2026-11-15 19:34 UTC
Useful for your IT provider or a colleague. Anyone with the link can view the report.
Track your progress
Fix the findings, then come back and rescan. Your scan history is saved in this browser so you can see exactly what improved.
Spoofing email from this domain is hard.
Traffic to the site is encrypted and the certificate is valid.
Some browser protections are missing.
The domain's infrastructure works, but recommended hardening is missing.
Help someone else check their domain
Share this public report with a colleague. They can review the evidence and check their own domain.
What to do first
- 1.
Limit what scripts your pages are allowed to run
This adds one layer of protection against injected scripts.
Who can fix it: Your website developer or web host
How to verify after the fix
curl -sIL https://revolut.com/ | grep -i "Content-Security-Policy"
- 2.
Turn on DNS signing for your domain
Signing helps resolvers detect forged answers about your domain.
Who can fix it: Your domain registrar or DNS provider
How to verify after the fix
dig +short DS revolut.com
A starting point, not a security guarantee.
What this grade means
- Tested hostname
- revolut.com
- Website request
- GET https://revolut.com/ → https://www.revolut.com/
- Scan time
- 2026-11-15 19:34:37 UTC
- Grading method
- Version 2How grading works
- Unverified or excluded checks
- None. Every applicable check was assessed.
This is a snapshot of the public configuration checks listed in this report. It does not verify the site's owner, business legitimacy, application security, or absence of vulnerabilities. It is not a security certification.
Show the live grade for revolut.com in a README, docs or site footer. The badge links to the public report and refreshes every 24 hours.
Scan shown on this page: 2026-11-15 19:34:37 UTC. The badge may display a cached result for up to 24 hours. Open the linked report to check its scan time.
[](https://getmirror.online/report/revolut.com)<a href="https://getmirror.online/report/revolut.com"><img src="https://getmirror.online/badge/revolut.com.svg" alt="Domain Armor grade"></a>https://getmirror.online/badge/revolut.com.svgScan history
AI fix plan
Pick scans from this browser's history. The AI compares them, explains what changed and builds a prioritized, step-by-step plan.
Scans to analyze
0 of 6 selectedThe current scan is always included.
AI-generated from your scan results only. Review each step before applying it; nothing is sent to or changed on the domain.
Agent access & discovery signals
Optional and unscored — it never changes the grade. Reads up to three public files from this site (robots.txt, llms.txt and /.well-known/security.txt) and reuses the homepage headers already fetched. llms.txt is an emerging proposal, not an official standard. It is informational and does not affect the grade.
Technical detail
Click a check to see the public data, a verification command, a safe fix recommendation and documentation sources.
Email security
27/30Encryption & certificate
25/25Browser protections
18/30DNS infrastructure
8/15Public DNS records
| A | revolut.com | 162.159.140.233 172.66.0.231 |
| AAAA | revolut.com | — |
| MX | revolut.com | 5 alt2.aspmx.l.google.com 10 alt3.aspmx.l.google.com 1 aspmx.l.google.com 10 alt4.aspmx.l.google.com 5 alt1.aspmx.l.google.com |
| NS | revolut.com | ns-cloud-d1.googledomains.com ns-cloud-d2.googledomains.com ns-cloud-d4.googledomains.com ns-cloud-d3.googledomains.com |
