Executive summary
x.com
Good shape, with a few gaps worth closing this quarter.
Full coverage: every applicable check was assessed.
2026-11-15 19:34 UTC
Useful for your IT provider or a colleague. Anyone with the link can view the report.
Track your progress
Fix the findings, then come back and rescan. Your scan history is saved in this browser so you can see exactly what improved.
Spoofing email from this domain is hard.
Traffic to the site is encrypted and the certificate is valid.
The site instructs browsers to block common attacks.
The domain's infrastructure lacks basic protections.
Help someone else check their domain
Share this public report with a colleague. They can review the evidence and check their own domain.
What to do first
- 1.
Turn on DNS signing for your domain
Signing helps resolvers detect forged answers about your domain.
Who can fix it: Your domain registrar or DNS provider
How to verify after the fix
dig +short DS x.com
- 2.
Choose which companies may issue certificates for your domain
This reduces the chance of a certificate being issued by a provider you did not choose.
Who can fix it: Your domain registrar or DNS provider
How to verify after the fix
dig +short CAA x.com
A starting point, not a security guarantee.
What this grade means
- Tested hostname
- x.com
- Website request
- GET https://x.com/
- Scan time
- 2026-11-15 19:34:34 UTC
- Grading method
- Version 2How grading works
- Unverified or excluded checks
- None. Every applicable check was assessed.
This is a snapshot of the public configuration checks listed in this report. It does not verify the site's owner, business legitimacy, application security, or absence of vulnerabilities. It is not a security certification.
Get the badge
Show the live grade for x.com in a README, docs or site footer. The badge links to the public report and refreshes every 24 hours.
Scan shown on this page: 2026-11-15 19:34:34 UTC. The badge may display a cached result for up to 24 hours. Open the linked report to check its scan time.
[](https://getmirror.online/report/x.com)<a href="https://getmirror.online/report/x.com"><img src="https://getmirror.online/badge/x.com.svg" alt="Domain Armor grade"></a>https://getmirror.online/badge/x.com.svgScan history
AI fix plan
Pick scans from this browser's history. The AI compares them, explains what changed and builds a prioritized, step-by-step plan.
Scans to analyze
0 of 6 selectedThe current scan is always included.
AI-generated from your scan results only. Review each step before applying it; nothing is sent to or changed on the domain.
Agent access & discovery signals
Optional and unscored — it never changes the grade. Reads up to three public files from this site (robots.txt, llms.txt and /.well-known/security.txt) and reuses the homepage headers already fetched. llms.txt is an emerging proposal, not an official standard. It is informational and does not affect the grade.
Technical detail
Click a check to see the public data, a verification command, a safe fix recommendation and documentation sources.
Email security
30/30Encryption & certificate
25/25Browser protections
28/30DNS infrastructure
3/15Public DNS records
| A | x.com | 172.66.0.227 |
| AAAA | x.com | — |
| MX | x.com | 1 aspmx.l.google.com 10 alt3.aspmx.l.google.com 10 alt4.aspmx.l.google.com 5 alt1.aspmx.l.google.com 5 alt2.aspmx.l.google.com |
| NS | x.com | a.r10.twtrdns.net a.u10.twtrdns.net b.r10.twtrdns.net b.u10.twtrdns.net c.r10.twtrdns.net c.u10.twtrdns.net d.r10.twtrdns.net d.u10.twtrdns.net |
| TXT | x.com | 3089463 _w548xs1kfxtlqk3jyx19bzwk34c473i adobe-idp-site-verification=ab4d9ce3473a73e81f46238da34ea4967fd5ac80e5c43fbfa8dff46d06a5321c adobe-sign-verification=c693a744ee2d282a36a43e6e724c5ea apple-domain-verification=sEij6tJOW11fVNrG atlassian-domain-verification=j6u0o1PTkobCXC84uEF/sWpIPtaZURBVYqKzmTvT8wugLcHT1vvrzzA63iP1qSLN atlassian-sending-domain-verification=bd424180-8645-4de5-bd6a-285479c7577a central-10416 figma-domain-verification=ee8420edd01965ba297f3438c907cfc6fbbaa1ee90a07b28f28bcfca8e6017bb-1729630998 google-site-verification=6Xapa1BbHGcpSKAIcPHcZsxuKK2yK9FCn3OpZDgUBSs google-site-verification=8yQmoVhQedzlt36RPeQP41ytrEFk9aHEnde_xm0626g google-site-verification=BT51mebIp7CbI7Qy_5Qg6LJLSBrLuCGQ_oznVAgfgKA google-site-verification=F6u9mGL--d2lbLljvH3b1UUgXtevQPdcamKr9c8914A google-site-verification=isX7U92-gLht5aKvjaPvQ9tWaxoqREy8agpAOcqlfIE google-site-verification=lEZNYWieV7-UbDJafAm0u_RvNFb7GGqIYWAP4JmG5qs google-site-verification=rbRGYlOADDbtUYJTGd8GEDm0PwPZExviDSaSH4JLR8Q google-site-verification=reUF-TgZq93ZGtzImw42sfYglI2hY0QiGRmfc4jeKbs kkdl3qb3tcrmdhfsm803p67r0my0svs8 notion-domain-verification=BnCKbWESk142VKiGKHQ8PZkBfVoWYpsZxzl8Z95k0jB shopify-verification-code=cUZazKrqCWgcshrcGvgfFR1lieuhRF slack-domain-verification=Csk4bjCPFnJaDLLaKFUwCTFuUpCVvnYlAm2Tba0i stripe-verification=11AE5005048CF2B40BD2AC26DA89C512596CF727581C499E240549D95C37CEE0 stripe-verification=46F7B88485621DC18923B43D12E90E6CDBCE232F2FEBCF084E6EFA91F6BA707D v=spf1 ip4:199.16.156.0/22 ip4:199.59.148.0/22 include:_spf.google.com include:_spf.salesforce.com include:_oerp.x.com include:phx1.rp.oracleemaildelivery.com include:iad1.rp.oracleemaildelivery.com -all |
| TXT | _dmarc.x.com | v=DMARC1; p=reject; rua=mailto:caf935f12c8645b2921b0749d1fcd49e@dmarc-reports.cloudflare.net |
| CAA | x.com | — |
| DS | x.com | — |