Automated public DNS and web checks; results may be incomplete. These are passive observations, not an assessment of the organization.

B82/100

Executive summary

ubs.com

Good shape, with a few gaps worth closing this quarter.

Partial coverage: the score is based on 95% of applicable check weight. 1 unverified check(s) are excluded, not counted as failures.

2026-11-15 18:20 UTC

Print report / PDF

Useful for your IT provider or a colleague. Anyone with the link can view the report.

Track your progress

Fix the findings, then come back and rescan. Your scan history is saved in this browser so you can see exactly what improved.

Email security25/25

Good83% coverage

Spoofing email from this domain is hard.

Encryption & certificate25/25

Good

Traffic to the site is encrypted and the certificate is valid.

Browser protections18/30

Needs attention

Some browser protections are missing.

DNS infrastructure10/15

Needs attention

The domain's infrastructure works, but recommended hardening is missing.

Help someone else check their domain

Share this public report with a colleague. They can review the evidence and check their own domain.

Get the report badge

What to do first

1.
Choose which companies may issue certificates for your domain
This reduces the chance of a certificate being issued by a provider you did not choose.
Who can fix it: Your domain registrar or DNS provider
How to verify after the fix
```
dig +short CAA ubs.com
```
2.
Stop browsers from guessing file types
This removes one way a file could be treated as something it is not.
Who can fix it: Your website developer or web host
How to verify after the fix
```
curl -sIL https://ubs.com/ | grep -i "X-Content-Type-Options"
```

A starting point, not a security guarantee.

What this grade means

Tested hostname: ubs.com
Website request: GET https://ubs.com/ → https://www.ubs.com/
Scan time: 2026-11-15 18:20:49 UTC
Grading method: Version 2How grading works
Unverified or excluded checks: DKIM — digital signature on email · Not detected (common selectors only)

This is a snapshot of the public configuration checks listed in this report. It does not verify the site's owner, business legitimacy, application security, or absence of vulnerabilities. It is not a security certification.

Get the badge

Show the live grade for ubs.com in a README, docs or site footer. The badge links to the public report and refreshes every 24 hours.

Scan shown on this page: ⁦2026-11-15 18:20:49 UTC⁩. The badge may display a cached result for up to 24 hours. Open the linked report to check its scan time.

Markdown

[![Domain Armor grade](https://getmirror.online/badge/ubs.com.svg)](https://getmirror.online/report/ubs.com)

HTML

<a href="https://getmirror.online/report/ubs.com"><img src="https://getmirror.online/badge/ubs.com.svg" alt="Domain Armor grade"></a>

Badge URL

https://getmirror.online/badge/ubs.com.svg

Scan history

AI fix plan

Pick scans from this browser's history. The AI compares them, explains what changed and builds a prioritized, step-by-step plan.

Scans to analyze

0 of 6 selected

B82/10011/15/26, 06:20 PMCurrent

The current scan is always included.

AI-generated from your scan results only. Review each step before applying it; nothing is sent to or changed on the domain.

Technical detail

Click a check to see the public data, a verification command, a safe fix recommendation and documentation sources.

