Automated public DNS and web checks; results may be incomplete. These are passive observations, not an assessment of the organization.

C72/100

Executive summary

rakuten.co.jp

Moderate exposure. There are gaps an attacker could exploit — fix them soon.

Partial coverage: the score is based on 47% of applicable check weight. 9 unverified check(s) are excluded, not counted as failures.

2026-11-15 18:24 UTC

Print report / PDF

Useful for your IT provider or a colleague. Anyone with the link can view the report.

Track your progress

Fix the findings, then come back and rescan. Your scan history is saved in this browser so you can see exactly what improved.

Email security24/25

Good83% coverage

Spoofing email from this domain is hard.

Encryption & certificate7/7

Good28% coverage

Traffic to the site is encrypted and the certificate is valid.

Browser protections—

Not verified

Nothing in this category could be verified from public data.

DNS infrastructure3/15

Critical

The domain's infrastructure lacks basic protections.

Help someone else check their domain

Share this public report with a colleague. They can review the evidence and check their own domain.

Get the report badge

What to do first

1.
Turn on DNS signing for your domain
Signing helps resolvers detect forged answers about your domain.
Who can fix it: Your domain registrar or DNS provider
How to verify after the fix
```
dig +short DS rakuten.co.jp
```
2.
Choose which companies may issue certificates for your domain
This reduces the chance of a certificate being issued by a provider you did not choose.
Who can fix it: Your domain registrar or DNS provider
How to verify after the fix
```
dig +short CAA rakuten.co.jp
```

A starting point, not a security guarantee.

What this grade means

Tested hostname: rakuten.co.jp
Website request: GET https://rakuten.co.jp/(no HTTPS response)
Scan time: 2026-11-15 18:24:04 UTC
Grading method: Version 2How grading works
Unverified or excluded checks: DKIM — digital signature on email · Not detected (common selectors only)
HTTPS available · Unverified
SSL/TLS certificate validity · Unverified
HSTS — enforce encryption in the browser · Unverified
CSP — protection from script injection · Unverified
Clickjacking protection · Unverified
X-Content-Type-Options · Unverified
Referrer-Policy · Unverified
Permissions-Policy · Unverified

This is a snapshot of the public configuration checks listed in this report. It does not verify the site's owner, business legitimacy, application security, or absence of vulnerabilities. It is not a security certification.

Get the badge

Show the live grade for rakuten.co.jp in a README, docs or site footer. The badge links to the public report and refreshes every 24 hours.

Scan shown on this page: ⁦2026-11-15 18:24:04 UTC⁩. The badge may display a cached result for up to 24 hours. Open the linked report to check its scan time.

Markdown

[![Domain Armor grade](https://getmirror.online/badge/rakuten.co.jp.svg)](https://getmirror.online/report/rakuten.co.jp)

HTML

<a href="https://getmirror.online/report/rakuten.co.jp"><img src="https://getmirror.online/badge/rakuten.co.jp.svg" alt="Domain Armor grade"></a>

Badge URL

https://getmirror.online/badge/rakuten.co.jp.svg

Scan history

AI fix plan

Pick scans from this browser's history. The AI compares them, explains what changed and builds a prioritized, step-by-step plan.

Scans to analyze

0 of 6 selected

C72/10011/15/26, 06:24 PMCurrent

The current scan is always included.

AI-generated from your scan results only. Review each step before applying it; nothing is sent to or changed on the domain.

Technical detail

Click a check to see the public data, a verification command, a safe fix recommendation and documentation sources.

