aws.amazon.com

52/100

Scanned 2026-05-21

Cached result — add ?fresh=1 to force a new scan

Subcheck breakdown

Upgrade DMARC from p=none to p=quarantine or p=reject at _dmarc.aws.amazon.com to block spoofed email
Publish an SPF record on aws.amazon.com to authorise your sending mail servers
Publish a DKIM key at default._domainkey.aws.amazon.com (v=DKIM1; k=rsa; p=…)
Publish MTA-STS: add _mta-sts.aws.amazon.com TXT and host a policy at https://mta-sts.aws.amazon.com/.well-known/mta-sts.txt
Enable DNSSEC on aws.amazon.com — DS records must be published to the com zone by your registrar

Area	Detail
DMARC	v=DMARC1;
SPF	—
DKIM selectors	—
TLS certificate	Ok (149 days remaining) — CN=Amazon RSA 2048 M04,O=Amazon,C=US
WHOIS registrar	—
WHOIS expires	—
Subdomains (90 subdomains scanned, 0 at risk)	90 found
DNSSEC	Unsigned