Automated public DNS and web checks; results may be incomplete. These are passive observations, not an assessment of the organization.

F57/100

Executive summary

samsung.com

Critical findings in the observed public configuration. Some basic protections were not detected.

Partial coverage: the score is based on 95% of applicable check weight. 1 unverified check(s) are excluded, not counted as failures.

2026-11-15 18:16 UTC

Print report / PDF

Useful for your IT provider or a colleague. Anyone with the link can view the report.

Track your progress

Fix the findings, then come back and rescan. Your scan history is saved in this browser so you can see exactly what improved.

Email security14/25

Needs attention83% coverage

Spoofing email in the company's name is possible in some cases.

Encryption & certificate25/25

Good

Traffic to the site is encrypted and the certificate is valid.

Browser protections12/30

Critical

Several browser hardening headers are missing, which removes layers of protection against script injection and framing.

DNS infrastructure3/15

Critical

The domain's infrastructure lacks basic protections.

Help someone else check their domain

Share this public report with a colleague. They can review the evidence and check their own domain.

Get the report badge

What to do first

1.
Tell receiving mail servers how to treat fake email from your domain
Without this policy, inboxes have less guidance for spotting messages that impersonate you.
Who can fix it: Your email provider, together with whoever manages your DNS
How to verify after the fix
```
dig +short TXT _dmarc.samsung.com
```
2.
Limit what scripts your pages are allowed to run
This adds one layer of protection against injected scripts.
Who can fix it: Your website developer or web host
How to verify after the fix
```
curl -sIL https://samsung.com/ | grep -i "Content-Security-Policy"
```

A starting point, not a security guarantee.

What this grade means

Tested hostname: samsung.com
Website request: GET https://samsung.com/ → https://www.samsung.com/us/
Scan time: 2026-11-15 18:16:40 UTC
Grading method: Version 2How grading works
Unverified or excluded checks: DKIM — digital signature on email · Not detected (common selectors only)

This is a snapshot of the public configuration checks listed in this report. It does not verify the site's owner, business legitimacy, application security, or absence of vulnerabilities. It is not a security certification.

Get the badge

Show the live grade for samsung.com in a README, docs or site footer. The badge links to the public report and refreshes every 24 hours.

Scan shown on this page: ⁦2026-11-15 18:16:40 UTC⁩. The badge may display a cached result for up to 24 hours. Open the linked report to check its scan time.

Markdown

[![Domain Armor grade](https://getmirror.online/badge/samsung.com.svg)](https://getmirror.online/report/samsung.com)

HTML

<a href="https://getmirror.online/report/samsung.com"><img src="https://getmirror.online/badge/samsung.com.svg" alt="Domain Armor grade"></a>

Badge URL

https://getmirror.online/badge/samsung.com.svg

Scan history

AI fix plan

Pick scans from this browser's history. The AI compares them, explains what changed and builds a prioritized, step-by-step plan.

Scans to analyze

0 of 6 selected

F57/10011/15/26, 06:16 PMCurrent

The current scan is always included.

AI-generated from your scan results only. Review each step before applying it; nothing is sent to or changed on the domain.

Technical detail

Click a check to see the public data, a verification command, a safe fix recommendation and documentation sources.