Email security

24/25

Encryption & certificate

7/7

Browser protections

—

DNS infrastructure

3/15

Public DNS records

A	rakuten.co.jp	133.237.182.225
AAAA	rakuten.co.jp	—
MX	rakuten.co.jp	0 rakuten-co-jp.mail.protection.outlook.com
NS	rakuten.co.jp	ns02.rakuten.co.jp ns02.rakuten.ad.jp ns06.rakuten.co.jp ns01.rakuten.ad.jp
TXT	rakuten.co.jp	google-site-verification=jfLP2TbPbqJSVvxptWAbrLvNNVLjpww-_Ra0KyD65EQ apple-domain-verification=UeLEhRNLNKOofIvN crk3qs7nrs2gw6ns59glnk3kpg34yb96 google-site-verification=jEVlUFe4ObKQwKXSMwI8eHSxbSurL8iVFJjjTgDWU0k jjh5xgsjhfkfv2p1c4pnw695wt2d1b6m google-site-verification=MMXQSgt7rmd8Qi1qW8vK1usn1zCT5V-d-I7UUr5gCEQ dk81fmlb8ts78g53lrq4dv43z6dprl6x _a23mdvjjysoqfsda5syosc3y3g8dixv _ab59puqfo49ja7egf36yhx1ceczcjt0 pardot1107312=6d02f8a191b3fa3cb2a63a0f8896b6b178977a6f295ef9bce9c81c2e76bbd512 v=spf1 include:spf01.rakuten.co.jp include:spf02.rakuten.co.jp ~all _b6ls5cifmj3tlp051i6dr0ipvvl1d6i _nn9jqf85nbnbgr01a087iaf96m8lgtk google-site-verification=SqqGXNFfgMep3bc91Z3f7RLBgYf-H-Fy5bF184JY56k 6c62zsshdj6rx8rchn06f5996q5449zl google-site-verification=HB8QvSCuaOINaXr1P_gtW8S9ijT9a13u-YAiBMPBokg 42n2gr6qxm8zrk7zn6353mc1kh76xtn0
TXT	_dmarc.rakuten.co.jp	v=DMARC1; p=reject; rua=mailto:dmarc-report-a@rx.rakuten.co.jp
CAA	rakuten.co.jp	—
DS	rakuten.co.jp	—

Fix priorities

Sorted by risk: severity first, confirmed issues before hardening gaps, then effort and score impact.

1MediumDNSSEC — signed DNS recordsHardening gap+15
2LowCAA — who may issue certificatesHardening gap+11

To verify

Couldn't be confirmed from public data, so excluded from the score. Checking them clarifies your posture; it doesn't guarantee a score change.

HTTPS available
SSL/TLS certificate validity
CSP — protection from script injection
HSTS — enforce encryption in the browser
Clickjacking protection
DKIM — digital signature on email
X-Content-Type-Options
Referrer-Policy
Permissions-Policy

Indicative alignment

Best-practice mapping of public findings to common frameworks. Passive scanning tests public configuration only; it doesn't prove compliance or a violation.

Google & Yahoo sender rulesIncomplete evidence · 1 unverified
SPF, DKIM and DMARC are required for bulk senders to Gmail and Yahoo; missing them risks rejected or spam-foldered mail.
PCI DSS v4.0Incomplete evidence · 5 unverified
TLS, certificate and browser-header protections relate to PCI DSS v4.0 requirements 4.2 and 6.4 for payment pages.
NIS2 / vendor due diligence2 observed gaps · 3 unverified
Vendor risk reviews under NIS2/DORA and cyber-insurance questionnaires check these public signals.
DNSSEC — signed DNS records CAA — who may issue certificates
SOC 2 / ISO 27001 baselineIncomplete evidence · 6 unverified
Baseline external hygiene commonly expected in SOC 2 and ISO 27001 audits.

Indicative alignment only, based on public configuration. It doesn't establish whether a framework applies to you, and it isn't legal advice, an audit or a certification.

Head-to-head vs competitor

How do you stack up against competitors?

The check reads public data only and makes no changes to the domain. Recommendations are intended for the domain owner.

Is your domain as secure? Scan it free, no sign-up

All pre-scanned domains

rakuten.co.jp

Moderate exposure. There are gaps an attacker could exploit — fix them soon.

Partial coverage: the score is based on 47% of applicable check weight. 9 unverified check(s) are excluded, not counted as failures.

2026-11-15 18:24 UTC

Useful for your IT provider or a colleague. Anyone with the link can view the report.

What to do first

Turn on DNS signing for your domain

Signing helps resolvers detect forged answers about your domain.

Who can fix it: Your domain registrar or DNS provider

How to verify after the fix

dig +short DS rakuten.co.jp

Choose which companies may issue certificates for your domain

This reduces the chance of a certificate being issued by a provider you did not choose.

Who can fix it: Your domain registrar or DNS provider

How to verify after the fix

dig +short CAA rakuten.co.jp

What this grade means

Tested hostname

rakuten.co.jp

Website request

GET https://rakuten.co.jp/(no HTTPS response)

Scan time

2026-11-15 18:24:04 UTC

Grading method

Version 2How grading works

Unverified or excluded checks

DKIM — digital signature on email · Not detected (common selectors only)
HTTPS available · Unverified
SSL/TLS certificate validity · Unverified
HSTS — enforce encryption in the browser · Unverified
CSP — protection from script injection · Unverified
Clickjacking protection · Unverified
X-Content-Type-Options · Unverified
Referrer-Policy · Unverified
Permissions-Policy · Unverified

Technical detail

Click a check to see the public data, a verification command, a safe fix recommendation and documentation sources.