Email security

25/25

Encryption & certificate

25/25

Browser protections

18/30

DNS infrastructure

10/15

Public DNS records

A	ubs.com	193.134.111.71
AAAA	ubs.com	—
MX	ubs.com	100 mx11.ubs.open.ch 100 mx12.ubs.open.ch 100 mx13.ubs.open.ch 100 mx14.ubs.open.ch
NS	ubs.com	a1-12.akam.net a2-65.akam.net a3-64.akam.net a5-65.akam.net udns1.ultradns.net udns2.ultradns.net a26-66.akam.net a28-65.akam.net uranus.ubs.com jupiter.ubs.com mercury.ubs.com neptune.ubs.com
TXT	ubs.com	bgetadu5ym MS=ms39873197 KJ6H1XVY7hajkfSHWNfY hm8OdoKtlO0o9QBG37aA 4s5khz9036k867ll945q6kn6y5mkyv47 _7y4r94tnt2yvt229aszxwomvxy2xuwz _9b44sft43tfmhk3hfglurc2ovdes48c _cr1vxump9grchtbnot2hr0rnf5z16pq _dhirnkgx3akw6cgmk42u7my5dflhor8 _ejl2jxvu80ksmugpul1awovttdawo1v _o30vuuxu8k0ikfi2batyro2j67bp63z _oiiqvab07x3sxufy1qt7ss2yhmv1ztd _ppu0eid2nwzsj6krwidig2yb6kvtn30 _svkigecu0s6dfysf5ctuae0f7s0wo2t _z8c2knthhny20oyyevr9fw3l3x46ilr ggnr7mcv6lwxbqwbdx7lzyz8r8ct6xsc t7l899pcs8yyv6w31p484lxsx6n1jrsm zh7vqpnnn0lk5vz4f552sbqzcnhf157g d365mktkey=1nbagcoe2so0gaumloq5fc7ym d365mktkey=51n7sg4jkwasf48ci0vye278m d365mktkey=5dvvu50hqe6dj7brkmo6phu0z apple-domain-verification=G0H6q4lqT0KlyN0k apple-domain-verification=KfJm39EFEOCNsyaq apple-domain-verification=bFt7GE7CPiRSbwO5 apple-domain-verification=lpbETz8oB0ofIS3W MS=4B73E19AEA57ADD637F5852C6AFB8949935007C1 swisssign-check=B4UFJMIk7VMZLE8eoIF8gzGicxg swisssign-check=EbaF8fBolkOjlJhenGQW7uSI5kU swisssign-check=Pdib3kgU87oItvYNoFGjUFtn3_E swisssign-check=QhDFVSYDlTmOHpRBujO1AFpkJTg docusign=7e14a69a-30ab-4f23-8c70-fe6e80cdeb1a docusign=f439e402-869c-43db-ae5c-926cf911137c d365mktkey=2GM9K04tUiQNuAh02amC39DMVtn8OCSczsgSGL0xxxwx d365mktkey=79nXgxHd4ex5R8ZxExLoBdPpQyx4KxV3ZCIX2LsVoiYx d365mktkey=CmMOkvDwh5OHYEli1xAY7a4rJibvGDx4imbxJ3iHqwUx d365mktkey=DEzVUrdyKZYkKawXrsNwamTJ3drEQ0ZA0u5XqxPDoKEx d365mktkey=FFfrlyBhMz22dWAfJJ5qvK5DYRA9RMKtFM0qk2Un2pQx d365mktkey=GMY7FXWULQdeHrDvba3wvhl90HkZGOjoATOJ8d4LIxsx d365mktkey=Jiwkuis7G9poBrM36fsITT8eTqA2dJQcUNa2zYwmb90x d365mktkey=KF0HvyxHf2DfKYqPZIOSaFWkXLXfiMK8wb4UxQ7en4Ax d365mktkey=L28GThTU5WUc1xtV0ED5mKgV8yTlEX1vVo24RH0u9X8x d365mktkey=LetA1xy04n0fmExsfK9fDxozFpL9cGdt57k3cHIdzWAx d365mktkey=Nuu8su9Pr6w3BYnl0P7Ugm16xNoDoxyTOWwUUoZvrCox d365mktkey=OUhdK8xNPcoDbxPntlYN9g7srAy7q0CWOTrjEHHnUYcx d365mktkey=Q1FyejrpjHQ4HAzTZSBeQH9wWKDi8xlDFWbvsTbFU8cx d365mktkey=TV5XrHpTF98oytu0FuUNQVXaxeu6xPpa9ET4J1lZfUYx d365mktkey=TkkNUSPWuMxBXkgAlOAnuuhdelQfTSu8xo8x6kZwFn8x d365mktkey=U5JeBmZkguv0RkQ8X1IZyFKA7Kn2z6vKFGJtXBl3n6sx d365mktkey=UHfHA4egmaRAz6cgY3xYriHaxq7qLS6CrQnwve3xIccx d365mktkey=VOL6xGDn4qSNPZ2KiY4EVaIjIkGuWClCPW7gp0YHdlkx d365mktkey=X43ITGFwNAK4Plz3uKldLSnzxwmCF3KCSwMzSG5CZnUx