Email security

14/25

Encryption & certificate

25/25

Browser protections

12/30

DNS infrastructure

3/15

Public DNS records

A	samsung.com	211.45.27.231
AAAA	samsung.com	—
MX	samsung.com	10 mailin.samsung.com
NS	samsung.com	auth01.sam.ic dns-gi1.samsung.com dnssm.samsung.com dnssm2.samsung.com dnsst.samsung.com dnsst2.samsung.com dns-gi2.samsung.com dns-awskr1.samsung.com
TXT	samsung.com	google-site-verification=Tb4utn-Cz0GYEzmsVzHfYhi6kv6XU--QYrYkfsVLwO0 apple-domain-verification=1f6od6-lOUHNPseuv2qlLXryA-4aMi97KboxR65PVb0 globalsign-domain-verification=BD8E0953267AFCAEF59AFBF5F00BEB67 figma-domain-verification=fff7a09ce23c2d8329d368316712f1dcb0a29cb4c71a406f8f41dce4ef671081-1767768682 samsung-domain-verification=9a471672-ab8b-442c-a646-b6fda8a9e698 google-site-verification=4pYi1ZoA5M9sNwJ39mlfRLPA5w_J2lqCVFEVUPyojp8 liveramp-site-verification=bLTcKGTyyCkVh8Zt5X8IYY9T4Uns9ZRoAEG6NPzTd-c google-gws-recovery-domain-verification=69734317 pardot1005352=4bf1edcafe2d5f7ea48b1ab4c669194f7fb8492acec4617e4b3af673899d0f05 pardot880362=0579f4b1009200bd5629bc294b593112ab1438df4ebedf4de300d36b4a35e5bf pardot1123213=e21329a1ef7ab24c2a6a00afb2c9cdf6409a12ea19fd8c37c70c53eb8cbd3176 atlassian-domain-verification=YJdK2oq4udj7wXxpQw52IsGEJue0ar/5JYtGr9lwcGNCffiKwPSGDZIQH0JlESij globalsign-domain-verification=A931337188D2EF719A821F0016D8552E google-site-verification=qKOICuq5bpeTBLMOeQs-pQ4fR4YdzZVLyFvahSDaRqc globalsign-domain-verification=D4FBC243F3CA31BC63C84A1CE7856D69 8gv0n578hg7imelchsg2tesqq1 v=spf1 include:_spf.samsung.com ~all asv=8c95d437a5f5281bf0b46412ea6410ff globalsign-domain-verification=9382b64f06fad76d1ebac344380ab28b cisco-ci-domain-verification=37f06378ba0e1526ad9a057438e3f2a1d0888e4e21d4ce75160ac7475679e080 miro-verification=16f39e2d161837f1d97cfb17ff7e81f243c68683 7029addd-cf82-4d9e-9ac6-45cd3e47e467 globalsign-domain-verification=d7cac74e387872153b45a1cf21f819ee docusign=022189ea-ba76-432a-abd7-19343970da7e globalsign-domain-verification=BF9A67D3968C1D5FEC1440B12347B6AF amazonses:GabQpmRJN86a4HQqoLu1IEu/b6hqbMTlQSHol1cVzhA= globalsign-domain-verification=E636433F4A5B2209D29402CE4AE96D29 dtm-domain-verification=sj6QpVm4qndJLuG0vmv2lv2WLlZ3g1EGLq9OItKaBQI google-site-verification=XioIPzfjKziFDv7svS2vFxobJ1j6ApORgnD43-La5jc pardot848313=56b423327c6bbcc73c4888f1e7a74aa35be107baa0d8dbc0d60d3078016cdedb pardot1061362=d72ade8848a288815d8cd7fcdedf8e2ea1ffdf37f2e6199b9c6d2b118b260b11 pardot1061372=cd7a8dc7dac11576e3160df3645c3be60beb48d38262fe75e1b83b6ed4547e2f pardot1061382=ee554f6d1abf83530c2b3bd50be47bc5e417bb833dc9b2686e5c5c384d2e174c pardot1061392=f1c7431aa41d5e18d6f425faa7ee4bef2cc82af55471991546af317ad4988f6f pardot848313=94e68189fc6e698e53ab66f68f9fa66f68b14ab1837bac98f0a5b5b4dd57503d google-site-verification=If15ip-WHY67QHEaM6ka9WKCcxgFHbS1oaXJswpUbHQ smartsheet-site-validation=E2jBYaDqtbMgG1u9Jzz2eQBNGVL2eea- canva-site-verification=Lz0E97jjjyiBnq4nGgrBzg mongodb-site-verification=OK5ChSTjOEnRssN4ZNjB6y7xoqWBSraL google-site-verification=gVlQpmwAi4l7c9YZ6vgGKB google-site-verification=gVlQpmwAi4l7c9YZ6vgGKBrqIjduXkSx7ekuOPsOAlg docker-verification=a98547c5-d702-4b4b-9516-4331ed5171c8 google-site-verification=2Qn3FwdHxOdx-U2EBlX2Aq6OPFHM-JGRpo5fN2vEr88 globalsign-domain-verification=142A59A6E9D02E64F922A9C6893534A2 pardot1061372=4fedddc5665b4f323efd74d4970852e6a46f8df316987974967da26bef35bf24 pardot1061372=7f77a7e9d20bced708628f16f6245665a0b5d0ab840f492e5b8b9d0616ff8bff openai-domain-verification=dv-geyHaAZ2x2iRSG5mPLgCehBU google-gws-recovery-domain-verification=57248779 dtm-domain-verification=5gAZbUOV4mzm7FcNMxN3Z_8Og_vvyqJh5FxCE_rh0zE cisco-ci-domain-verification=4d1fed540ceae17bd020e5d248bb657c382c66454d32a5984edd4871be659cea MS=ms51591264 figma-domain-verification=74d791d52b49cbb05822c432d058f86bb47d2d97aa815d0ca470c6ef74a99003-1742422683 box-domain-verification=b82590942dde67b52e8c41dc0e492a02ade277c5aede0e6de0b3b8de28a0085a asv=bbc7c9d6c4c6acdc2124368f94efe110
TXT	_dmarc.samsung.com	v=DMARC1; p=none; rua=mailto:postmaster@samsung.com; ruf=mailto:postmaster@samsung.com
CAA	samsung.com	—
DS	samsung.com	—

