Executive summary
target.com
Good shape, with a few gaps worth closing this quarter.
Full coverage: every applicable check was assessed.
2026-11-15 19:34 UTC
Useful for your IT provider or a colleague. Anyone with the link can view the report.
Track your progress
Fix the findings, then come back and rescan. Your scan history is saved in this browser so you can see exactly what improved.
Spoofing email from this domain is hard.
Traffic to the site is encrypted and the certificate is valid.
Some browser protections are missing.
The domain's infrastructure works, but recommended hardening is missing.
Help someone else check their domain
Share this public report with a colleague. They can review the evidence and check their own domain.
What to do first
- 1.
Turn on DNS signing for your domain
Signing helps resolvers detect forged answers about your domain.
Who can fix it: Your domain registrar or DNS provider
How to verify after the fix
dig +short DS target.com
- 2.
Limit what scripts your pages are allowed to run
This adds one layer of protection against injected scripts.
Who can fix it: Your website developer or web host
How to verify after the fix
curl -sIL https://target.com/ | grep -i "Content-Security-Policy"
A starting point, not a security guarantee.
What this grade means
- Tested hostname
- target.com
- Website request
- GET https://target.com/ → https://www.target.com/
- Scan time
- 2026-11-15 19:34:34 UTC
- Grading method
- Version 2How grading works
- Unverified or excluded checks
- None. Every applicable check was assessed.
This is a snapshot of the public configuration checks listed in this report. It does not verify the site's owner, business legitimacy, application security, or absence of vulnerabilities. It is not a security certification.
Get the badge
Show the live grade for target.com in a README, docs or site footer. The badge links to the public report and refreshes every 24 hours.
Scan shown on this page: 2026-11-15 19:34:34 UTC. The badge may display a cached result for up to 24 hours. Open the linked report to check its scan time.
[](https://getmirror.online/report/target.com)<a href="https://getmirror.online/report/target.com"><img src="https://getmirror.online/badge/target.com.svg" alt="Domain Armor grade"></a>https://getmirror.online/badge/target.com.svgScan history
AI fix plan
Pick scans from this browser's history. The AI compares them, explains what changed and builds a prioritized, step-by-step plan.
Scans to analyze
0 of 6 selectedThe current scan is always included.
AI-generated from your scan results only. Review each step before applying it; nothing is sent to or changed on the domain.
Agent access & discovery signals
Optional and unscored — it never changes the grade. Reads up to three public files from this site (robots.txt, llms.txt and /.well-known/security.txt) and reuses the homepage headers already fetched. llms.txt is an emerging proposal, not an official standard. It is informational and does not affect the grade.
Technical detail
Click a check to see the public data, a verification command, a safe fix recommendation and documentation sources.
Email security
29/30Encryption & certificate
25/25Browser protections
23/30DNS infrastructure
8/15Public DNS records
| A | target.com | 151.101.194.187 151.101.2.187 151.101.130.187 151.101.66.187 |
| AAAA | target.com | — |
| MX | target.com | 5 mxb-0020ab02.gslb.pphosted.com 5 mxa-0020ab02.gslb.pphosted.com |
| NS | target.com | ns1-168.akam.net ns7-64.akam.net ns4-65.akam.net ns5-65.akam.net |
| TXT | target.com | cursor-domain-verification-24twda=do9ewEVwI4YsyRrgioGCPpp12 9rHeUd6AiQ30jFgENxeGX6CKgbSmFB/NeV5oCOQS5PbafVN66NOLFLcsuixmOo1krFPgHLMt7TCEL3iJOUF1mQ== pardot1113342=2e89ae372abfca28d04f276b46e2fba5710720542be0ba9906fa0cff8c3f7391 dGFyZ2V0 bettercomp-verify=0ba3d68f4c13f790f6581159dc1cd0f68e5d65c3d6faf242516c98560f27d089 stripe-verification=c52e56dae78932924b24e718a7850f861712da65458f8c40bab37393ccb56854 pardot1113342=ea9966a0fc36d5cb2e3e35113da18c2e19a90dabe5d0c7dfadf23e676f7d261f sending_domain1113342=20e876f12c658fe29b58d63966fae8e881f0bac7d0a4885c7b86aff0882343c5 pardot1113342=4a807533efeaff0aa4396912b6cc2cc1f070e4a82783879d01b9c0d88fa0df0b stripe-verification=916f40ab1d809d427b07435525ec8efcd0fc24be25674d3cc1067de63aa0021c openai-domain-verification=dv-75YwqS2p7WZUZtnEA4VQmZpn jamf-site-verification=4jwQPIgSevH6IE8AVQfXxw google-site-verification=2saealyvcdakrTY4LOg3GjblevTIYAJ4p_Ihwf3OrbU atlassian-sending-domain-verification=50b90740-38b8-44d1-8f90-5a5981bc2f33 brevo-code:7e6bbbf1fc671ea0755795690d17ba46 extensis-domain-verification=3911f3c0-e69c-4d75-aa8a-33afa0520d00 google-site-verification=YoIuDkHwaZvqWQkpMf8LoHDlyFdinZbzEN040XlBMmE MS=ms72649311 1bsEs7Bmn7dTcejJKXlqr9CnnnHXScqfcjGCUs5JitlqKhuQG9jYszZ91XH+Q9LcoOY52FUopROI8LYUz5YeYQ== uber-domain-verification=4caf1469-f454-49bf-b0b2-1bb84bbfeb02 atlassian-domain-verification=PrIDM+2UNKNbpMDoD3mux5NL3XcTt2tisHloieySUpQAJXBPCtBzvw2WP7tRzUvd anthropic-domain-verification-me91ce=v4ImnrngjzZhSra5y19hhth8Q v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com include:aspmx.pardot.com ~all apple-domain-verification=oc-ywTgysCFxVjoVZ7Alg51HbTSY0D7HhKU_9om-EFg ZOOM_verify_2p2yDsdgUYHCcfIzbyaTmE uber-domain-verification=7fc32e4d-8ea0-466f-a1f9-d870b178b74d NS_monitor _5uwoxxor9yzfhxbvckpkj8inuk00qbu klaviyo-site-verification=Rc6Xmj |
| TXT | _dmarc.target.com | v=DMARC1; p=reject; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@target.com |
| CAA | target.com | 0 issue "digicert.com" 0 issue "sectigo.com" 0 issue "globalsign.com" 0 iodef "mailto:certificate.management@target.com" |
| DS | target.com | — |