d365mktkey=XW9bxyxx939QQxnXL4t0KatbcXvvTr7CLF9CKf5eXuMx d365mktkey=Y03e8q2sgB9DZ5OudrrBZ4MyxZXxxP7a6c1l1x4V9TEx d365mktkey=a1x0sXFxyx0qH5YsLVEGx4N6lDInF7pgnyT58Uxol3Ux d365mktkey=bLEn4u896GLeswCkavXU5yt3rv11qRINO8fvIKbV7ywx d365mktkey=d0JJYE7K8DimIvYp4GoZE6ofYt7yhgaiArbPFuloODox d365mktkey=dh0Jjhs66Cxxzexy8sjjqdq0zNVR0pCuOyX5z8ZNX8Ex d365mktkey=eUR8Sphg9PzBUAsfKlrA9Hgi57EpGZd3440txQeqBx0x d365mktkey=ereKo1ne4QVmPyxMEzdBEXYszavbxwbxBh7nHKEu6n8x d365mktkey=h6LeciNo6mMGYWuMaR2eIaTWugNiCkxE9vMvJyXWQmYx d365mktkey=j61up3kMr8XtI1Bu26D748dxxB8qWgZxRjI9hEtFH0Ix d365mktkey=kFsiQTjJMaZil6FZXnQGBEaxrQV3gw70B0Zn5dvVKvQx d365mktkey=l1FxoETCrIpRkXj97qiYpayK6vOfgu4ID6HL2SIHEVwx d365mktkey=m4yTSRiS5WHxu3aqSJkF81jnzFtgsdNoaM7iLQgxniUx d365mktkey=oFAmYcLgwxsdDnGfO6lj8aMZKTfuAamvxZH0PrVgcIAx d365mktkey=r2n03Eix9VkuDKdhoxdggGshPsrsxHcNDSGqiYKAMYox d365mktkey=refYPl3efr1u9ixyXufekmgixevhV3syH7XgS9xXQoox d365mktkey=rw4jd99xixPAVSiIy0HA5nBRfd8Yxx585aIewxIEEOYx d365mktkey=sEJxwFggKtlCIvdaX59KH6hU04LRAfYXfPpSrzkBDUwx d365mktkey=smYqzJoxM1ruFG4WLGBbvpbYwwzkHcJHaxjxTLajPnIx d365mktkey=woKXiWoTFHufqJexPJUZj6UXiM5CCo2QaxR4sxBxGL0x d365mktkey=xIhOleA0LA64SpfpHbufoxK0YpTGCLnaA2nev0xok6kx d365mktkey=xaaM03TgpcbqE175Dskd0l9SxQi3Tbnf1ZSZQfkgAbwx d365mktkey=xbhYh5ibB01yPQenmOZXHRR9ipzQOlo5o9n0vxxqTp4x webexdomainverification.=f290b4d9-66a6-46f6-9532-6340ee994863 webexdomainverification.147ZK=3e7e5ea0-4441-4624-9128-ae6820975a95 webexdomainverification.1QTP6=8463d7a7-8199-44b8-a831-312200bc472a yahoo-verification-key=wH8imQymrkXHp9lMwyqB7PnLMaYv+0JY5LrRyPhUUIk= google-site-verification=zN6-GwLduc1WT1yGiPjN0b2hwQtKOZNgCi0BsWDUWfM JFMyORm9A//mNl8pTP5RWMtcrytoWNxREGsaZliHfVrPNI/Naj7KnImcv/ZkmBoRHIh2tRVx0sgJu6jZYrAeYg== wiz-domain-verification=0471fe866ba173beeeb001660156c20a2ec9d31d69df6c560412041c3d98a7b4 wiz-domain-verification=07709d2a7782474c654c9ea667d5fe776e0c6ad44ff059ba1cea5941149e5127 adobe-idp-site-verification=f632d15f46dbcc29ce5dc20b9e58097de7577ff8760bf3656e56f82b53b34484 cisco-ci-domain-verification=7c2336d99fee585a0e55327309a769eb2936a4f80d3b16177fbf10ceadad03c cisco-ci-domain-verification=f6e192bcb2186b667b594e6ebb7ae7e568b8b2e2332e03173ed0b8c9225ef1c v=spf1 include:spf-a.ubs.com include:spf-b.ubs.com include:spf-hosted.ubs.com include:spf.protection.outlook.com include:_spf.credit-suisse.com -all
TXT	_dmarc.ubs.com	v=DMARC1; p=reject; sp=reject; rua=mailto:dmarc-reports-57574806756964364169@open.ch,mailto:dmarc-reports@ubs.com; ruf=mailto:dmarc-forensics@ubs.com; rf=iodef; pct=100; ri=86400
CAA	ubs.com	—
DS	ubs.com	29962 8 2 edee4831cd08fd79ff08222dcf63739f5885124c1159051a2ead60453af4af63

