HOW.IS
?

How is bankofamerica.com?

Looks fine risk 0/100

Registered 28 years ago, on no blocklists we checked, valid HTTPS, the site answered 200 in 265 ms.

Why

02050100
finecarefulhigh risk
  • ·Nothing in the checks added risk.

Rule-based: domain age, blocklists, TLS. A heuristic, not a guarantee.

How bankofamerica.com looks right now
The home page, rendered by how.is in a sandboxed browser. Nothing on it is clickable here.
Site
200
265 ms · ends at www.bankofamerica.com
HTTPS
105 d
left on a DigiCert Inc certificate
Age
28 years
registered 1998-12-28
Blocklists
0
listings across 4 lists; 1 did not answer

Everything we looked at

DNS records5 record types
A3.173.23.90
3.173.22.90
3.173.21.90
MX10 mxa-0000ec05.gslb.pphosted.com
10 mxb-0000ec05.gslb.pphosted.com
NSb.ns-bac.org
d.ns-bac.info
f.ns-boa.us
a.ns-bac.com
e.ns-boa.biz
g.ns-bac.com
c.ns-bac.net
TXTwebexdomainverification.DPFR=fc6d9245-b5e5-456d-a469-6332595f0a02
00DD50000009T2F=1TBD50000004CCI
00DDc0000005CbI=1TBDc0000004CEs
webexdomainverification.=28c49c72-742e-4204-a733-18e8a8982a47
00DE0000000ZaqE=1TBHt000000XZEJ
docusign=7f619a20-e6e1-47ba-88e2-5ffde1224228
00D30000001H88T=1TBKX000000Gmb7
apple-domain-verification=8NQqHRIawsPLpi0W
00D700000009PLP=1TBKe0000004C9D
00D30000000nW2o=1TBKd000000000B
00D210000002QLf=1TBDl0000008OKR
00D52000000JPHM=1TBDU000000Gma9
docusign=7d338bac-902f-4792-8cdb-89a34b44ccf6
webexdomainverification.D04F=58ac4583-65d7-4b3d-89e2-2657f01be854
B2B8A4C34008BEF0023A22BE8CA6A799
webexdomainverification.EPKA=0bb7fd7a-0b2a-4645-ab25-62a5a06a68f1
00D300000000K1b=1TBKZ0000004CFQ
webexdomainverification.D182=d3bd60b7-b138-488e-9ce4-bb6a965bd46c
00D60000000KTAU=1TBKZ000000001T
webexdomainverification.KK48=150225ca-a113-4206-9228-4e3460b52486
00DDY0000000PuC=1TBDY0000004C9D
00D8I0000016LkC=1TBDa000000000a
00DDk000000E4pS=1TBDk0000008ONA
00D37000000J5Lh=1TBKb000000TN74
00DDU00000081t1=1TBDU000000GmaU
00D36000000rZom=1TBHq0000004C9D
C88C9B78D75886CF03030263D6E5D6AC
apple-domain-verification=_tTrLth1tZlC6XJXF7Ot2qt-U0o_cPfdE1qif1tDlDo
00D30000000nqfl=1TBHt000000CaRH
facebook-domain-verification=vzgeob2q58bgtl7degzq855tbt3nld
00D30000001H1Cv=1TBHt000000000B
00DDn00000122RU=1TBDn0000004C9E
ccisso=4d9729b7-b770-4856-947d-935d1b4dca9c
apple-domain-verification=rELhhF8gjKgBEMuH
webexdomainverification.1TKU2=55bfd798-3032-4b19-9e4d-1a3cdc9f83dd
79HRM45BZQL4W6DODHCJ08ICCEPI4ZZ95OPF1PODC
webexdomainverification.AU51=01da9742-a899-4543-b134-6dba5c7669f0
XP24tQeCoyIoYKFUDBai/TAmSrkfqDi8E276kwIOINKuXcgwMZwhckPM+6x5egH7+IV5OFBRNkdgRIHmbQ4Usw==
00Dd0000000fllf=1TBKh000000Kynr
webexdomainverification.DMQQ=2397072c-14ba-446b-af2b-b7d82b0c3d84
00D1D000000jT9H=1TBDR0000008OIt
00DDL00000D40CM=1TBDL000000001O
webexdomainverification.8BOEU=a4a75bdf-0a9d-419b-bad5-09ed7837a3a4
N73NW9KHOCFO1J30DG9M0U52P3KJYN458U7T7MOAO
00DDn0000014WMF=1TBDn0000000006
00D3K0000008lCp=1TBDc0000008OM2
00D2g0000000ZPI=1TBD1000000003M
00D3000000071D4=1TBKX0000008OLJ
webexdomainverification.=9caf3cdf-4b7a-4806-8346-9a9591002ef3
00D0b000000De84=1TBKW000000GmaA
webexdomainverification.7VRFC=41f26899-9147-46be-927a-64a4921bce12
00D30000001FXpf=1TBHt000000000Q
00D300000000Lsb=1TBHp0000008OIF
00D750000000NEs=1TBDh0000004CB9
webexdomainverification.BV9Q=6a8ae93e-8405-4430-91c6-1095ff8ab83a
apple-domain-verification=d7eRv0GK7kdI6vEs
00D30000001HRSt=1TBKe000000blLi
00D400000007EoN=1TBKY000000fxU2
webexdomainverification.1TKBV=0b486704-ef66-4735-96f0-8b4af777b303
00DHo000007ESQH=1TBHo000000sXtb
onetrust-domain-verification=e788a6ac2ccb43818ec10f692be6c065
00D7g0000005BwN=1TBD70000004CB9
MS=ms26780064
00DDG00000NAncy=1TBDG0000008OKX
00D4C0000008x25=1TBD10000004CCb
_mue2mr9ttx0pb28iu4vju44fyivlze2
v=spf1 ip4:171.161.41.178 ip4:171.159.227.167 ip4:171.161.147.155 include:spf-0000ec15.pphosted.com ~all
00DDE0000045mMg=1TBDE000000CaRH
00DDn0000014WHa=1TBDn000000XZAR
00D46000000aATr=1TBKk0000000007
00D300000005zGi=1TBKe000000oLob
webexdomainverification.KK43=938a1277-bf6a-441d-949c-c22f81ce00e0
CAA{'type': 'CAA', 'issue': 'sectigo.com', 'critical': 0}
{'type': 'CAA', 'issue': 'thaidigitalid.com', 'critical': 0}
{'type': 'CAA', 'issue': 'digicert.com', 'critical': 0}
{'type': 'CAA', 'issue': 'ssl.com', 'critical': 0}
{'type': 'CAA', 'issue': 'pki.goog', 'critical': 0}
{'type': 'CAA', 'issue': 'amazon.com', 'critical': 0}
{'type': 'CAA', 'critical': 0, 'issuevmc': 'digicert.com'}
RegistrationCSC Corporate Domains, Inc.
registrarCSC Corporate Domains, Inc.
registered1998-12-28
expires2026-12-28
last changed2026-06-10
ownerBank of America Corporation
nameserversa.ns-bac.com
b.ns-bac.org
c.ns-bac.net
d.ns-bac.info
e.ns-boa.biz
f.ns-boa.us
g.ns-bac.com
statusclient transfer prohibited
server delete prohibited
server transfer prohibited
server update prohibited
registered 1998-12-28expires 2026-12-28
HTTPS certificate105 days left
validyes
issuerDigiCert Inc
coversbankofamerica.com
protocolTLSv1.3
issued 2026-08-28expires 2027-02-10
DNSSECsecure

