Executive summary
td.com
Good shape, with a few gaps worth closing this quarter.
Full coverage: every applicable check was assessed.
2026-11-15 19:34 UTC
Useful for your IT provider or a colleague. Anyone with the link can view the report.
Track your progress
Fix the findings, then come back and rescan. Your scan history is saved in this browser so you can see exactly what improved.
Spoofing email from this domain is hard.
Traffic to the site is encrypted and the certificate is valid.
Some browser protections are missing.
The domain's infrastructure lacks basic protections.
Help someone else check their domain
Share this public report with a colleague. They can review the evidence and check their own domain.
What to do first
- 1.
Turn on DNS signing for your domain
Signing helps resolvers detect forged answers about your domain.
Who can fix it: Your domain registrar or DNS provider
How to verify after the fix
dig +short DS td.com
- 2.
Choose which companies may issue certificates for your domain
This reduces the chance of a certificate being issued by a provider you did not choose.
Who can fix it: Your domain registrar or DNS provider
How to verify after the fix
dig +short CAA td.com
A starting point, not a security guarantee.
What this grade means
- Tested hostname
- td.com
- Website request
- GET https://td.com/ → https://www.td.com/us/en/personal-banking
- Scan time
- 2026-11-15 19:34:34 UTC
- Grading method
- Version 2How grading works
- Unverified or excluded checks
- None. Every applicable check was assessed.
This is a snapshot of the public configuration checks listed in this report. It does not verify the site's owner, business legitimacy, application security, or absence of vulnerabilities. It is not a security certification.
Get the badge
Show the live grade for td.com in a README, docs or site footer. The badge links to the public report and refreshes every 24 hours.
Scan shown on this page: 2026-11-15 19:34:34 UTC. The badge may display a cached result for up to 24 hours. Open the linked report to check its scan time.
[](https://getmirror.online/report/td.com)<a href="https://getmirror.online/report/td.com"><img src="https://getmirror.online/badge/td.com.svg" alt="Domain Armor grade"></a>https://getmirror.online/badge/td.com.svgScan history
AI fix plan
Pick scans from this browser's history. The AI compares them, explains what changed and builds a prioritized, step-by-step plan.
Scans to analyze
0 of 6 selectedThe current scan is always included.
AI-generated from your scan results only. Review each step before applying it; nothing is sent to or changed on the domain.
Agent access & discovery signals
Optional and unscored — it never changes the grade. Reads up to three public files from this site (robots.txt, llms.txt and /.well-known/security.txt) and reuses the homepage headers already fetched. llms.txt is an emerging proposal, not an official standard. It is informational and does not affect the grade.
Technical detail
Click a check to see the public data, a verification command, a safe fix recommendation and documentation sources.
Email security
30/30Encryption & certificate
25/25Browser protections
22/30DNS infrastructure
3/15Public DNS records
| A | td.com | 2.21.9.242 2.21.9.233 |
| AAAA | td.com | — |
| MX | td.com | 10 cluster5.us.messagelabs.com 20 cluster5a.us.messagelabs.com |
| NS | td.com | a7-65.akam.net a10-66.akam.net a16-67.akam.net a9-66.akam.net a22-64.akam.net a1-113.akam.net |
| TXT | td.com | ciscocidomainverification=36f012812ad82213c3d7cd8a75682aa4a86b1dd9f3e9d84bd090eee219ab3519 duo_sso_verification=eic1SztC2TLFiEkOfDT3HUhOH7lXQr2nuSIM3XAM7U4r4XG50LNtT1sbFXa4JyZJ 00Df4000004l6wQ=1TBhh00000000Cv Dynatrace-site-verification=97d568b9-cfe2-4b8b-9123-ee6bbab90536__htu7baej1ejfqju9s1gukpempk /riWEPlg17dSD9DgXqlo6+EGsDpatazOfdMrKt9SXJsGcdL6QZf2uB2Htfye7ctOPh7Ow8Vyq63KpOo5djg6Xg== QuS8J2b6XaFK7qIIfIiIbwwBWqELMozoB+8ZH3D44sOInKV6tiV5H4kKxKH7sP8aJBEgmkXdVXmTTEBeZJSnMg== intersight=5990a6d0a8774efe107b562ea8eb89f6989845348e29953be85c1a1b1f3d0237 google-site-verification=zr-IIMl9y61ysL3vSRXIh_UdOUr16u6a3IKFtg-AGG4 jamf-site-verification=XziUdxheYP3jRPvx3 MS=ms90345429 adobe-idp-site-verification=ee5e265407824facc4722a70cef8dce042ce9fbd50f49939b1d6b033510124d5 paloaltonetworks-site-verification=587cc0889a5742e98ce5208ff29104d22d7a25aea38e873fe653e4065b1a8976 google-site-verification=vux3y2-18P6N8xIJrRmrWiKaLXIwTUqciku5Wd-PjPU anthropic-domain-verification-h224qa=ZMk50xiEUbZpzcgFyFB6dgxJF atlassian-domain-verification=oRtaAAnmqjpSX85zzFpty3VuiWZpLJpcBCBKRN7lAWjrqRlIxYGcCXgUJAY9jC0L apple-domain-verification=x6lDWsiaROdqpbU0 apple-domain-verification=G5svgVlyOp2op14p webexdomainverification.59f34d987478e66de053ab06fc0a4453=c4644979-97d5-4ffe-95fb-fdb45355a344 figma-domain-verification=6ce0ff0ac746aed0519df19a344d2647564f6e2ecabebf8a294416c568282b0e-1790878032 jamf-site-verification=XziUdxheYP3jRPvx3Qh7xQ hpe-greenlake-domain-verification=2d32486a2d30464f614d504b755a66364562466b4e7174425a712d3751376a78 Dynatrace-site-verification=b3143b2f-7494-47c0-a56f-4969812d09f9__bfr4sa5bevc02aelg187jtbvig Dynatrace-site-verification=502f6b2a-1826-46f5-9040-6b785c6435ce__vuit4v0tpm0vmr71npu9s287ij v=spf1 ip4:142.205.0.0/16 ip4:23.103.224.0/19 ip4:206.191.224.0/19 ip4:40.103.0.0/16 include:spf.protection.outlook.com include:_spf.salesforce.com ip4:206.71.18.20/31 include:spf.messagelabs.com a:outbd-pstfx.customercenter.net include:spf.cashedge.com ip4:205.189.240.46 ip4:205.189.242.12 ip4:206.19.48.18 ip4:104.152.152.132/30 -all jamf-site-verification=_7vc7dwwO2dMP1aIUaQ0Gw adobe-idp-site-verification=7450d651-fff2-4ed9-aebd-7af8fd72e3ca |
| TXT | _dmarc.td.com | v=DMARC1; p=reject; sp=reject; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com,mailto:td@rua.agari.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com,mailto:td@ruf.agari.com |
| CAA | td.com | — |
| DS | td.com | — |