Scam Lookup
Automated Website Trust & Risk Intelligence Report
https://scamlookup.net/website/bankofamerica
Generated: Sat, 05 Sep 2026 11:31:27 GMT
Target Website: bankofamerica.com
Overall Trust Score: 84/100 (Likely safe)
bankofamerica.com
Likely safe
Scanned: Sep 5, 11:31 AMTRUST SCORE
84
LIKELY SAFE
Low Risk
84/100
TRUST SCORE
LIKELY SAFE
Low Risk
SAFETY
15/100
15/100
TRANSPARENCY
15/100
15/100
DOMAIN RISK
LowLow Tier
LowRisk
SSL SECURITY
70/100
70/100
PAYMENT RISK
NoNo Risk
NoRisk
VERDICT
Likely safe
Likely safe
AI Security Summary
84/100 — likely safe. Long-established domain (27.7 years old). Most security and infrastructure signals check out. Verdict driven by: no privacy policy found; no terms of service found; no contact page found — worth extra caution before trusting.
No malware/phishing on feedsGood reputationHTTPS enabled
HTTPS & SSL
SecureSecure
C=US, O=DigiCert Inc, CN=DigiCert EV RSA CA G2
Threat Status
Threat FoundThreat Found
Threat intelligence alert
Domain Age
27.7 years27.7 years
Registered 12/28/1998
Reputation
High TrustHigh Trust
Based on 65+ verified signals
IP & Server
3.173.21.903.173.21.90
cloudflare
Email Security
ProtectedProtected
SPF, DMARC, MX active
Performance
100 / 100100 / 100
Fast response time
Redirects
1 Hop1 Hop
Redirect chain analyzed
Top Priority RecommendationCritical
Domain contains brand token(s): bank
Third-party sites that embed a well-known brand name in their domain are frequently used for phishing.
Why it matters
Addressing this signal prevents trust downgrades and potential security risks.
View Glossary GuidePositive Signals
- HTTPS is enforced
- Fast response (143ms)
- Served through Cloudflare
- 3 address record(s) resolved
- 7 authoritative nameservers
- Domain registered 28+ years ago
- Owner information disclosed
- Valid SSL / TLS certificate active
Warnings
- Site returned HTTP 403
- Certificate expires soon (6 days)
- Missing HSTS
- Missing Content Security Policy
- No mobile viewport meta tag
- No privacy policy found
- No terms of service found
- No contact page found
Critical Issues
- Domain contains brand token(s): bank
- Registrar Name
- CSC Corporate Domains, Inc.
- Creation Date
- December 28, 1998 (27.7 years ago)
- Last Updated
- June 10, 2026
- Registry Expiry Date
- December 28, 2026
- WHOIS Privacy Protection
- Publicly Visible
- Domain Status Codes
- client transfer prohibited, server delete prohibited, server transfer prohibited, server update prohibited
ICANN Status Badges
client transfer prohibitedserver delete prohibitedserver transfer prohibitedserver update prohibited
Domain registered 28+ years ago
Long-established domains are far less likely to be disposable scams.
+15
Registered via CSC Corporate Domains, Inc.
Owner information disclosed
The domain publishes registrant contact info — a small positive transparency signal.
+2
Security Header Baseline
Strict-Transport-SecurityMissing
Content-Security-PolicyMissing
X-Frame-OptionsMissing
X-Content-Type-OptionsMissing
Referrer-PolicyMissing
Permissions-PolicyMissing
Recommended Missing Headers
missing: HSTSmissing: Content Security Policymissing: X-Frame-Optionsmissing: X-Content-Type-Optionsmissing: Referrer Policymissing: Permissions Policy
All Response Headers (11)
Missing HSTS
Tells browsers to only use HTTPS for this domain.
-4
Missing Content Security Policy
Restricts which scripts and resources the page can load.
-4
Missing X-Frame-Options
Prevents clickjacking by disallowing framing.
-3
Missing X-Content-Type-Options
Blocks MIME-sniffing browser attacks.
-2
Missing Referrer Policy
Controls what referrer information is sent with requests.
-2
Missing Permissions Policy
Restricts access to powerful browser features (camera, mic, etc.).