Fix priorities

Sorted by risk: severity first, confirmed issues before hardening gaps, then effort and score impact.

1LowCAA — who may issue certificatesHardening gap+5
2LowX-Content-Type-OptionsHardening gap+4
3LowReferrer-PolicyHardening gap+3
4LowPermissions-PolicyHardening gap+2
5LowCSP — protection from script injectionHardening gap+3

To verify

Couldn't be confirmed from public data, so excluded from the score. Checking them clarifies your posture; it doesn't guarantee a score change.

DKIM — digital signature on email

Indicative alignment

Best-practice mapping of public findings to common frameworks. Passive scanning tests public configuration only; it doesn't prove compliance or a violation.

Google & Yahoo sender rulesIncomplete evidence · 1 unverified
SPF, DKIM and DMARC are required for bulk senders to Gmail and Yahoo; missing them risks rejected or spam-foldered mail.
PCI DSS v4.01 observed gaps
TLS, certificate and browser-header protections relate to PCI DSS v4.0 requirements 4.2 and 6.4 for payment pages.
CSP — protection from script injection
NIS2 / vendor due diligence1 observed gaps
Vendor risk reviews under NIS2/DORA and cyber-insurance questionnaires check these public signals.
CAA — who may issue certificates
SOC 2 / ISO 27001 baseline2 observed gaps
Baseline external hygiene commonly expected in SOC 2 and ISO 27001 audits.
CSP — protection from script injection X-Content-Type-Options

Indicative alignment only, based on public configuration. It doesn't establish whether a framework applies to you, and it isn't legal advice, an audit or a certification.

Head-to-head vs competitor

How do you stack up against competitors?

The check reads public data only and makes no changes to the domain. Recommendations are intended for the domain owner.

Is your domain as secure? Scan it free, no sign-up

All pre-scanned domains

ubs.com

Good shape, with a few gaps worth closing this quarter.

Partial coverage: the score is based on 95% of applicable check weight. 1 unverified check(s) are excluded, not counted as failures.

2026-11-15 18:20 UTC

Useful for your IT provider or a colleague. Anyone with the link can view the report.

What to do first

Choose which companies may issue certificates for your domain

This reduces the chance of a certificate being issued by a provider you did not choose.

Who can fix it: Your domain registrar or DNS provider

How to verify after the fix

dig +short CAA ubs.com

Stop browsers from guessing file types

This removes one way a file could be treated as something it is not.

Who can fix it: Your website developer or web host

How to verify after the fix

curl -sIL https://ubs.com/ | grep -i "X-Content-Type-Options"

What this grade means

Tested hostname

ubs.com

Website request

GET https://ubs.com/ → https://www.ubs.com/

Scan time

2026-11-15 18:20:49 UTC

Grading method

Version 2How grading works

Unverified or excluded checks

DKIM — digital signature on email · Not detected (common selectors only)

Technical detail

Click a check to see the public data, a verification command, a safe fix recommendation and documentation sources.

