maspethfederal.com

.com crawl

First seen 2026-04-17 · Last seen 2026-05-12 · ok HTTP/1.1 200 2659 ms crawled 2026-05-12

US · 12.132.105.187 · AS54420 COCC

Reputation 94/100 dmarc monitor-only

sector finance type blog

HTML metadata

Title: Home | MFS
Description: Maspeth Federal Savings is your community bank, offering fee-free accounts, business accounts, loans, and mobile banking to help you reach your financial goals.
Language: en-US
Canonical: https://www.maspethfederal.com

Open Graph

title: Home
site name: Maspeth Federal Savings
description: Maspeth Federal Savings is your community bank, offering fee-free accounts, business accounts, loans, and mobile banking to help you reach your financial goals.

Technology

CMS: Ghost

Analytics

Google Tag Manager

Fonts

Adobe Fonts

Third-party hosts loaded (4)

api.glia.com×1
cdn.userway.org×1
use.typekit.net×1
www.googletagmanager.com×1

Social

Contact

Phone

221472792

Registration

Registrar

GoDaddy.com, LLC

Created

1998-09-22

Expires

2034-09-21 3047 days left

Updated

2025-09-11

Name servers

dns1.cocci.com
dns2.cocci.com

DNS records live

NS

dns1.cocci.com
dns2.cocci.com

MX

10 us-smtp-inbound-1.mimecast.com
10 us-smtp-inbound-2.mimecast.com

TXT

Show 9 TXT records

tsr569tu5shcfcvfq84c5g8itr
teamviewer-sso-verification=c0949614700d43d49aad7f98e9be6311
ms-domain-verification=3e27ca78-c74b-48db-a556-5d79ecc7cdda
MS=ms46441489
4d1jmoeab7npjd6h1a3sh6g71
4345A2A03E
apple-domain-verification=HZ4KPkAy4NsBKUtw
adobe-idp-site-verification=bcb420f13bf65017c0067811333c9dd896ddb7d901d835f359aad6765fb5d63c
nbk2k3o3jss1j3uq3bkhqklcvf

Email authentication partial

SPF

v=spf1 include:us._netblocks.mimecast.com include:_spf.google.com include:spf.protection.outlook.com include:maspethfederal-com.spf.smtp25.com include:spf.meridianlink.com ip4:216.116.87.142 ip4:74.200.60.34 ip4:52.128.98.32/29 ip4:216.134.200.226/32 ip4:209.198.203.132/32 ip4:72.69.27.202 ip4:198.101.135.225 ip4:23.253.179.88/30 ip4:161.47.97.182/31 ip4:161.47.97.184/32 ip4:166.78.67.66/31 ip4:156.55.205.32/32 ip4:156.55.205.33/32 ip4:156.55.138.124/32 ip4:156.55.138.125/32 ip4:35.80.141.6/32 ip4:44.229.121.55/32 ip4:148.59.100.16/28 include:spf.cocci.com ip4:208.75.123.0/24 include:spf.cashedge.com -all

strict (-all)

DMARC

v=DMARC1; p=none; rua=mailto:mfs_apple@maspethfederal.com

policy: none (monitoring only)

DKIM

google: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCFoNWdC3ER2MU9c9c40nFblmqDhKuwqBA/hiS/86G53CbAClKD/WHintdbofcFZpzWCJDz12AKtDXB8R7SX1kOT3j8w3Y…
selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWrdrqxugLNMBpqMUo0mpjyzM1F761Fo1eL+Uw626AqXeS+PF2+PAJRmlYM56VqorS9tUHSZ9IArOl…

selectors probed

Certificate (current)

Go Daddy Secure Certificate Authority - G2

from 2025-07-03 to 2026-07-27

Expires in 69 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.maspethfederal.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src wss: https: *.fonts.net 'unsafe-inline';script-src https: 'unsafe-inline' 'unsafe-eval';img-src https: data:
strict-transport-security: max-age=63072000; includeSubdomains; preload