Fix priorities

Sorted by risk: severity first, confirmed issues before hardening gaps, then effort and score impact.

1MediumDMARC — anti-spoofing policyHardening gap+11
2MediumDNSSEC — signed DNS recordsHardening gap+7
3MediumCSP — protection from script injectionHardening gap+8
4LowCAA — who may issue certificatesHardening gap+5
5LowX-Content-Type-OptionsHardening gap+4
6LowReferrer-PolicyHardening gap+3
7LowPermissions-PolicyHardening gap+2

To verify

Couldn't be confirmed from public data, so excluded from the score. Checking them clarifies your posture; it doesn't guarantee a score change.

DKIM — digital signature on email

Indicative alignment

Best-practice mapping of public findings to common frameworks. Passive scanning tests public configuration only; it doesn't prove compliance or a violation.

Google & Yahoo sender rules1 observed gaps · 1 unverified
SPF, DKIM and DMARC are required for bulk senders to Gmail and Yahoo; missing them risks rejected or spam-foldered mail.
DMARC — anti-spoofing policy
PCI DSS v4.01 observed gaps
TLS, certificate and browser-header protections relate to PCI DSS v4.0 requirements 4.2 and 6.4 for payment pages.
CSP — protection from script injection
NIS2 / vendor due diligence3 observed gaps
Vendor risk reviews under NIS2/DORA and cyber-insurance questionnaires check these public signals.
DMARC — anti-spoofing policy DNSSEC — signed DNS records CAA — who may issue certificates
SOC 2 / ISO 27001 baseline3 observed gaps
Baseline external hygiene commonly expected in SOC 2 and ISO 27001 audits.
DMARC — anti-spoofing policy CSP — protection from script injection X-Content-Type-Options

Indicative alignment only, based on public configuration. It doesn't establish whether a framework applies to you, and it isn't legal advice, an audit or a certification.

Head-to-head vs competitor

How do you stack up against competitors?

The check reads public data only and makes no changes to the domain. Recommendations are intended for the domain owner.

Is your domain as secure? Scan it free, no sign-up

All pre-scanned domains

samsung.com

Critical findings in the observed public configuration. Some basic protections were not detected.

Partial coverage: the score is based on 95% of applicable check weight. 1 unverified check(s) are excluded, not counted as failures.

2026-11-15 18:16 UTC

Useful for your IT provider or a colleague. Anyone with the link can view the report.

What to do first

Tell receiving mail servers how to treat fake email from your domain

Without this policy, inboxes have less guidance for spotting messages that impersonate you.

Who can fix it: Your email provider, together with whoever manages your DNS

How to verify after the fix

dig +short TXT _dmarc.samsung.com

Limit what scripts your pages are allowed to run

This adds one layer of protection against injected scripts.

Who can fix it: Your website developer or web host

How to verify after the fix

curl -sIL https://samsung.com/ | grep -i "Content-Security-Policy"

What this grade means

Tested hostname

samsung.com

Website request

GET https://samsung.com/ → https://www.samsung.com/us/

Scan time

2026-11-15 18:16:40 UTC

Grading method

Version 2How grading works

Unverified or excluded checks

DKIM — digital signature on email · Not detected (common selectors only)

Technical detail

Click a check to see the public data, a verification command, a safe fix recommendation and documentation sources.