Email security

25/25

Encryption & certificate

25/25

Browser protections

18/30

DNS infrastructure

10/15

Public DNS records

A	ubs.com	193.134.111.71
AAAA	ubs.com	—
MX	ubs.com	100 mx11.ubs.open.ch 100 mx12.ubs.open.ch 100 mx13.ubs.open.ch 100 mx14.ubs.open.ch
NS	ubs.com	a1-12.akam.net a2-65.akam.net a3-64.akam.net a5-65.akam.net udns1.ultradns.net udns2.ultradns.net a26-66.akam.net a28-65.akam.net uranus.ubs.com jupiter.ubs.com mercury.ubs.com neptune.ubs.com
TXT	ubs.com	bgetadu5ym MS=ms39873197 KJ6H1XVY7hajkfSHWNfY hm8OdoKtlO0o9QBG37aA 4s5khz9036k867ll945q6kn6y5mkyv47 _7y4r94tnt2yvt229aszxwomvxy2xuwz _9b44sft43tfmhk3hfglurc2ovdes48c _cr1vxump9grchtbnot2hr0rnf5z16pq _dhirnkgx3akw6cgmk42u7my5dflhor8 _ejl2jxvu80ksmugpul1awovttdawo1v _o30vuuxu8k0ikfi2batyro2j67bp63z _oiiqvab07x3sxufy1qt7ss2yhmv1ztd _ppu0eid2nwzsj6krwidig2yb6kvtn30 _svkigecu0s6dfysf5ctuae0f7s0wo2t _z8c2knthhny20oyyevr9fw3l3x46ilr ggnr7mcv6lwxbqwbdx7lzyz8r8ct6xsc t7l899pcs8yyv6w31p484lxsx6n1jrsm zh7vqpnnn0lk5vz4f552sbqzcnhf157g d365mktkey=1nbagcoe2so0gaumloq5fc7ym d365mktkey=51n7sg4jkwasf48ci0vye278m d365mktkey=5dvvu50hqe6dj7brkmo6phu0z apple-domain-verification=G0H6q4lqT0KlyN0k apple-domain-verification=KfJm39EFEOCNsyaq apple-domain-verification=bFt7GE7CPiRSbwO5 apple-domain-verification=lpbETz8oB0ofIS3W MS=4B73E19AEA57ADD637F5852C6AFB8949935007C1 swisssign-check=B4UFJMIk7VMZLE8eoIF8gzGicxg swisssign-check=EbaF8fBolkOjlJhenGQW7uSI5kU swisssign-check=Pdib3kgU87oItvYNoFGjUFtn3_E swisssign-check=QhDFVSYDlTmOHpRBujO1AFpkJTg docusign=7e14a69a-30ab-4f23-8c70-fe6e80cdeb1a docusign=f439e402-869c-43db-ae5c-926cf911137c d365mktkey=2GM9K04tUiQNuAh02amC39DMVtn8OCSczsgSGL0xxxwx d365mktkey=79nXgxHd4ex5R8ZxExLoBdPpQyx4KxV3ZCIX2LsVoiYx d365mktkey=CmMOkvDwh5OHYEli1xAY7a4rJibvGDx4imbxJ3iHqwUx d365mktkey=DEzVUrdyKZYkKawXrsNwamTJ3drEQ0ZA0u5XqxPDoKEx d365mktkey=FFfrlyBhMz22dWAfJJ5qvK5DYRA9RMKtFM0qk2Un2pQx d365mktkey=GMY7FXWULQdeHrDvba3wvhl90HkZGOjoATOJ8d4LIxsx d365mktkey=Jiwkuis7G9poBrM36fsITT8eTqA2dJQcUNa2zYwmb90x d365mktkey=KF0HvyxHf2DfKYqPZIOSaFWkXLXfiMK8wb4UxQ7en4Ax d365mktkey=L28GThTU5WUc1xtV0ED5mKgV8yTlEX1vVo24RH0u9X8x d365mktkey=LetA1xy04n0fmExsfK9fDxozFpL9cGdt57k3cHIdzWAx d365mktkey=Nuu8su9Pr6w3BYnl0P7Ugm16xNoDoxyTOWwUUoZvrCox d365mktkey=OUhdK8xNPcoDbxPntlYN9g7srAy7q0CWOTrjEHHnUYcx d365mktkey=Q1FyejrpjHQ4HAzTZSBeQH9wWKDi8xlDFWbvsTbFU8cx d365mktkey=TV5XrHpTF98oytu0FuUNQVXaxeu6xPpa9ET4J1lZfUYx d365mktkey=TkkNUSPWuMxBXkgAlOAnuuhdelQfTSu8xo8x6kZwFn8x d365mktkey=U5JeBmZkguv0RkQ8X1IZyFKA7Kn2z6vKFGJtXBl3n6sx d365mktkey=UHfHA4egmaRAz6cgY3xYriHaxq7qLS6CrQnwve3xIccx d365mktkey=VOL6xGDn4qSNPZ2KiY4EVaIjIkGuWClCPW7gp0YHdlkx d365mktkey=X43ITGFwNAK4Plz3uKldLSnzxwmCF3KCSwMzSG5CZnUx