Cybersecurity Rating
by ImmuniWeb® CyberScore™

Hostname	URL	Grade	Tested on
usaa.com	https://www.usaa.com/	A	November 6th, 2026 10:40
www.usaa.com	https://www.usaa.com/	A	November 6th, 2026 10:43
content.usaa.com	https://content.usaa.com/	A	November 6th, 2026 10:43
mobileapps.usaa.com	https://mobileapps.usaa.com/	A	November 6th, 2026 10:43
rs.usaa.com	https://rs.usaa.com/	C	November 6th, 2026 10:44

Show 46 More

Website Privacy Rating | Overview

The total number of subdomains is capped at 50.

Hostname	URL	Grade	Tested on
usaa.com	https://www.usaa.com/	B	November 6th, 2026 10:59
www.usaa.com	https://www.usaa.com/	B	November 6th, 2026 11:00
content.usaa.com	https://content.usaa.com/	A	November 6th, 2026 11:00
mobileapps.usaa.com	https://mobileapps.usaa.com/	B	November 6th, 2026 10:59
rs.usaa.com	https://rs.usaa.com/	A	November 6th, 2026 10:59

Show 46 More

The total number of subdomains is capped at 50.

Hostname	URL	Protocol	Grade	Tested on
usaa.com	https://usaa.com 184.25.135.224:443	HTTPS	A	November 6th, 2026 10:38
www.usaa.com	https://www.usaa.com 184.25.135.224:443	HTTPS	A	November 6th, 2026 10:43
content.usaa.com	https://content.usaa.com 184.25.135.224:443	HTTPS	A	November 6th, 2026 10:42
mobileapps.usaa.com	https://mobileapps.usaa.com 184.25.135.230:443	HTTPS	A	November 6th, 2026 10:43
rs.usaa.com	https://rs.usaa.com 23.221.0.219:443	HTTPS	A	November 6th, 2026 10:43

Show 46 More

Hostname	Grade	Tested on
usaa.com	B	November 6th, 2026 10:44

Email Server Security Report
A total of 2 email servers were analyzed. Open relay was not detected, SMTP enumeration was not detected, a secure authentication was enforced across all tested servers, and PTR records were properly configured. The average response latency was approximately 0.03s.
Email SSL/TLS Encryption Report
SSL/TLS security testing was completed for 1 email server. Server grade is F.
Email Server DNS Security Report
SPF is set with issues, DKIM is set properly, and DMARC is set properly. MTA-STS is not configured for this domain. A and MX DNS records are fully validated.
Email Server Black and Spam Lists Report
No email servers were found on blacklists.

No vibe-coded or AI-created code patterns detected across 39 websites.
No leaks of AI tokens or other AI-related and sensitive data detected on the Dark Web.
No leaks of AI tokens or other AI-related and sensitive data detected across 51 websites.

Hostname	Tested on
usaa.com	November 6th, 2026 10:37

Dark Web Exposure Report
A total of 908 dark web incidents detected, containing 31579 mentions of the domain. 757 out of 908 incidents originate from Compromised Databases. Out of all detected Compromised Credentials, 3331 are considered to be of High risk. Mentions in Leaked Databases represent the most common source of compromised information, accounting for 30337 of the 31579 detected domain mentions on the Dark Web.
Unprotected Cloud Storage Report
A total of 1 bucket detected across 1 cloud storage provider: 1 bucket was detected in Amazon S3.
Phishing Websites Report
11 potential phishing URLs detected. Example hostnames: 45-61-148-254.cprapid.com and bafybeicxjhpwqggiqayifndxjivumitgngvhdn3nl7yti7j33vjkka72o4.ipfs.w3s.link; the full list is available in the detailed report.
Cybersquatting Domains Report
38 potential cybersquatting domains detected. Example domains: uesaa.com, usaa.pl and uswaa.com; additional cybersquatting domains are available in the detailed report.
Typosquatting Domains Report
1 potential typosquatting domain detected. Example domain: uussaa.com.
Fake Accounts in Social Media Report
223 squatted social network accounts detected across 6 social networks. Most affected social networks include YouTube with 92 accounts including @usaa_2027 and @usaach, Reddit with 53 accounts including @usaa2016 and @usaa2019 and GitHub with 43 accounts including @usaaam and @usaaar; the full list is available in the detailed report.

Share this report:

Take Your Security Ratings to the Next Level