broadviewfcu.com

HTML metadata

Title: Broadview Federal Credit Union | Broadview Federal Credit Union
Description: Welcome to Broadview Federal Credit Union. Member-focused banking with competitive rates, award-winning service, and 60+ branches across New York.
Language: en
Canonical: https://www.broadviewfcu.com/

Open Graph

url: https://www.broadviewfcu.com/
title: Broadview Federal Credit Union
site name: Broadview Federal Credit Union
description: Welcome to Broadview Federal Credit Union. Member-focused banking with competitive rates, award-winning service, and 60+ branches across New York.

Technology

CDN: Cloudflare

Fonts

Google Fonts

Third-party hosts loaded (7)

cdnjs.cloudflare.com×4
cdn.userway.org×1
d21y75miwcfqoq.cloudfront.net×1
fonts.googleapis.com×1
maps.googleapis.com×1
siteimproveanalytics.com×1
www.research.net×1

Social

Contact

Phone

800-727-3328

Address

4 Winners Circle, 12205, Albany, NY, US

Registration

Registrar

Amazon Registrar, Inc.

Created

2022-05-06

Expires

2027-05-06 351 days left

Updated

2026-05-16

Name servers

pdns83.ultradns.biz
pdns83.ultradns.com
pdns83.ultradns.net
pdns83.ultradns.org

DNS records live

NS

pdns83.ultradns.biz
pdns83.ultradns.com
pdns83.ultradns.net
pdns83.ultradns.org

MX

10 broadviewfcu-com.mail.protection.outlook.com

TXT

Show 21 TXT records

MS=ms60804523
apple-domain-verification=zK9U4BCLJOa2NAU4
_bkulmn6qr2h57qwgrz1nfnu9b3elmsa
9e3ec8it1hpgmpg1npcl9a3hrf
intersight=d3c2cb8f120be102d48f70be7a0dbd66e116b10410a6345e9d481ab90a8eda25
jamf-site-verification=CULWZfhVDDRLyXYpkFi-xg
google-site-verification=2sMkeADF_OHj2uukD9XGodCaMixXPoyyXD_NZpD7qS0
atlassian-domain-verification=EH+FQYhg7fAUpH6ctSfxy+R7ACRlBGIs1ISkQUUH/lQbWHuycmxaNvh5YYr618ZP
4r5frlm7i48tqmp3g6na8uv9j2
google-site-verification=upjysxpfW2uye9MreeKJRrvJRRhZlaVhwI7pOaOiDmU
google-site-verification=z6GO4orhEHkRw2xClea6GkYbttVK_sw3Ycob8qN9g8g
knowbe4-site-verification=52f576a1e659aefd066839e6c34e4097
smartsheet-site-validation=mxtCCvcpkEz9gq8-DsoV24CdQG7x7L0X
atlassian-domain-verification=MV8jrMOrnBjkEMd9ODqpaFKIifa0QqlCw7zeeUeGaZ9As2/Ol7GTV2yQlgVa6H2i
Xmedius-Verification=119ae64bb1db6e77edbd64fea5672ac2f0df73dde2106de4a59f5f6c8f5c58961245260a09309d7f84c82ceb29248b1b62cea5d55c7beb72f24e4bfe53e3bafb
easydmarc-verification:094074db-ce93-4510-909b-791726d4bab4
wiz-domain-verification=0ec16489375fd42249cfe28e107cb27d515360709bda85bc40738f28b6372949
google-gws-recovery-domain-verification=55603982
docusign=def44e01-9380-4305-aa17-c62a6c550773
google-site-verification=a4vGd26wjeRS7CWK2Igpu4SbVXttluqBn1UIN61yVgM
irq1lk0r5h5jjga97gd5jslhdb

Email authentication strong

SPF

v=spf1 include:_spf.broadviewfcu_com._d.easydmarc.pro -all

strict (-all)

DMARC

v=DMARC1;p=reject;pct=100;rua=mailto:a525044e06@rua.easydmarc.us;ruf=mailto:a525044e06@ruf.easydmarc.us;ri=86400;fo=1;

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hwOag8CCi/JSEFPrzkJcR/r7+57G7bz+3SJWFp/hlvttXQW6R9cEZrh9K3gnQJ2IC4LoPZuOpojNK…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gMOIWQL/PeoGMt26+JQ/YTF/YO6w19XyekOTk9rzUSCDe+PRV33rY4mxmbonGRglioM1QwIoLfYe8u6Lk…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBBh5izySDCdEwXEW7MzD9oYa7dsfVscILFOaRjJV1QwDST5H+wD0Hrg+1vNoz1X4evJRCGBMvOd+9aMxU…

selectors probed

Certificate (current)

WE1

from 2026-04-21 to 2026-07-20

Expires in 62 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.broadviewfcu.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=(self "https://broadviewfculocator.wave2.io")
x-content-type-options: nosniff
content-security-policy: script-src 'nonce-GC3/AibiR1S/ZTSxJH3wpBgT3EA7IhFuRIbk2ZdRgks=' 'self' data: 'strict-dynamic'; script-src-elem 'self' 'unsafe-inline' *.episerver.net *.googleapis.com cdnjs.cloudflare.com *.bootstrapcdn.com siteimproveanalytics.com cdn.userway.org platform.linkedin.com platform.twitter.com connect.facebook.net *.wave2.io app.textrecruit.com *.force.com www.googletagmanager.com *.bing.com sc-static.net www.googleadservices.com *.licdn.com *.google-analytics.com *.doubleclick.net www.redditstatic.com www.google.com www.gstatic.com *.msecnd.net www.calcxml.com api.glia.com libs.salemove.com d4hldqmvpzsy0.cloudfront.net code.jquery.com js.monitor.azure.com broadviewfcu.my.site.com widget.ellieservices.com *.moneyedu.org autolink.io; style-src-elem 'self' 'unsafe-inline' *.bootstrapcdn.com *.force.com www.calcxml.com fonts.googleapis.com cdnjs.cloudflare.com libs.salemove.com cdn.userway.org d4hldqmvpzsy0.cloudfront.net broadviewfcu.my.site.com; frame-ancestors 'self'; img-src 'self' da
strict-transport-security: max-age=31536000; includeSubDomains