d365mktkey=XW9bxyxx939QQxnXL4t0KatbcXvvTr7CLF9CKf5eXuMx d365mktkey=Y03e8q2sgB9DZ5OudrrBZ4MyxZXxxP7a6c1l1x4V9TEx d365mktkey=a1x0sXFxyx0qH5YsLVEGx4N6lDInF7pgnyT58Uxol3Ux d365mktkey=bLEn4u896GLeswCkavXU5yt3rv11qRINO8fvIKbV7ywx d365mktkey=d0JJYE7K8DimIvYp4GoZE6ofYt7yhgaiArbPFuloODox d365mktkey=dh0Jjhs66Cxxzexy8sjjqdq0zNVR0pCuOyX5z8ZNX8Ex d365mktkey=eUR8Sphg9PzBUAsfKlrA9Hgi57EpGZd3440txQeqBx0x d365mktkey=ereKo1ne4QVmPyxMEzdBEXYszavbxwbxBh7nHKEu6n8x d365mktkey=h6LeciNo6mMGYWuMaR2eIaTWugNiCkxE9vMvJyXWQmYx d365mktkey=j61up3kMr8XtI1Bu26D748dxxB8qWgZxRjI9hEtFH0Ix d365mktkey=kFsiQTjJMaZil6FZXnQGBEaxrQV3gw70B0Zn5dvVKvQx d365mktkey=l1FxoETCrIpRkXj97qiYpayK6vOfgu4ID6HL2SIHEVwx d365mktkey=m4yTSRiS5WHxu3aqSJkF81jnzFtgsdNoaM7iLQgxniUx d365mktkey=oFAmYcLgwxsdDnGfO6lj8aMZKTfuAamvxZH0PrVgcIAx d365mktkey=r2n03Eix9VkuDKdhoxdggGshPsrsxHcNDSGqiYKAMYox d365mktkey=refYPl3efr1u9ixyXufekmgixevhV3syH7XgS9xXQoox d365mktkey=rw4jd99xixPAVSiIy0HA5nBRfd8Yxx585aIewxIEEOYx d365mktkey=sEJxwFggKtlCIvdaX59KH6hU04LRAfYXfPpSrzkBDUwx d365mktkey=smYqzJoxM1ruFG4WLGBbvpbYwwzkHcJHaxjxTLajPnIx d365mktkey=woKXiWoTFHufqJexPJUZj6UXiM5CCo2QaxR4sxBxGL0x d365mktkey=xIhOleA0LA64SpfpHbufoxK0YpTGCLnaA2nev0xok6kx d365mktkey=xaaM03TgpcbqE175Dskd0l9SxQi3Tbnf1ZSZQfkgAbwx d365mktkey=xbhYh5ibB01yPQenmOZXHRR9ipzQOlo5o9n0vxxqTp4x webexdomainverification.=f290b4d9-66a6-46f6-9532-6340ee994863 webexdomainverification.147ZK=3e7e5ea0-4441-4624-9128-ae6820975a95 webexdomainverification.1QTP6=8463d7a7-8199-44b8-a831-312200bc472a yahoo-verification-key=wH8imQymrkXHp9lMwyqB7PnLMaYv+0JY5LrRyPhUUIk= google-site-verification=zN6-GwLduc1WT1yGiPjN0b2hwQtKOZNgCi0BsWDUWfM JFMyORm9A//mNl8pTP5RWMtcrytoWNxREGsaZliHfVrPNI/Naj7KnImcv/ZkmBoRHIh2tRVx0sgJu6jZYrAeYg== wiz-domain-verification=0471fe866ba173beeeb001660156c20a2ec9d31d69df6c560412041c3d98a7b4 wiz-domain-verification=07709d2a7782474c654c9ea667d5fe776e0c6ad44ff059ba1cea5941149e5127 adobe-idp-site-verification=f632d15f46dbcc29ce5dc20b9e58097de7577ff8760bf3656e56f82b53b34484 cisco-ci-domain-verification=7c2336d99fee585a0e55327309a769eb2936a4f80d3b16177fbf10ceadad03c cisco-ci-domain-verification=f6e192bcb2186b667b594e6ebb7ae7e568b8b2e2332e03173ed0b8c9225ef1c v=spf1 include:spf-a.ubs.com include:spf-b.ubs.com include:spf-hosted.ubs.com include:spf.protection.outlook.com include:_spf.credit-suisse.com -all
TXT	_dmarc.ubs.com	v=DMARC1; p=reject; sp=reject; rua=mailto:dmarc-reports-57574806756964364169@open.ch,mailto:dmarc-reports@ubs.com; ruf=mailto:dmarc-forensics@ubs.com; rf=iodef; pct=100; ri=86400
CAA	ubs.com	—
DS	ubs.com	29962 8 2 edee4831cd08fd79ff08222dcf63739f5885124c1159051a2ead60453af4af63