-2
- IPv4 Addresses (A)
- 3.173.21.90, 3.173.22.90, 3.173.23.90
- IPv6 Addresses (AAAA)
- None
- Mail Servers (MX)
- mxa-0000ec05.gslb.pphosted.com (Priority: 10), mxb-0000ec05.gslb.pphosted.com (Priority: 10)
- Authoritative Nameservers (NS)
- a.ns-bac.com, b.ns-bac.org, c.ns-bac.net, d.ns-bac.info, e.ns-boa.biz, f.ns-boa.us, g.ns-bac.com
- TXT Records Found
- 69 TXT verification records
A Records (IPv4)
3.173.21.903.173.22.903.173.23.90
TXT Verification Records
MS=ms26780064
00D0b000000De84=1TBKW000000GmaA
00D1D000000jT9H=1TBDR0000008OIt
00D210000002QLf=1TBDl0000008OKR
00D2g0000000ZPI=1TBD1000000003M
00D300000000K1b=1TBKZ0000004CFQ
00D300000000Lsb=1TBHp0000008OIF
00D300000005zGi=1TBKe000000oLob
00D3000000071D4=1TBKX0000008OLJ
00D30000000nW2o=1TBKd000000000B
00D30000000nqfl=1TBHt000000CaRH
00D30000001FXpf=1TBHt000000000Q
00D30000001H1Cv=1TBHt000000000B
00D30000001H88T=1TBKX000000Gmb7
00D30000001HRSt=1TBKe000000blLi
00D36000000rZom=1TBHq0000004C9D
00D37000000J5Lh=1TBKb000000TN74
00D3K0000008lCp=1TBDc0000008OM2
00D400000007EoN=1TBKY000000fxU2
00D46000000aATr=1TBKk0000000007
00D4C0000008x25=1TBD10000004CCb
00D52000000JPHM=1TBDU000000Gma9
00D60000000KTAU=1TBKZ000000001T
00D700000009PLP=1TBKe0000004C9D
00D750000000NEs=1TBDh0000004CB9
00D7g0000005BwN=1TBD70000004CB9
00D8I0000016LkC=1TBDa000000000a
00DD50000009T2F=1TBD50000004CCI
00DDE0000045mMg=1TBDE000000CaRH
00DDG00000NAncy=1TBDG0000008OKX
00DDL00000D40CM=1TBDL000000001O
00DDY0000000PuC=1TBDY0000004C9D
00DDc0000005CbI=1TBDc0000004CEs
00DDk000000E4pS=1TBDk0000008ONA
00DDn00000122RU=1TBDn0000004C9E
00DDn0000014WHa=1TBDn000000XZAR
00DDn0000014WMF=1TBDn0000000006
00DE0000000ZaqE=1TBHt000000XZEJ
00DHo000007ESQH=1TBHo000000sXtb
00Dd0000000fllf=1TBKh000000Kynr
_mue2mr9ttx0pb28iu4vju44fyivlze2
79HRM45BZQL4W6DODHCJ08ICCEPI4ZZ95OPF1PODC
N73NW9KHOCFO1J30DG9M0U52P3KJYN458U7T7MOAO
apple-domain-verification=8NQqHRIawsPLpi0W
apple-domain-verification=d7eRv0GK7kdI6vEs
apple-domain-verification=rELhhF8gjKgBEMuH
ccisso=4d9729b7-b770-4856-947d-935d1b4dca9c
docusign=7d338bac-902f-4792-8cdb-89a34b44ccf6
docusign=7f619a20-e6e1-47ba-88e2-5ffde1224228
facebook-domain-verification=vzgeob2q58bgtl7degzq855tbt3nld
onetrust-domain-verification=e788a6ac2ccb43818ec10f692be6c065
webexdomainverification.=28c49c72-742e-4204-a733-18e8a8982a47
webexdomainverification.=9caf3cdf-4b7a-4806-8346-9a9591002ef3
webexdomainverification.AU51=01da9742-a899-4543-b134-6dba5c7669f0
webexdomainverification.BV9Q=6a8ae93e-8405-4430-91c6-1095ff8ab83a
webexdomainverification.D04F=58ac4583-65d7-4b3d-89e2-2657f01be854
webexdomainverification.D182=d3bd60b7-b138-488e-9ce4-bb6a965bd46c
webexdomainverification.DMQQ=2397072c-14ba-446b-af2b-b7d82b0c3d84
webexdomainverification.DPFR=fc6d9245-b5e5-456d-a469-6332595f0a02
webexdomainverification.EPKA=0bb7fd7a-0b2a-4645-ab25-62a5a06a68f1
webexdomainverification.KK43=938a1277-bf6a-441d-949c-c22f81ce00e0
webexdomainverification.KK48=150225ca-a113-4206-9228-4e3460b52486
webexdomainverification.1TKBV=0b486704-ef66-4735-96f0-8b4af777b303
webexdomainverification.1TKU2=55bfd798-3032-4b19-9e4d-1a3cdc9f83dd
webexdomainverification.7VRFC=41f26899-9147-46be-927a-64a4921bce12
webexdomainverification.8BOEU=a4a75bdf-0a9d-419b-bad5-09ed7837a3a4
apple-domain-verification=_tTrLth1tZlC6XJXF7Ot2qt-U0o_cPfdE1qif1tDlDo
XP24tQeCoyIoYKFUDBai/TAmSrkfqDi8E276kwIOINKuXcgwMZwhckPM+6x5egH7+IV5OFBRNkdgRIHmbQ4Usw==
v=spf1 ip4:171.161.41.178 ip4:171.159.227.167 ip4:171.161.147.155 include:spf-0000ec15.pphosted.com ~all
3 address record(s) resolved
+4
7 authoritative nameservers
+2
- Registrable Domain
- bankofamerica.com
- Registrar Organization
- CSC Corporate Domains, Inc.
