Automated public DNS and web checks; results may be incomplete. These are passive observations, not an assessment of the organization.
Executive summary
chase.com
Good shape, with a few gaps worth closing this quarter.
Partial coverage: the score is based on 95% of applicable check weight. 1 unverified check(s) are excluded, not counted as failures.
2026-11-15 18:20 UTC
Useful for your IT provider or a colleague. Anyone with the link can view the report.
Track your progress
Fix the findings, then come back and rescan. Your scan history is saved in this browser so you can see exactly what improved.
Spoofing email from this domain is hard.
Traffic to the site is encrypted and the certificate is valid.
Some browser protections are missing.
The domain's infrastructure works, but recommended hardening is missing.
Help someone else check their domain
Share this public report with a colleague. They can review the evidence and check their own domain.
What to do first
- 1.
Turn on DNS signing for your domain
Signing helps resolvers detect forged answers about your domain.
Who can fix it: Your domain registrar or DNS provider
How to verify after the fix
dig +short DS chase.com
- 2.
Stop browsers from guessing file types
This removes one way a file could be treated as something it is not.
Who can fix it: Your website developer or web host
How to verify after the fix
curl -sIL https://chase.com/ | grep -i "X-Content-Type-Options"
A starting point, not a security guarantee.
What this grade means
- Tested hostname
- chase.com
- Website request
- GET https://chase.com/ → https://www.chase.com/
- Scan time
- 2026-11-15 18:20:04 UTC
- Grading method
- Version 2How grading works
- Unverified or excluded checks
- DKIM — digital signature on email · Not detected (common selectors only)
This is a snapshot of the public configuration checks listed in this report. It does not verify the site's owner, business legitimacy, application security, or absence of vulnerabilities. It is not a security certification.
Get the badge
Show the live grade for chase.com in a README, docs or site footer. The badge links to the public report and refreshes every 24 hours.
Scan shown on this page: 2026-11-15 18:20:04 UTC. The badge may display a cached result for up to 24 hours. Open the linked report to check its scan time.
[](https://getmirror.online/report/chase.com)<a href="https://getmirror.online/report/chase.com"><img src="https://getmirror.online/badge/chase.com.svg" alt="Domain Armor grade"></a>https://getmirror.online/badge/chase.com.svgScan history
AI fix plan
Pick scans from this browser's history. The AI compares them, explains what changed and builds a prioritized, step-by-step plan.
Scans to analyze
0 of 6 selectedThe current scan is always included.
AI-generated from your scan results only. Review each step before applying it; nothing is sent to or changed on the domain.
Technical detail
Click a check to see the public data, a verification command, a safe fix recommendation and documentation sources.
Email security
25/25Encryption & certificate
25/25Browser protections
19/30DNS infrastructure
8/15Public DNS records
| A | chase.com | 146.143.83.57 146.143.141.57 146.143.13.57 |
| AAAA | chase.com | — |
| MX | chase.com | 10 cluster14.us.messagelabs.com 20 cluster14.us.messagelabs.com 30 cluster14.us.messagelabs.com 40 cluster14a.us.messagelabs.com |
| NS | chase.com | ns0119.secondary.cloudflare.com ns05.jpmorganchase.com ns1.jpmorganchase.com ns2.jpmorganchase.com ns0140.secondary.cloudflare.com ns06.jpmorganchase.com |
| TXT | chase.com | smartsheet-site-validation=JdBS3Kn_332V6dI9U0iq0TV3RZZXTUhL DirectFedAuthUrl=https://idauatg2.jpmorganchase.com/adfs/ls/ pendo-domain-verification=1f6e5677-d405-438e-88ba-141766793ce8 docusign=b04ddbec-21ac-4d6b-bb8b-3f1a3bca079f sinch-domain-verification=6848bb42-da6f-49cf-8974-920af9cf1806 onetrust-domain-verification=ccee45576c1e4fbfaa4014725a73344f atlassian-domain-verification=Ua2Fovb97Ak39kxh4koulfhVlpieV1PLhaMkdZpzINDMQGlcvLV+ORgL2QmOryw+ wiz-domain-verification=ccd3ec907fff510311f6a14b2a659fcb83adea2818bb6e78503239d2877e8657? google-site-verification=w00TwyVREI5RpqAT9hqSLZVvZcZi46578G57D1aMGeE wiz-domain-verification=68c6d9fa0c4bdd60150d3df50635cd0fcf4af6af079771d90239d10add2c2967 v=spf1 include:tpo.chase.com exists:%{i}.spf.chase.com exists:%{i}.spf.hc4673-96.iphmx.com exists:%{i}.spf.hc4698-8.iphmx.com -all _m47rp0d9u3ci4ycif1echp310q0yy09 wiz-domain-verification=a0d8d067bcb1cdd44255d0633a31df3ba13c82e30f27c080519b0b85ba734d32 docusign=500adee6-4cca-451d-bcd8-2813346419c8 airtable-verification=1d59ed5062280d21aeef0c14aaf4f950 google-site-verification=PfSAyrffyVUKXLc1Ew8C2IFPWkjufFSsbboFz_24Qt4 00D4J000000FQcn=1TBJ7000000blJn atlassian-domain-verification=PZApk1vJjd7scChzBMQy2d4NEwk4Bt26obCVACc7vWiOBVCOxTOV4/EB9LMexMnl wiz-domain-verification=66aa74155d5e84d10ed4b5a786a66f94063cff3b4c7e11d09fb46f027736dbf0 atlassian-domain-verification\\u003dpD6ozLCGDinP/R+vd5R9hpoPCSOmTFTHfWPK633PXEtELa5KlVDw4w1Pnn02aTdC atlassian-domain-verification=wUjrfh2T73RznZOKmEZfc0mRF92bjC7JyjSgRXg9Yt2e9ZMRZwafUO6GPJaecYOh google-site-verification=iZwZzo1YPl0G29U136Suzn4c1VptcA_LkvvdWOYC6B0 |
| TXT | _dmarc.chase.com | v=DMARC1; p=reject; pct=100; rua=mailto:d@rua.agari.com; ruf=mailto:d@ruf.agari.com; |
| CAA | chase.com | 0 issue "digicert.com" 0 issue "entrust.net" |
| DS | chase.com | — |