Link Check results for www.penfed.org

No Security Risks Detected

This domain appears to be safe and secure

100%

Score

Disclaimer: This assessment is based on automated analysis of publicly available information. Results are for informational purposes only. For critical applications, consult security professionals.

Scan Information

Last checked:December 18, 2025 19:49:12

Target URL:https://www.penfed.org/

Scan Complete

Refresh page after 10 minutes
for updated results

Page Information

Target URL

https://www.penfed.org/

Page Title

PenFed Credit Union | Checking, Savings, Auto, Credit Cards, Mortgage,

Site Favicon

Status

Active

Host Information

Domain

www.penfed.org

Server

N/A

Country

United States

IP Address

23.46.216.199

ASN Information

20940

AKAMAI-ASN1

Technologies

Adobe Experience Manager

CMS

Java

Programming languages

Microsoft Advertising

Advertising

jQuery

JavaScript libraries

HSTS

Security

Google Tag Manager

Tag managers

+4 more technologies detected

SSL Certificate

HTTPS Enabled

Secure

Certificate Issuer

DigiCert Global G2 TLS RSA SHA256 2020 CA1

Valid From

2025-10-07 00:00:00

Valid Until

2026-11-03 23:59:59

Subject Name

www.penfed.org

Performance Statistics

146

Total Requests

Domains

IP Addresses

3.26 MB

Transfer Size

Content Size8.23 MB

HTTP Headers

accept-ranges

bytes

cache-control

max-age=300

content-encoding

gzip

content-length

22684

content-security-policy

default-src 'self' data: gap: blob: http://*.penfed.com http://*.penfed.org https://*.penfed.org https://*.googletagmanager.com https://maps.googleapis.com https://maps.gstatic.com https://*.gstatic.com https://*.googleapis.com https://*.google.com https://*.adobe.com https://*.adobedtm.com https://*.akamaihd.net https://fonts.gstatic.com https://*.wistia.com https://*.sundaysky.com https://*.oncehub.com p11.techlab-cdn.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: gap: blob: https://*.penfed.org https://*.oncehub.com https://*.feathr.co https://feathr.co https://bigidcmp.cloud https://*.bigidcmp.cloud https://*.pixel.ad https://*.invocacdn.com https://*.invoca.net https://*.geoplugin.net https://cdn.ampproject.org https://*.kampyle.com https://*.yahooapis.com http://jsonip.com https://jsonip.com https://*.adobe.com https://pentagonfcu.demdex.net https://*.pfcuhq.penfed.ads https://*.vimeocdn.com https://*.velocify.com https://*.cloudfront.net https://*.leadid.com https://*.lidstatic.com https://*.criteo.com https://*.facebook.com https://*.adobedtm.com https://www.w3.org https://www.youtube.com https://fg8vvsvnieiv3ej16jby.litix.io https://embedwistia-a.akamaihd.net https://static.criteo.net https://connect.facebook.net https://dpm.demdex.net https://*.everesttech.net https://admin.americasaves.org https://*.wistia.com https://*.vimeo.com https://penfed.locatorsearch.net https://bat.bing.com https://*.googleapis.com https://s.go-mpulse.net https://seal.websecurity.norton.com https://www.google-analytics.com https://www.googletagmanager.com https://www.everestjs.net https://*.medallia.com https://*.decibelinsight.net https://*.decibelinsight.com https://monstat.com https://stats.g.doubleclick.net https://www.google.com https://nebula-cdn.kampyle.com https://udc-neb.kampyle.com https://stats.g.doubleclick.net https://trkn.us https://*.googleusercontent.com https://mobilebanking.penfed.org/atm/locations https://*.gstatic.com https://iphone.branchmap.com https://statse.webtrendslive.com https://*.atomz.com https://*.sundaysky.com https://*.sundaysky-sandbox.com https://analytics.google.com https://*.google.com https://www.googleadservices.com https://googleads.g.doubleclick.net p11.techlab-cdn.com; style-src 'self' 'unsafe-inline' data: gap: blob: https://*.penfed.org https://*.oncehub.com https://bigidcmp.cloud https://*.bigidcmp.cloud https://monstat.com https://fonts.googleapis.com https://*.adobe.com https://*.adobedtm.com https://*.kampyle.com https://*.vimeocdn.com https://*.wistia.com https://*.vimeo.com https://penfed.locatorsearch.net https://*.medallia.com https://*.atomz.com https://*.sundaysky.com https://*.sundaysky-sandbox.com https://analytics.google.com