Email security

24/25

Encryption & certificate

7/7

Browser protections

—

DNS infrastructure

3/15

Public DNS records

A	rakuten.co.jp	133.237.182.225
AAAA	rakuten.co.jp	—
MX	rakuten.co.jp	0 rakuten-co-jp.mail.protection.outlook.com
NS	rakuten.co.jp	ns02.rakuten.co.jp ns02.rakuten.ad.jp ns06.rakuten.co.jp ns01.rakuten.ad.jp
TXT	rakuten.co.jp	google-site-verification=jfLP2TbPbqJSVvxptWAbrLvNNVLjpww-_Ra0KyD65EQ apple-domain-verification=UeLEhRNLNKOofIvN crk3qs7nrs2gw6ns59glnk3kpg34yb96 google-site-verification=jEVlUFe4ObKQwKXSMwI8eHSxbSurL8iVFJjjTgDWU0k jjh5xgsjhfkfv2p1c4pnw695wt2d1b6m google-site-verification=MMXQSgt7rmd8Qi1qW8vK1usn1zCT5V-d-I7UUr5gCEQ dk81fmlb8ts78g53lrq4dv43z6dprl6x _a23mdvjjysoqfsda5syosc3y3g8dixv _ab59puqfo49ja7egf36yhx1ceczcjt0 pardot1107312=6d02f8a191b3fa3cb2a63a0f8896b6b178977a6f295ef9bce9c81c2e76bbd512 v=spf1 include:spf01.rakuten.co.jp include:spf02.rakuten.co.jp ~all _b6ls5cifmj3tlp051i6dr0ipvvl1d6i _nn9jqf85nbnbgr01a087iaf96m8lgtk google-site-verification=SqqGXNFfgMep3bc91Z3f7RLBgYf-H-Fy5bF184JY56k 6c62zsshdj6rx8rchn06f5996q5449zl google-site-verification=HB8QvSCuaOINaXr1P_gtW8S9ijT9a13u-YAiBMPBokg 42n2gr6qxm8zrk7zn6353mc1kh76xtn0
TXT	_dmarc.rakuten.co.jp	v=DMARC1; p=reject; rua=mailto:dmarc-report-a@rx.rakuten.co.jp
CAA	rakuten.co.jp	—
DS	rakuten.co.jp	—

Indicative alignment

Best-practice mapping of public findings to common frameworks. Passive scanning tests public configuration only; it doesn't prove compliance or a violation.

Google & Yahoo sender rulesIncomplete evidence · 1 unverified

SPF, DKIM and DMARC are required for bulk senders to Gmail and Yahoo; missing them risks rejected or spam-foldered mail.

PCI DSS v4.0Incomplete evidence · 5 unverified

TLS, certificate and browser-header protections relate to PCI DSS v4.0 requirements 4.2 and 6.4 for payment pages.

NIS2 / vendor due diligence2 observed gaps · 3 unverified

Vendor risk reviews under NIS2/DORA and cyber-insurance questionnaires check these public signals.

DNSSEC — signed DNS records CAA — who may issue certificates

SOC 2 / ISO 27001 baselineIncomplete evidence · 6 unverified

Baseline external hygiene commonly expected in SOC 2 and ISO 27001 audits.

Indicative alignment only, based on public configuration. It doesn't establish whether a framework applies to you, and it isn't legal advice, an audit or a certification.

rakuten.co.jp

Track your progress

Help someone else check their domain

What to do first

What this grade means

Get the badge

Scan history

AI fix plan

Scans to analyze

Technical detail

Email security

Encryption & certificate

Browser protections

DNS infrastructure

Public DNS records

Is your domain as secure? Scan it free, no sign-up

rakuten.co.jp

Track your progress

Help someone else check their domain

What to do first

What this grade means

Get the badge

Scan history

AI fix plan

Scans to analyze

Technical detail

Email security

Encryption & certificate

Browser protections

DNS infrastructure

Public DNS records

Is your domain as secure? Scan it free, no sign-up

Agent access & discovery signals