- WHOIS Privacy Status
- Public Registration Data
- Registry Status Codes
- client transfer prohibited, server delete prohibited, server transfer prohibited, server update prohibited
- Delegated Authoritative Nameservers
- a.ns-bac.com, b.ns-bac.org, c.ns-bac.net, d.ns-bac.info, e.ns-boa.biz, f.ns-boa.us, g.ns-bac.com
- Registration Lifecycle
- Registered: 1998 → Expires: 2026
Nameservers (NS)
a.ns-bac.comb.ns-bac.orgc.ns-bac.netd.ns-bac.infoe.ns-boa.bizf.ns-boa.usg.ns-bac.com
Domain registered 28+ years ago
Long-established domains are far less likely to be disposable scams.
+15
Registered via CSC Corporate Domains, Inc.
Owner information disclosed
The domain publishes registrant contact info — a small positive transparency signal.
+2
- SPF Record
- v=spf1 ip4:171.161.41.178 ip4:171.159.227.167 ip4:171.161.147.155 include:spf-0000ec15.pphosted.com ~all
- DMARC Policy Mode
- Policy: REJECT
- DMARC Raw Record
- v=DMARC1; p=reject; fo=1; rua=mailto:auth.report_ns@bankofamerica.com; ruf=mailto:bankofamerica@ruf.agari.com
- DKIM Selectors Detected
- None detected
Email Protection Summary: This domain has strong email authentication configured to prevent spammers from sending emails impersonating this brand.
SPF record published
+5
DMARC published (reject)
+6
URLhaus Malware
Clean / Not Listed
PhishStats Feed
Clean / Not Listed
Google Safe Browsing
Not checked
- Root Domain Label
- bankofamerica
- Top-Level Domain (TLD)
- .com (Standard TLD)
- Punycode Obfuscation
- No (Standard ASCII)
- Homoglyph / Lookalike Script
- No mixed scripts
- Brand Match Analysis
- Official Domain (bankofamerica)
- Typosquatting Risk
- Clean
bankofamerica is the real brand's registered domain
The root label matches the brand exactly — this IS the brand's own domain.
+10
No impersonation patterns detected
Domain doesn't look like a typosquat, doesn't embed a well-known brand, and uses ASCII characters.
+8
Detected Technologies by Category
cdn
Cloudflare
Page Metadata & Fingerprint
- HTML Title
- Access Denied
- Meta Description
- —
- Document Language
- en
- Character Encoding
- utf-8
- Viewport Setting
- width=device-width
- Generator Software
- —
1 technologies detected
Cloudflare
No mobile viewport meta tag
The page won't render correctly on phones without a viewport tag.
-3
Missing meta description
-2
Items to Fix & Optimize
Text compression (Brotli/Gzip)
MUCH NEEDEDEnable on server or CDN
Modern image formats (WebP/AVIF/SVG)
OPTIONALConvert heavy images to WebP/AVIF
Protocol
HTTP/2
Binary framing, multiplexed
Compression
NONE
No compression detected
Optimization Signals (From Detectable Headers & Assets)
Image Formats
Legacy / Unchecked
Transfer
Uncompressed
Transport
HTTP/2
These are server-side signals. Actual Core Web Vitals (LCP, INP, CLS) require real-user measurement via PageSpeed Insights.