https://*.google.com; connect-src 'self' https://*.penfed.org https://bigidcmp.cloud https://*.bigidcmp.cloud https://*.feathr.co https://feathr.co https://*.oncehub.com https://maps.googleapis.com https://maps.gstatic.com https://*.gstatic.com https://*.googleapis.com https://monstat.com https://*.criteo.com https://*.go-mpulse.net https://fonts.googleapis.com https://*.adobe.com https://*.adobedtm.com https://*.medallia.com https://*.litix.io https://*.geoplugin.net https://*.kampyle.com https://www.google-analytics.com https://analytics.google.com https://*.google.com https://stats.g.doubleclick.net https://*.akstat.io https://penfed.locatorsearch.net https://*.youtube.com https://dpm.demdex.net https://admin.americasaves.org https://*.wistia.com https://*.vimeo.com https://query.yahooapis.com wss://*.decibelinsight.net https://*.decibelinsight.net wss://*.decibelinsight.com https://*.decibelinsight.com https://*.akamaihd.net https://*.bing.com https://*.leadid.com https://*.everesttech.net https://*.fls.doubleclick.net https://up.pixel.ad https://*.sundaysky.com https://*.sundaysky-sandbox.com https://*.invocacdn.com https://*.invoca.net https://*.facebook.com p11.techlab-cdn.com; img-src 'self' 'unsafe-inline' data: https://*.penfed.org https://*.oncehub.com https://*.bigidcmp.cloud https://maps.googleapis.com https://maps.gstatic.com https://*.gstatic.com https://*.googleapis.com https://monstat.com https://*.akamaihd.net https://*.demdex.net https://*.everesttech.net https://*.medallia.com https://*.kampyle.com https://udc-neb.kampyle.com https://*.wistia.com https://*.facebook.com https://*.google.com https://insight.adsrvr.org https://trkn.us https://*.norton.com https://*.bing.com https://*.doubleclick.net https://insight.adsrvr.org https://*.sundaysky.com https://*.sundaysky-sandbox.com https://analytics.google.com https://*.google.com https://*.streetmetrics.io https://*.clmbtech.com https://*.tremorhub.com https://*.revcontent.com https://*.smaato.net https://*.tapad.com https://ad.tpmn.co.kr https://sync-criteo.ads.yieldmo.com https://*.criteo.com https://idsync.rlcdn.com https://x.bidswitch.net https://ib.adnxs.com https://partner.mediawallahscript.com https://r.casalemedia.com https://ad.360yield.com https://contextual.media.net https://exchange.mediavine.com https://sync.outbrain.com https://simage2.pubmatic.com https://pixel.rubiconproject.com https://match.sharethrough.com https://rtb-csync.smartadserver.com https://sync-t1.taboola.com https://criteo-sync.teads.tv https://eb2.3lift.com https://ups.analytics.yahoo.com https://tg.socdm.com https://visitor.omnitagjs.com; frame-src 'self' https://*.penfed.org https://*.oncehub.com https://*.feathr.co https://feathr.co https://www.google.com https://www.googletagmanager.com https://maps.googleapis.com https://maps.gstatic.com https://*.gstatic.com https://*.googleapis.com https://fast.wistia.net https://monstat.com https://*.medallia.com https://*.kampyle.com https://pentagonfcu.demdex.net https://admin.americasaves.org https://*.wistia.com https://*.vimeo.com https://up.pixel.ad https://*.leadid.com https://*.criteo.com https://*.cloudfront.net https://*.doubleclick.net https://*.facebook.com https://penfed.locatorsearch.net https://*.youtube.com https://*.salesforce.com; frame-ancestors 'self' https://*.penfed.org https://www.googletagmanager.com https://*.feathr.co https://feathr.co https://monstat.com https://*.medallia.com https://*.fls.doubleclick.net https://up.pixel.ad https://*.salesforce.com; worker-src 'self' data: blob: wss://*.decibelinsight.net https://*.decibelinsight.net wss://*.decibelinsight.com https://*.decibelinsight.com https://*.feathr.co https://feathr.co https://*.oncehub.com https://monstat.com https://*.sundaysky.com https://*.sundaysky-sandbox.com https://*.invocacdn.com https://*.invoca.net https://analytics.google.com https://*.gstatic.com https://*.googleapis.com https://*.google.com;

content-type

text/html;charset=utf-8

cross-origin-embedder-policy

unsafe-none

cross-origin-opener-policy

unsafe-none

cross-origin-resource-policy

cross-origin

date

Thu, 18 Dec 2025 19:49:20 GMT

etag

"1c67c-6463c99895c35-gzip"