Email security

14/25

Encryption & certificate

25/25

Browser protections

12/30

DNS infrastructure

3/15

Public DNS records

A	samsung.com	211.45.27.231
AAAA	samsung.com	—
MX	samsung.com	10 mailin.samsung.com
NS	samsung.com	auth01.sam.ic dns-gi1.samsung.com dnssm.samsung.com dnssm2.samsung.com dnsst.samsung.com dnsst2.samsung.com dns-gi2.samsung.com dns-awskr1.samsung.com
TXT	samsung.com	google-site-verification=Tb4utn-Cz0GYEzmsVzHfYhi6kv6XU--QYrYkfsVLwO0 apple-domain-verification=1f6od6-lOUHNPseuv2qlLXryA-4aMi97KboxR65PVb0 globalsign-domain-verification=BD8E0953267AFCAEF59AFBF5F00BEB67 figma-domain-verification=fff7a09ce23c2d8329d368316712f1dcb0a29cb4c71a406f8f41dce4ef671081-1767768682 samsung-domain-verification=9a471672-ab8b-442c-a646-b6fda8a9e698 google-site-verification=4pYi1ZoA5M9sNwJ39mlfRLPA5w_J2lqCVFEVUPyojp8 liveramp-site-verification=bLTcKGTyyCkVh8Zt5X8IYY9T4Uns9ZRoAEG6NPzTd-c google-gws-recovery-domain-verification=69734317 pardot1005352=4bf1edcafe2d5f7ea48b1ab4c669194f7fb8492acec4617e4b3af673899d0f05 pardot880362=0579f4b1009200bd5629bc294b593112ab1438df4ebedf4de300d36b4a35e5bf pardot1123213=e21329a1ef7ab24c2a6a00afb2c9cdf6409a12ea19fd8c37c70c53eb8cbd3176 atlassian-domain-verification=YJdK2oq4udj7wXxpQw52IsGEJue0ar/5JYtGr9lwcGNCffiKwPSGDZIQH0JlESij globalsign-domain-verification=A931337188D2EF719A821F0016D8552E google-site-verification=qKOICuq5bpeTBLMOeQs-pQ4fR4YdzZVLyFvahSDaRqc globalsign-domain-verification=D4FBC243F3CA31BC63C84A1CE7856D69 8gv0n578hg7imelchsg2tesqq1 v=spf1 include:_spf.samsung.com ~all asv=8c95d437a5f5281bf0b46412ea6410ff globalsign-domain-verification=9382b64f06fad76d1ebac344380ab28b cisco-ci-domain-verification=37f06378ba0e1526ad9a057438e3f2a1d0888e4e21d4ce75160ac7475679e080 miro-verification=16f39e2d161837f1d97cfb17ff7e81f243c68683 7029addd-cf82-4d9e-9ac6-45cd3e47e467 globalsign-domain-verification=d7cac74e387872153b45a1cf21f819ee docusign=022189ea-ba76-432a-abd7-19343970da7e globalsign-domain-verification=BF9A67D3968C1D5FEC1440B12347B6AF amazonses:GabQpmRJN86a4HQqoLu1IEu/b6hqbMTlQSHol1cVzhA= globalsign-domain-verification=E636433F4A5B2209D29402CE4AE96D29 dtm-domain-verification=sj6QpVm4qndJLuG0vmv2lv2WLlZ3g1EGLq9OItKaBQI google-site-verification=XioIPzfjKziFDv7svS2vFxobJ1j6ApORgnD43-La5jc pardot848313=56b423327c6bbcc73c4888f1e7a74aa35be107baa0d8dbc0d60d3078016cdedb pardot1061362=d72ade8848a288815d8cd7fcdedf8e2ea1ffdf37f2e6199b9c6d2b118b260b11 pardot1061372=cd7a8dc7dac11576e3160df3645c3be60beb48d38262fe75e1b83b6ed4547e2f pardot1061382=ee554f6d1abf83530c2b3bd50be47bc5e417bb833dc9b2686e5c5c384d2e174c pardot1061392=f1c7431aa41d5e18d6f425faa7ee4bef2cc82af55471991546af317ad4988f6f pardot848313=94e68189fc6e698e53ab66f68f9fa66f68b14ab1837bac98f0a5b5b4dd57503d google-site-verification=If15ip-WHY67QHEaM6ka9WKCcxgFHbS1oaXJswpUbHQ smartsheet-site-validation=E2jBYaDqtbMgG1u9Jzz2eQBNGVL2eea- canva-site-verification=Lz0E97jjjyiBnq4nGgrBzg mongodb-site-verification=OK5ChSTjOEnRssN4ZNjB6y7xoqWBSraL google-site-verification=gVlQpmwAi4l7c9YZ6vgGKB google-site-verification=gVlQpmwAi4l7c9YZ6vgGKBrqIjduXkSx7ekuOPsOAlg docker-verification=a98547c5-d702-4b4b-9516-4331ed5171c8 google-site-verification=2Qn3FwdHxOdx-U2EBlX2Aq6OPFHM-JGRpo5fN2vEr88 globalsign-domain-verification=142A59A6E9D02E64F922A9C6893534A2 pardot1061372=4fedddc5665b4f323efd74d4970852e6a46f8df316987974967da26bef35bf24 pardot1061372=7f77a7e9d20bced708628f16f6245665a0b5d0ab840f492e5b8b9d0616ff8bff openai-domain-verification=dv-geyHaAZ2x2iRSG5mPLgCehBU google-gws-recovery-domain-verification=57248779 dtm-domain-verification=5gAZbUOV4mzm7FcNMxN3Z_8Og_vvyqJh5FxCE_rh0zE cisco-ci-domain-verification=4d1fed540ceae17bd020e5d248bb657c382c66454d32a5984edd4871be659cea MS=ms51591264 figma-domain-verification=74d791d52b49cbb05822c432d058f86bb47d2d97aa815d0ca470c6ef74a99003-1742422683 box-domain-verification=b82590942dde67b52e8c41dc0e492a02ade277c5aede0e6de0b3b8de28a0085a asv=bbc7c9d6c4c6acdc2124368f94efe110
TXT	_dmarc.samsung.com	v=DMARC1; p=none; rua=mailto:postmaster@samsung.com; ruf=mailto:postmaster@samsung.com
CAA	samsung.com	—
DS	samsung.com	—