Indicative alignment

Best-practice mapping of public findings to common frameworks. Passive scanning tests public configuration only; it doesn't prove compliance or a violation.

Google & Yahoo sender rulesIncomplete evidence · 1 unverified

SPF, DKIM and DMARC are required for bulk senders to Gmail and Yahoo; missing them risks rejected or spam-foldered mail.

PCI DSS v4.01 observed gaps

TLS, certificate and browser-header protections relate to PCI DSS v4.0 requirements 4.2 and 6.4 for payment pages.

CSP — protection from script injection

NIS2 / vendor due diligence1 observed gaps

Vendor risk reviews under NIS2/DORA and cyber-insurance questionnaires check these public signals.

CAA — who may issue certificates

SOC 2 / ISO 27001 baseline2 observed gaps

Baseline external hygiene commonly expected in SOC 2 and ISO 27001 audits.

CSP — protection from script injection X-Content-Type-Options

Indicative alignment only, based on public configuration. It doesn't establish whether a framework applies to you, and it isn't legal advice, an audit or a certification.

ubs.com

Track your progress

Help someone else check their domain

What to do first

What this grade means

Get the badge

Scan history

AI fix plan

Scans to analyze

Technical detail

Email security

Encryption & certificate

Browser protections

DNS infrastructure

Public DNS records

Is your domain as secure? Scan it free, no sign-up

ubs.com

Track your progress

Help someone else check their domain

What to do first

What this grade means

Get the badge

Scan history

AI fix plan

Scans to analyze

Technical detail

Email security

Encryption & certificate

Browser protections

DNS infrastructure

Public DNS records

Is your domain as secure? Scan it free, no sign-up

Agent access & discovery signals