← Check another domain

bankofamerica.com

80/100

B

Scanned 2026-05-12

Cached result — add ?fresh=1 to force a new scan

Subcheck breakdown

Check	Status	Score
DMARC policy	reject	25/25
SPF record	ok	10/10
DKIM selector	missing	0/10
TLS certificate	ok	20/20
WHOIS integrity	ok	10/10
Subdomain takeover	ct logs busy	10/15
MTA-STS / TLSRPT	missing	0/5
DNSSEC	signed	5/5

Recommendations

Publish a DKIM key at default._domainkey.bankofamerica.com (v=DKIM1; k=rsa; p=…)
Publish MTA-STS: add _mta-sts.bankofamerica.com TXT and host a policy at https://mta-sts.bankofamerica.com/.well-known/mta-sts.txt

Details

Area	Detail
DMARC	v=DMARC1; p=reject; fo=1; rua=mailto:auth.report_ns@bankofamerica.com; ruf=mailto:bankofamerica@ruf.agari.com
SPF	v=spf1 ip4:171.161.41.178 ip4:171.159.227.167 ip4:171.161.147.155 include:spf-0000ec15.pphosted.com ~all
DKIM selectors	—
TLS certificate	Ok (126 days remaining) — CN=DigiCert EV RSA CA G2,O=DigiCert Inc,C=US
WHOIS registrar	CSC Corporate Domains, Inc.
WHOIS expires	2026-12-28T05:00:00Z
Subdomains	CT logs temporarily unavailable — retry shortly
DNSSEC	Signed