expires

Thu, 18 Dec 2025 19:54:20 GMT

last-modified

Thu, 18 Dec 2025 16:39:08 GMT

permissions-policy

sync-xhr=*, geolocation=*, fullscreen=*

referrer-policy

origin

server-timing

cdn-cache; desc=MISS edge; dur=17 origin; dur=80 ak_p; desc="1766087360767_388297191_1723859368_9706_16022_3_12_255";dur=1

strict-transport-security

max-age=31536000; includeSubdomains;

vary

Accept-Encoding

x-akamai-transformed

9l 20526 0 pmb=mRUM,1

x-content-type-options

nosniff

x-served-by

cache-bur-kbur8200051-BUR

x-timer

S1766087361.806469,VS0,VS0,VE70

x-vhost

penfed-org

23 headers detected

Technology Stack Analysis

Adobe Experience Manager

CMS

Adobe Experience Manager (AEM) is a content management solution for building websites, mobile apps and forms.

Java

Programming languages

Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.

Microsoft Advertising

Advertising

Microsoft Advertising is an online advertising platform developed by Microsoft.

jQuery

JavaScript libraries

jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.

HSTS

Security

HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.

Google Tag Manager

Tag managers

Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.

Google Analytics

Analytics

Google Analytics is a free web analytics service that tracks and reports website traffic.

Facebook Pixel

Analytics

Facebook pixel is an analytics tool that allows you to measure the effectiveness of your advertising.

DigiCert

SSL/TLS certificate authorities

No description available

Akamai

Expires:1/22/2027

RT

.www.penfed.org

Lax

Value

"z=1&dm=www.penfed.org&si=9f1aa857-7095-4f2f-b23d-39d74426fca5&ss=mjbutcm9&sl=1&tt=6nf&rl=1&ld=6ni"

Expires:12/25/2025

kampyleUserSessionsCount

www.penfed.org

Secure None

Value

[kampyleUserSessionsCount redacted]

Expires:12/18/2026

invoca_session

.penfed.org

Value

[invoca_session redacted]

Expires:1/22/2027

bigidcmp-consent-ed4cf9f1-6404-4850-ab6c-b82c4e448f59

.penfed.org

Value

Expires:12/18/2026

AMCVS_4B46D70754F9EFCB0A4C98C6%40AdobeOrg

.penfed.org

Value

Expires:Session

s_pltp

.penfed.org

Value

undefined

Expires:Session

bm_sz

.penfed.org

Secure None

Value

05A68CEA1BEB86E3CB49F70535562B0C~YAAQ5/EkF7XOXCybAQAAwYECMx4/3HtTP3NAkDYYpFjK6WEoJory0cO8nExf0OEPx/61Hqhoa9+IRrTjCNKzf6XBqtZIZ2NylXlfgBrmuKkEyO0DPZCexf9eSnxfgja3zkdMsJwvpSAmkogAUt3RsbUGmK27LTZ3blyjsFfS5D3Mqzy9Z2nT5LTPt3Tw7H3ryTcrPPDqZeEsd+qNS5rchOt4McPCtKXkfZ4jC4F557uAOwQeyKga1XJ2OGLEHlt14RbQ3tTFpb4kYrmluu5jpPUVRoWeWrMb8AzQEZvldAB91GH8ZBmP8a/kIG3IJundh3Ll/lcOscbBTNw/qiw/MIu4EYjsToO5qGHNe/xCadynn2np/op3RYkykiR8lcE29aKT8VER4cenk5c+l3M6ILzd2f3BYXDgFuOX~3617092~4338994

Expires:12/18/2025

s_vnc365

.penfed.org

Value

1797623369086%26vn%3D1

Expires:12/18/2026

trueOrgin

www.penfed.org

Value

GoogleSearch

Expires:Session

s_ivc

.penfed.org

Value

true

Expires:12/18/2025

kampyleSessionPageCounter

www.penfed.org

Secure None

Value

[kampyleSessionPageCounter redacted]

Expires:12/18/2026

_ga

.penfed.org

Value

GA1.1.958837184.1766087366

Expires:1/22/2027

mbox

.penfed.org

Value

session#c4a64ab7c8b14ccbaaf6c03ac4b2be7a#1766089229

Expires:12/18/2025

kampyleUserPercentile

www.penfed.org

Secure None

Value

51.79331061004411

Expires:12/18/2026

www.penfed.org

Subdomain