Indicative alignment

Best-practice mapping of public findings to common frameworks. Passive scanning tests public configuration only; it doesn't prove compliance or a violation.

Google & Yahoo sender rules1 observed gaps · 1 unverified

SPF, DKIM and DMARC are required for bulk senders to Gmail and Yahoo; missing them risks rejected or spam-foldered mail.

DMARC — anti-spoofing policy

PCI DSS v4.01 observed gaps

TLS, certificate and browser-header protections relate to PCI DSS v4.0 requirements 4.2 and 6.4 for payment pages.

CSP — protection from script injection

NIS2 / vendor due diligence3 observed gaps

Vendor risk reviews under NIS2/DORA and cyber-insurance questionnaires check these public signals.

DMARC — anti-spoofing policy DNSSEC — signed DNS records CAA — who may issue certificates

SOC 2 / ISO 27001 baseline3 observed gaps

Baseline external hygiene commonly expected in SOC 2 and ISO 27001 audits.

DMARC — anti-spoofing policy CSP — protection from script injection X-Content-Type-Options

Indicative alignment only, based on public configuration. It doesn't establish whether a framework applies to you, and it isn't legal advice, an audit or a certification.

samsung.com

Track your progress

Help someone else check their domain

What to do first

What this grade means

Get the badge

Scan history

AI fix plan

Scans to analyze

Technical detail

Email security

Encryption & certificate

Browser protections

DNS infrastructure

Public DNS records

Is your domain as secure? Scan it free, no sign-up

samsung.com

Track your progress

Help someone else check their domain

What to do first

What this grade means

Get the badge

Scan history

AI fix plan

Scans to analyze

Technical detail

Email security

Encryption & certificate

Browser protections

DNS infrastructure

Public DNS records

Is your domain as secure? Scan it free, no sign-up

Agent access & discovery signals