| TXT | revolut.com | google-site-verification=J50mEx511qzmeTPOsUU3aZKLmzw6fKn1loRDuzfppUM VISA=97A654000FAB3C062CAC3619E9F9C0E6 436a12cf57e2df2e19e3bd4cccd5229d6950ac80bd6fa3781de3ef3d2a9fbf9a cursor-domain-verification-sy3hkv=1ZyJzWDtlr5B2kUt7nzYB62MB atlassian-sending-domain-verification=4952210b-0a37-4050-9a55-ce2c58fa8b28 google-site-verification=CU5aHHDFaIS7rmPsqSE0Pwt2WXNyZt0YBnoiG3A3Rqc mtc=YmEyYzAwNWUtZmE2ZS00NGUxLThjODYtMDRlZGRlMWUwN2Iy google-site-verification=QpnQ6Qe8tL0izHlvEBNMZ1CJPagyXcRrx5_3QRoqhEc 00D8d000001xy3T=1TBTu000000003F google-site-verification=FvyMDL1jIHpmqVM_Row8cOojeQB3-kIRT2oXNalAYxY pardot969163=bcff4cc1d8a139eeb479882477f5ce35bf6c3ad61dd5a03b9c44aeaf26358da4 Foxit-domain-verification=f54a9f4d26a25ebdbd5447ac0013d0de 678189f51b3ce2a5d67c166a8ac777440e0c993a23b84d301f725bb84997b148 60a5b08a2f480aef4991e6ff691b557fa15ebdec803229cdc855df6bcc995f69 _sq9cnlva91hma9r9attizpaqeis9ovp 364227379ef2a02c552e43077718593604053c2fbeee4b0a12c370b8cf4ce088 wiz-domain-verification=5855698809e48702af531b9d8049dbab0e250153fdebc3d712611253db1cf329 VISA=E08F11962574D50E1C9C150D6CD09EB8 f1d42c8c84f7179e61cd0d3fdb5da375bd081e44090c7769936e9f0aca343cf9 anthropic-domain-verification-5fpm85=h9V4qLU6UpKu0vTH3VjnBZ6u3 v=spf1 include:_spf.google.com include:mail.zendesk.com include:_spf.atlassian.net include:_spf.salesforce.com include:_spf.sparkpostmail.com ~all 862281804 apple-domain-verification=9QFO4rtc1CwwuJZW h1-domain-verification=jwDB6VRcNMMMKRdsNpP2nDe3fTwSEa7H84eZm2ai62vx13Bu google-site-verification=xX_fEjrjlZ3HH1z3z0hRZMt7ddvhhqt5lMzm_z46Qrg too3o9112f5ioqpu133a5kgl6i 35039d909ec30a13dbc9f3894c6ca239f29844c1322b7e64d695273872dd49b6 atlassian-domain-verification=Mzbg6ekGcURWMWeIFPczmNvMDO5QI6FVn3RlnpBVNX+H8EpKVkcJjvwLGVkqUxAa Certeurope=Fgiq7Pvj9CzR824G74JZHrr2MeF3w8 _58tw41qgnggbur4s48p0gmeds1w2n4r adobe-idp-site-verification=8b010750c67cbf46c5be78c2e71a28f0211964e09395094a3da0b494dbc651f3 _szxjgexeof7rmpa3i038fmje0djgyjt mtc=NDljMjNkNmYtNTVkZS00MjI2LTg2M2UtYzdhZDcyZGY2NjRj docusign=e89be285-c58c-436a-9483-c0bfa2ca9b16 google-site-verification=OXSc6c_1hvbBupLkGnAojCeg21KLxS9_0hJm4Fl5KQs VDJzVD16Woc2iWGs1fFQ2QOf+0ts75OHbERHEVFG7oU= openai-domain-verification=dv-zeXdbzLrKAKVTQrTEUoPzdap google-site-verification=w-FzBu1VDsU0MXdPY53ZXz-KYtXb-gmzZTr-QCzIKVc jamf-site-verification=k8h7_eApcP1vEEE3x5TlkA 5a3687060ef94980f6da0f909097b8d8f2e8b8ac5718e0fbd17bb0596ef3121f 067ad03f127e069f7f7aa2360cf866845c0f3f35a71d667e7d1c8dc1cd6f384d drift-domain-verification=2b5de3adf04e3120a8c9605ed8fbe18280867c93162d8b8a810414a0ed94afb4 08bc6f84b232f61558b5c23cfc326216c3e752e58407265048ba5a98d7057001 atlassian-domain-verification=3f09F8xwF6p3RmwdwQJHxQdjb8gaKNMWriwUv1Q084JbPSvRNV+HM63xtoL72ENj verification_token=6nJlA4vmsz9FGxML8s5RKThu1 docusign=9aa886dc-315c-406b-a75c-a6bf6db6e8bc jetbrains-domain-verification=dsa98mjgew5wx4h64rum7zitj amazonses:q7YOwQ1cLMnGLTRksFWhJMsh+i8Ajg08QbY8aSgnrG0= VISA=C2C643F71D0B04C4589EE3BBEE8620F6 MS=ms73364798 serval-domain-verification-9c6c02=cEIzrHyeHnAVd7xUk26tCkXfP ORUvC5FWkczlsgpQD41EiQ 125520735 zapier-domain-verification-challenge=ba39b827-8ec9-4497-b017-72aa7de4f46c |
| TXT | _dmarc.revolut.com | v=DMARC1; p=quarantine; pct=100; sp=quarantine; rua=mailto:revolut@rua.netcraft.com,mailto:dmarc@revolut.com; ruf=mailto:revolut@ruf.netcraft.com,mailto:dmarc@revolut.com; |
| CAA | revolut.com | 0 issue "e-szigno.hu" 0 issuewild "digicert.com" 0 issue "fnmt.es" 0 issue "letsencrypt.org" 0 issue "digicert.com" 0 issue "pki.goog" 0 issue "amazon.com" 0 issue "mastercard.com" 0 issuewild "fnmt.es" 0 iodef "mailto:security@revolut.com" 0 issue "buypass.com" 0 issue "ssl.com" 0 issue "sectigo.com" 0 issue "visa.com" |
| DS | revolut.com | — |