huntingtonfederal.com

.com crawl

First seen 2026-05-26 · Last seen 2026-05-30 · ok HTTP/1.1 200 4146 ms crawled 2026-05-30

US · 161.199.217.238 · AS399301 The Forms Group

Reputation 94/100 dmarc partial coverage

Classifying

HTML metadata

Title: Huntington Federal Savings Bank
Language: en
Generator: All in One SEO Pro (AIOSEO) 4.9.4.2
Canonical: https://www.huntingtonfederal.com/

Open Graph

url: https://www.huntingtonfederal.com/
title: Huntington Federal Savings Bank
locale: en_US
site name: Huntington Federal Savings Bank |

Technology

CMS: WordPress
jQuery: 3.7.1

Analytics

Google Tag Manager

Third-party hosts loaded (2)

seal-canton.bbb.org×1
www.googletagmanager.com×1

Registration

Registrar

Network Solutions, LLC

Created

1998-09-24

Expires

2027-09-23 478 days left

Updated

2025-07-25

Name servers

ns63.worldnic.com
ns64.worldnic.com

DNS records live

NS

ns63.worldnic.com
ns64.worldnic.com

MX

10 mx.usa.net
20 mx.ct.mbox.net

TXT

MS=0CF431C3C08E69E899604B2E108F0925B345995A

Verified for

Cisco

Email authentication strong

SPF: v=spf1 include:spf.usa.net include:spf.cashedge.com include:spf.protection.outlook.com -all
strict (-all)
DMARC: v=DMARC1; p=quarantine; rua=mailto:dmarc_rua@domain.com; adkim=r; aspf=r; sp=quarantine; pct=10
policy: quarantine · pct=10 · sp=quarantine
DKIM: no key found at common selectors

Certificate (current)

GoGetSSL RSA DV CA

from 2025-08-17 to 2026-08-18

Expires in 77 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://www.huntingtonfederal.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
cross-origin-opener-policy
cross-origin-embedder-policy

findings

missing Permissions Policy

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: upgrade-insecure-requests
strict-transport-security: max-age=63072000; includeSubDomains; preload
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-embedder-policy: unsafe-none

Links to (6)

Linked from (1)

wvscpa.org×1