Is ally.com legit?
This site appears to be very trustworthy. While there are a couple of minor technical points that could be improved, it demonstrates a strong track record and good security posture overall, backed by a long domain history and complete compliance features.
Finance average: 82/100 · based on 48 sites
Checked: April 29, 2026 at 8:25 AM UTC
Is ally.com a scam? Here's what we found.
The site has a valid SSL certificate from a known issuer, uses TLS 1.2, and is clean according to Google Web Risk, indicating a generally secure environment. The number of external scripts is a minor concern that could be optimized.
With a domain age of over 31 years and clear registration details, the identity of this website is well-established and highly credible. This longevity indicates a reputable and trusted entity.
Its high Tranco rank confirms it's a well-known, high-traffic website, and it's clean on DNS blacklists, reinforcing its strong reputation. The lack of a Trustpilot profile is not a significant negative for a business of this type.
The site demonstrates strong transparency with readily available contact information, comprehensive branding, and a robust social media presence across multiple platforms. This helps users understand who they are interacting with.
The presence of both privacy policy and terms of service pages indicates a strong commitment to legal and user data compliance. This is essential for a publicly facing business.
The infrastructure includes important features like a proper sitemap, DMARC for email authentication, and no DNS blacklisting. However, the high number of external scripts could be a small area for improvement in terms of efficiency and potential vulnerability.
Signals Detected
This is a well-known, high-traffic website
No structured data markup found
This business has no Trustpilot presence — not unusual for smaller or newer companies
Excessive number of external scripts — may indicate malicious injection
crt.sh returned status 429
Domain created 1995-04-27T04:00:00Z (31 years, 5 months ago)
Registered through GoDaddy Corporate Domains, LLC
Expires in 363 days
DNSSEC status from WHOIS
Valid certificate, expires in 224 days
Certificate issued by Sectigo Limited
Connection uses TLS 1.2
robots.txt has 8 directives and references a sitemap
Site has custom branding and social media metadata
Web server: AkamaiNetStorage
No threats detected by Google Web Risk
Site maintains a proper sitemap with 217 indexed pages
Resolves to: 198.74.81.46
Mail servers: mxb-00239e02.gslb.pphosted.com., mxa-00239e02.gslb.pphosted.com.
Domain has DMARC email authentication configured
DNS providers: gns7.ally.com., gns6.ally.com., gns5.ally.com., gns8.ally.com.
Not found on any DNS blacklists
Could not query Wayback Machine
Website is live and responding
Website appears to have contact information
Website has both privacy policy and terms of service pages
Website links to multiple social media platforms
Fast page load
Embed This Badge
Stay Safe Online
Good habits to protect yourself, no matter the scan result.
Never reuse passwords across sites.
Add a second layer of security to your accounts.
Always verify unfamiliar stores before entering payment info.