Automated public DNS and web checks; results may be incomplete. These are passive observations, not an assessment of the organization.
Executive summary
bloomberg.com
Moderate exposure. There are gaps an attacker could exploit — fix them soon.
Partial coverage: the score is based on 95% of applicable check weight. 1 unverified check(s) are excluded, not counted as failures.
2026-11-15 18:23 UTC
Useful for your IT provider or a colleague. Anyone with the link can view the report.
Track your progress
Fix the findings, then come back and rescan. Your scan history is saved in this browser so you can see exactly what improved.
Spoofing email from this domain is hard.
Traffic to the site is encrypted and the certificate is valid.
Several browser hardening headers are missing, which removes layers of protection against script injection and framing.
The domain's infrastructure works, but recommended hardening is missing.
Help someone else check their domain
Share this public report with a colleague. They can review the evidence and check their own domain.
What to do first
- 1.
Limit what scripts your pages are allowed to run
This adds one layer of protection against injected scripts.
Who can fix it: Your website developer or web host
How to verify after the fix
curl -sIL https://bloomberg.com/ | grep -i "Content-Security-Policy"
- 2.
Turn on DNS signing for your domain
Signing helps resolvers detect forged answers about your domain.
Who can fix it: Your domain registrar or DNS provider
How to verify after the fix
dig +short DS bloomberg.com
A starting point, not a security guarantee.
What this grade means
- Tested hostname
- bloomberg.com
- Website request
- GET https://bloomberg.com/ → https://www.bloomberg.com/
- Scan time
- 2026-11-15 18:23:17 UTC
- Grading method
- Version 2How grading works
- Unverified or excluded checks
- DKIM — digital signature on email · Not detected (common selectors only)
This is a snapshot of the public configuration checks listed in this report. It does not verify the site's owner, business legitimacy, application security, or absence of vulnerabilities. It is not a security certification.
Get the badge
Show the live grade for bloomberg.com in a README, docs or site footer. The badge links to the public report and refreshes every 24 hours.
Scan shown on this page: 2026-11-15 18:23:17 UTC. The badge may display a cached result for up to 24 hours. Open the linked report to check its scan time.
[](https://getmirror.online/report/bloomberg.com)<a href="https://getmirror.online/report/bloomberg.com"><img src="https://getmirror.online/badge/bloomberg.com.svg" alt="Domain Armor grade"></a>https://getmirror.online/badge/bloomberg.com.svgScan history
AI fix plan
Pick scans from this browser's history. The AI compares them, explains what changed and builds a prioritized, step-by-step plan.
Scans to analyze
0 of 6 selectedThe current scan is always included.
AI-generated from your scan results only. Review each step before applying it; nothing is sent to or changed on the domain.
Technical detail
Click a check to see the public data, a verification command, a safe fix recommendation and documentation sources.
Email security
25/25Encryption & certificate
25/25Browser protections
11/30DNS infrastructure
8/15Public DNS records
| A | bloomberg.com | 3.33.146.110 15.197.146.156 |
| AAAA | bloomberg.com | — |
| MX | bloomberg.com | 0 mgcnj1.bloomberg.com 0 mgcnj2.bloomberg.com 0 mgcny1.bloomberg.com 0 mgcny2.bloomberg.com |
| NS | bloomberg.com | dns1.p01.nsone.net dns2.p01.nsone.net dns3.p01.nsone.net dns4.p01.nsone.net pdns1.ultradns.net pdns3.ultradns.org pdns5.ultradns.info |
| TXT | bloomberg.com | OSSRH-64276 Ymxvb21iZXJn MS=ms33692690 MS=ms99943004 2smsverify=08qXd7f0aUa5IPq0N4ETgQ ZOOM_verify_8UDWCiGoiAVgGEuiZNG9Ld ZOOM_verify_rl-mcFScS8W6864E30mlZg apple-domain-verification=9cs9hMRccEtbVb8h jamf-site-verification=VJNRhgJ90SmyugkIPAdfCQ google-gws-recovery-domain-verification=72311760 airtable-verification=15d4376d6d99cc906abbcb295b4245da openai-domain-verification=dv-XaK3IjuwWpMmfss9VYKwn0eY cursor-domain-verification-asb77c=D43c1zjGqO3rTemQvZ121NSfi lutron-domain-verification-p8wzsk=PQcs5tfle6vYve4ulSshxyMYi extensis-domain-verification=707df5b4-0868-499f-af75-51718e082698 google-site-verification=CI2IKDBbk_gcKk_9CFFUrF-ZLZToKXQ7SAJ96fjqZ_I google-site-verification=ClT3QBQ-Rd4b3AAq2gmQ-u_94EliZRmC2e-Kb4t9zEo google-site-verification=vH_zs-JrwvXxkyuUqmeN9t3iMYZqyt1-BJUsoyN3ca8 F2QdzLTE6LTOyOQ7pQzoSY2pnwVM5pnfiqY3zOoYvS3LoVmIUr0J3op5vQI8Tg8VQwt24UK8v7oFWfbrCBWYYw== QnH3utpbwmcXnxwnErM2by/pp37P7fYtF9si0rMmb9FgwB98zU8UAzdl1GbyQMdyNFLKobFRdX6FfLlH/LG+og== v=spf1 ip4:69.184.0.0/13 ip4:199.172.169.0/24 ip4:208.22.56.0/24 ip4:69.191.241.124 -all atlassian-domain-verification=gK9LJEftkavNAe/keDgXDWOhGwUV02GQTz9BbfKLplkTTtpciOH5eL1W6u7BRfVR parallels-domain-verification=47460854911b478da11221dc20e8cc0340a92adf1e6b4ff08a5e941f5379c267 |
| TXT | _dmarc.bloomberg.com | v=DMARC1; p=reject; adkim=r; aspf=r; ruf=mailto:dmarc-ruf@dmarc-bloomberg.com; fo=1; rua=mailto:dmarc-rua@dmarc-bloomberg.com |
| CAA | bloomberg.com | 0 iodef "mailto:reportvuln@bloomberg.net" 0 issue "amazon.com" 0 issue "digicert.com" 0 issuewild "digicert.com" |
| DS | bloomberg.com | — |