Domain is properly signed and cryptographically validated

. → com → bankofamerica.com
Email authenticationgood
SPFpass v=spf1 ip4:171.161.41.178 ip4:171.159.227.167 ip4:171.161.147.155 include:spf-0000ec15.pphosted.com ~all
DMARCpass policy reject
DKIMnone of 1 common selectors

Whether mail claiming to be from this domain can be checked as genuine.

Security scoregrade A · 180/205
Basic Security
20/40missing: DNSSEC Enabled
Record Security
45/45missing: DKIM Presence
Advanced Security
20/25missing: IPv6 Support
Domain Reputation
50/50
Threat Detection
45/45missing: Domain Age Check
Blocklists0 listings · 11 lookups
SURBL MultidomainURIBL MultidomainSpamCop3.173.23.90Barracuda3.173.23.90UCEPROTECT Level 13.173.23.90SpamCop3.173.21.90Barracuda3.173.21.90UCEPROTECT Level 13.173.21.90SpamCop3.173.22.90Barracuda3.173.22.90UCEPROTECT Level 13.173.22.90

Green: clean. Red: listed. Grey: the list did not answer.

Ask it yourself

Agents get this as data. Bought through the API, the checks behind this page cost $0.070: profile $0.025 + trust $0.020 + screenshot $0.020 + site status $0.005.

curl "https://how.is/v1/domain/trust?domain=bankofamerica.com" \ -H "Authorization: Bearer $HOWIS_KEY" # or pay per call in USDC (x402), no key: the 402 tells your agent the price curl -i "https://how.is/v1/domain/profile?domain=bankofamerica.com"

MCP: add https://how.is/mcp to Claude, Codex or Cursor (one-line install) and ask for domain_trust on bankofamerica.com. Reference: /llms.txt.

Watch bankofamerica.com. DNS read at the source every 5 minutes; certificate, blocklists and expiry every 6 hours. You get an email only when something changes.

Watch — $1 / 30 days