mainefamilyfcu.com — domain check, WHOIS, DNS & reputation

HTML metadata

Title: Maine Family Federal Credit Union Savings & Loans | Lewiston, Maine
Description: Welcome to Maine Family FCU—the trusted community credit union offering personalized banking, loans, & financial services in Lewiston & Auburn, Maine.
Language: en
Canonical: https://www.mainefamilyfcu.com

Open Graph

title: Maine Family Federal Credit Union Savings & Loans | Lewiston, Maine
description: Welcome to Maine Family FCU—the trusted community credit union offering personalized banking, loans, & financial services in Lewiston & Auburn, Maine.

Technology

Server: Microsoft-IIS
jQuery: 3.7.1

Analytics

Google Tag Manager

Third-party hosts loaded (6)

clients.lk-cs.com×5
ajax.googleapis.com×1
cookie-cdn.cookiepro.com×1
jelly.mdhv.io×1
www.facebook.com×1
www.googletagmanager.com×1

Social

Contact

Phone

Address

555 Sabattus Street, 04240, Lewiston, ME, US

Registration

Registrar

Network Solutions, LLC

Created

2000-02-18

Expires

2029-02-18 991 days left

Updated

2025-12-16

Name servers

ns-1200.awsdns-22.org
ns-1841.awsdns-38.co.uk
ns-247.awsdns-30.com
ns-947.awsdns-54.net

DNS records live

NS

ns-1200.awsdns-22.org
ns-1841.awsdns-38.co.uk
ns-247.awsdns-30.com
ns-947.awsdns-54.net

MX

10 mx1-us1.ppe-hosted.com
20 mx2-us1.ppe-hosted.com

TXT

MS=4E1088BB716DCEDD23F59A4E2F523D9D58B96F5F
ppe-582def1bdb1c852eb027fe84f01ee9e1dcee969d

Verified for

DocuSign
Microsoft 365

Email authentication strong

SPF

v=spf1 ip4:23.185.0.3 include:spf.usa.net include:retailspf.smtp.com include:spf.protection.outlook.com include:_spf-us.ppe-hosted.com include:sendgrid.net include:spfref.jackhenry.com include:spf.mandrillapp.com include:spf.smtp2go.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; rua=mailto:izr08jleh7@rua.powerdmarc.com; ruf=mailto:izr08jleh7@ruf.powerdmarc.com; fo=1;

policy: reject (enforced)

DKIM

s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjWza7qlAmuNZj0rDcsS1DT9mufSTsv0KDY1MKldPSWtnjpp/42eZNUWfBg087IZjDHksQVFy2/U5l3nla…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC2hXKLKx+puvGvM7jtYkNjmcu8Y8CJmPe+rqhaeAMXWRDokmHqMRfddgbdPe7ER5WGfl8Jf5g0G9D8HBPM07VqGi…

selectors probed

Certificate (current)

Amazon RSA 2048 M04

from 2025-07-17 to 2026-08-16

Expires in 74 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.mainefamilyfcu.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: script-src 'self' https://apps-helpers.lk-cs.com https://*.cookiepro.com https://c.amazon-adsystem.com https://*.onetrust.com https://*.ipredictive.com https://*.g.doubleclick.net https://*.googleadservices.com https://*.googletagmanager.com https://*.facebook.com https://*.mountain.com https://static.cloudflareinsights.com https://lkcsunix.com https://clients.lk-cs.com https://clients-dev.lk-cs.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://code.jquery.com https://cdn.livechatinc.com https://api.livechatinc.com *.googleapis.com *.gstatic.com www.google.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com https://platform.stumbleupon.com/1/widgets.js https://*.googletagmanager.com 'unsafe-inline' 'unsafe-eval' cdn.ampproject.org https://cdn.insight.sitefinity.com https://dec.azureedge.net web-chat.nativ
strict-transport-security: max-age=31536000; includeSubDomains

Links to (9)

Linked from (1)

mainestrongfoundation.org×1