No Security Risks Detected
This domain appears to be safe and secure
100%
Score
Disclaimer: This assessment is based on automated analysis of publicly available information. Results are for informational purposes only. For critical applications, consult security professionals.
Scan Information
Last checked:July 17, 2025 16:00:18
Target URL:https://new.expensify.com/r/734373011119827
Scan Complete
Refresh page after 10 minutes
for updated results
Page Information
Target URL
https://new.expensify.com/r/734373011119827
Page Title
New Expensify
Site FaviconStatus
Active
Host Information
Domain
new.expensify.com
Server
cloudflare
Country
United States
IP Address
104.17.242.118
ASN Information
13335
CLOUDFLARENET
Technologies
Amazon Web Services
PaaS
Onfido
Security
HSTS
Security
Google Tag Manager
Tag managers
Google Analytics
Analytics
Cloudflare
CDN
+1 more technologies detected
SSL Certificate
HTTPS Enabled
Secure
Certificate Issuer
49m328 Gateway Proxy BISO MITM CA
Valid From
2025-07-14 02:31:34
Valid Until
2025-08-13 02:32:04
Subject Name
new.expensify.com
Performance Statistics
68
Total Requests
8
Domains
8
IP Addresses
6.36 MB
Transfer Size
Content Size16.63 MB
HTTP Headers
cache-control
public, max-age=86400
cf-cache-status
MISS
cf-ray
960af3ceac08a8c5-MRS
cf-team
28bab6b16e0000a0cc6e090400000001
content-encoding
gzip
content-security-policy
default-src 'self' https://assets.onfido.com; script-src 'self' 'nonce-MDU2MDdiMDRjMD/MDY0MDZjMGRiMDUwMDlkMGI0MDc3' 'unsafe-eval' https://polyfill.io https://cdn.plaid.com https://www.woopra.com https://assets.onfido.com https://sdk.onfido.com https://sentry.io https://*.sardine.ai/ https://appleid.cdn-apple.com https://googletagmanager.com https://*.googletagmanager.com https://tagmanager.google.com https://web-sdk.smartlook.com https://edge.fullstory.com https://rs.fullstory.com https://api.mapbox.com https://api.openai.com https://*.convertexperiments.com https://accounts.google.com/gsi/client; connect-src 'self' https://*.pusher.com wss://*.pusher.com https://*.pusherapp.com https://secure.expensify.com https://www.expensify.com https://accounts.google.com/gsi/ wss://sync.onfido.com https://telephony.onfido.com blob: *.onfido.com wss://*.onfido.com https://www.woopra.com https://sentry.io https://*.tiles.mapbox.com https://api.mapbox.com https://api.openai.com https://*.googleusercontent.com https://*.smartlook.cloud https://events.mapbox.com https://edge.fullstory.com https://rs.fullstory.com https://*.googleapis.com https://*.convertexperiments.com https://google-analytics.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://googletagmanager.com https://*.googletagmanager.com https://*.doubleclick.net https://www.google.com/measurement/ data:; img-src * blob: data: https://rs.fullstory.com https://googletagmanager.com https://*.googletagmanager.com https://google-analytics.com https://*.google-analytics.com https://ssl.gstatic.com https://www.gstatic.com; style-src 'self' 'unsafe-inline' https://assets.onfido.com https://sdk.onfido.com https://accounts.google.com/gsi/style https://googletagmanager.com https://tagmanager.google.com https://fonts.googleapis.com; font-src data: https://new.expensify.com https://www.expensify.com https://fonts.gstatic.com; frame-src 'self' https://cdn.plaid.com https://www.expensify.com https://secure.expensify.com https://sdk.onfido.com https://*.sardine.ai/ https://accounts.google.com/gsi/ https://td.doubleclick.net https://app.storylane.io https://expensify.navattic.com new-expensify://new.expensify.com https://hooks.stripe.com; worker-src 'self' blob:; child-src 'self' blob:; media-src blob: https://www.expensify.com https://d2k5nsl2zxldvw.cloudfront.net https://assets.onfido.com;
content-type
text/html
date
Thu, 17 Jul 2025 16:00:28 GMT
document-policy
js-profiling
expires
Fri, 18 Jul 2025 16:00:28 GMT
last-modified
Wed, 16 Jul 2025 19:41:54 GMT
referrer-policy
origin-when-cross-origin
server
cloudflare
server-timing
cfReqDur;dur=2150.866
strict-transport-security
max-age=31536000; includeSubDomains; preload
vary
Accept-Encoding
via
1.1 12367a410139d77ee70e1792bc15b548.cloudfront.net (CloudFront)
x-amz-cf-id
TKLi-iV5W-YmH_YkK-KkCvPTrI3rgikklqE61Hc6z_htarWy8XiEGg==
x-amz-cf-pop
CDG52-P3
x-amz-server-side-encryption
AES256
x-amz-version-id
T1SaWu9cESJlIZwYzbp7blWQAO1dT.ai
x-cache
Error from cloudfront
x-content-type-options
nosniff
x-frame-options
SAMEORIGIN
24 headers detected
Technology Stack Analysis
Amazon Web Services
PaaS
Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.