Detected Asset & Image Formats
WebPAVIFSVGJPEGPNG
- HTTP Response Time
- 143 ms
- Payload Body Size
- 0.4 KB
- Compression Status
- Uncompressed
- Cache Directives
- Standard caching rules
No findings.
AI Content Evaluation
84/100 — likely safe. Long-established domain (27.7 years old). Most security and infrastructure signals check out. Verdict driven by: no privacy policy found; no terms of service found; no contact page found — worth extra caution before trusting.
- Payment Red Flags
- None (No suspicious payment requests)
- High-Pressure Language
- None (No artificial urgency detected)
- Disposable Domain Risk
- No (Established infrastructure)
- Text Scanned Depth
- 295 characters verified
No scam-correlated language found on the home page
No crypto-only / gift-card / wire-only payment demands, and no obvious urgency tactics.
+6
- Primary Web Server
- cloudflare
- CDN / Cloud Provider
- Cloudflare
- Primary IP Address
- 3.173.21.90
- HTTP Status Code
- 403 OK
- Final Landing Destination
- https://www.bankofamerica.com/
- Redirect Hop Count
- 1 hop
Redirect Hop Chain
- 1.https://bankofamerica.com/ → https://www.bankofamerica.com/
Site returned HTTP 403
The server is reachable but did not return a success status.
-6
HTTPS is enforced
All redirects stayed on HTTPS. Traffic is encrypted end-to-end.
+10
Fast response (143ms)
+6
Served through Cloudflare
Sites behind a major CDN benefit from DDoS protection and edge caching.
+4
- Certificate Authority (Issuer)
- C=US, O=DigiCert Inc, CN=DigiCert EV RSA CA G2
- Subject Common Name (CN)
- tommytestvenafiuatsept12.bankofamerica.com
- Validity Period
- 6 days remaining (Expires: 2026-09-11T23:59:59Z)
- Subject Alternative Names (SANs)
- 40 domains protected
- Certificates Logged (CT)
- 100 certs recorded
Subject Alternative Names (Sample)
tommytestvenafiuatsept12.bankofamerica.comfsmgw-uat.alumni-pt1.bankofamerica.comfsmgw-uat.alumni-sit1.bankofamerica.comfsmgw-uat.alumni-sit2.bankofamerica.comfsmgw-uat.bankofamerica.comviewpointe-serverssllle-tx.bankofamerica.comviewpointe-serverssllle-va.bankofamerica.comviewpointe-serverssllle.bankofamerica.comephi-mqipt-tch-2-tx.bankofamerica.comgpx-rs2-lle-clientcert.ecnp.bankofamerica.comsplunk-fiserv-bac.bankofamerica.comvws-htx.bankofamerica.comvws-hva.bankofamerica.comvws.bankofamerica.comtestexcer1erluploadonsettin.bankofamerica.comtestingexternal.bankofamerica.comtestexcert1enrwitoutcsr.bankofamerica.comtestextcert1provwithoutcsr.bankofamerica.comtestexcert1enlnormal.bankofamerica.comtestexcert1normal.bankofamerica.com+20 more
Valid SSL / TLS certificate active
Issued by C=US, O=DigiCert Inc, CN=DigiCert EV RSA CA G2, valid for 6 remaining days.
+10
Certificate expires soon (6 days)
-4
Key Legal & Transparency Pages
privacy PageNot linked
terms PageNot linked
contact PageNot linked
about PageNot linked
refund PageNot linked
shipping PageNot linked
cookies PageNot linked
- Published Phone Numbers
- 1788607887
No privacy policy found
Legally required in most jurisdictions. Its absence is a real red flag.
-4
No terms of service found
Reputable sites usually publish a terms of service.
-4
No contact page found
Reputable sites usually publish a contact page.
-4
No about page found
Reputable sites usually publish a about page.
-3
No refund/return policy found
Reputable sites usually publish a refund/return policy.
-3
No cookie policy found
Reputable sites usually publish a cookie policy.
-2
Phone number published
+2
- Robots.txt Directives
- Not Found
- Sitemaps Declared
- None in robots.txt
- Disallow Rules Count
- 0 rules
No findings.
Export & Share Intelligence
Download the complete official PDF verification report (all sections and technical signals expanded), or export raw JSON telemetry.
Scan Engine Performance
Automated multi-signal inspection pipeline
Signals Analyzed
36
This scan
Sources Checked
18
Live security feeds
Scan Duration
4.99s
Ultra-fast
Last Scan
9/5/2026
Live timestamp
Overall Risk
Low Risk