Onfido
SecurityAuthentication
Onfido is a technology company that helps businesses verify people's identities using a photo-based identity document, a selfie and artificial intelligence algorithms.
HSTS
Security
HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
Google Tag Manager
Tag managers
Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.
Google Analytics
Analytics
Google Analytics is a free web analytics service that tracks and reports website traffic.
Cloudflare
CDN
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
Amazon CloudFront
CDN
Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.
Website Cookies 8
cf_clearance
.expensify.com
HttpOnly Secure None
Value
M.WwghWHoLeRwJ.pG6DYirjREI86mJZM1xxZ3ELNNAo-1752768051-1.2.1.1-0p5H6LexvhgGmpM0CHNe_R5Cdk_HRqqfrZhOR4W.Ex_LuuxcceFIOJ3zPXHpjm9bYHmxuvwjxD35YeQanEwJXf6FNDcldCzT7Ga6OeIzgnvPRa8b0g0DtKmXoR2gUyS4VSVLsEFmesL8BhkjGsR2cFUkCfBWcCmnYRUXmpV9QEdwG6nJSIr6TaKvBSfPeRxaU0uJp6JiHkPo6yuuNOUy.GZzSl87l6v3ycu1z.iZN9Q
Expires:7/17/2026
_ga_6GG5PB0CBH
.expensify.com
Value
GS2.1.s1752768048$o1$g0$t1752768048$j60$l0$h0
Expires:8/21/2026
__cf_bm
.expensify.com
HttpOnly Secure None
Value
SLjRzpGcjt63_StWUgQmmYmu2RuZjFrbgzr6oBurq70-1752768028-1.0.1.1-Dfhq77CbIV0xSAgSaVhGPI3DtK54CzPvjXXqdbIfs7KJ2XPVMstEs5bC3GDf2Zt.SWCCy848bUkhRutN5vlsLxlbkq0Vph868BKMbpVRZ9I
Expires:7/17/2025
_conv_v
.expensify.com
Lax
Value
vi%3A1*sc%3A1*cs%3A1752768036*fs%3A1752768036*pv%3A1*exp%3A%7B%7D*seg%3A%7B%7D
Expires:1/16/2026
_conv_s
.expensify.com
Lax
Value
sh%3A1752768036436-0.4182240751899087*si%3A1*pv%3A1
Expires:7/17/2025
_ga
.expensify.com
Value
GA1.1.1852257954.1752768048
Expires:8/21/2026
_ga_6BR2QJRCCD
.expensify.com
Value
GS2.1.s1752768047$o1$g0$t1752768047$j60$l0$h0
Expires:8/21/2026
_cfuvid
.expensify.com
HttpOnly Secure None
Value
hKh3CocDwMeHrR7bp.hma7ZDivhQ1O7k_7zYOT7oGZo-1752768028964-0.0.1.1-604800000
Expires:Session
External Links 0
Requested Domains 8
cdn-4.convertexperiments.com
Unknown Type
No category information available
firebaseinstallations.googleapis.com
Unknown Type
No category information available
new.expensify.com
Subdomain
No category information available
region1.analytics.google.com
Unknown Type
No category information available
stats.g.doubleclick.net
Unknown Type
No category information available
www.expensify.com
Unknown Type
No category information available
www.google.fr
Unknown Type
No category information available
www.googletagmanager.com
Unknown Type
No category information available