stmarysbank.com

HTML metadata

Title: NHs First Credit Union Since 1908 | St. Mary's Bank
Description: Discover personal and business banking from St. Mary’s Bank. As America’s first credit union, we proudly serve New Hampshire communities since 1908.
Language: en
Canonical: https://www.stmarysbank.com

Open Graph

title: NHs First Credit Union Since 1908
description: Discover personal and business banking from St. Mary’s Bank. As America’s first credit union, we proudly serve New Hampshire communities since 1908.

Technology

CDN: Azure Front Door

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (5)

fonts.googleapis.com×2
cdn.insight.sitefinity.com×1
fonts.gstatic.com×1
siteimproveanalytics.com×1
www.googletagmanager.com×1

Social

Contact

Phone

011400149

Address

200 McGregor Street, 03102, Manchester, NH

Registration

Registrar

Cloudflare, Inc.

Created

1998-01-29

Expires

2034-01-28 2810 days left

Updated

2026-05-06

Name servers

marty.ns.cloudflare.com
norah.ns.cloudflare.com

DNS records live

NS

marty.ns.cloudflare.com
norah.ns.cloudflare.com

MX

0 stmarysbank-com.mail.protection.outlook.com

TXT

Show 6 TXT records

99ojiu3h38u4us4tar3cmqll9b
B8Ym8vdNO7GkoAudt6ze7iVGb6Wri5TqciH7H7DWM0vB2ZbQamWS7CFFI+9aCzDe8T3xLUAM+PXGkmxD7zeC3A==
MS=ms21425178
apple-domain-verification=rMDUO5fqFvzGWDqz
docusign=2adb0f07-bb1a-404b-9054-4e35fee64310
google-site-verification=fFZ8w4M8u5ONgWKbpLykJ2jjr6sgjLPR3Yy-7t80csc

Email authentication strong

SPF

v=spf1 ip4:209.190.161.201 ip4:52.128.98.34 ip4:52.128.98.35 ip4:52.128.98.36 ip4:149.72.47.228 ip4:23.21.109.197 ip4:23.21.109.212 ip4:147.160.167.0/26 ip4:74.200.60.34 ip4:18.214.175.138 ip4:66.179.179.85 ip4:206.80.14.230 ip4:149.72.47.228 ip4:147.160.167.0/26 ip4:206.71.80.64/27 ip4:50.31.63.161 ip4:149.72.183.169 ip4:208.86.168.7 ip4:135.84.68.123 ip4:135.84.79.54 ip4:206.152.14.54 ip4:147.253.213.79 a:_mailhosts.swbc.com include:_spf.mailgun.org include:spf.meridianlink.com include:spfus.doxim.com include:spfa.cpmails.com include:spf.protection.outlook.com include:spfref.jackhenry.com include:_spf.ultipro.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; ruf=mailto:dmarc@stmarysbank.com; aspf=r; fo=1; rua=mailto:qfvtky7d@ag.us.dmarcian.com;

policy: reject (enforced)

DKIM

Show 5 DKIM selectors

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCKCqYZkwmJI/x3HLzq1OvtRBDIKF2J1vCwh8EzYQKPV4bokvjMfppKt7RIKLeGGSUUdCiWBXd6QbVy3bAA1O…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmHWkiwEMIcjJy0eqOb08+yyr0z1ieProILU7B7Zc3KSzGWKk8yjo2MPTPM2JAASqVGtt6nVAd9Y6P…
k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCrHPKrP1fQ5RsMzRMhWDgB2heaUcBOh/N0CIunUgYAtcoPK+ntyaFY+2mzrnntl4xYQa1Q+6cOCCoMBiwKLf9UwGTuAgs…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUwX3jFhisLgtnekyfiIAMQY3frrkoN0J5vioA/9qoRtikScrL83g811wHajCLKtHIMJQkdIyS3BNluJXf…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwtT4jv1Cdi9iX0Ta3CeuwaOH7GYmVJV3rVDd2hAp8+jrM4KXXRnHN9DdqcOwbCqDrSUqQPu+fs1Ib871A…

selectors probed

Certificate (current)

GeoTrust TLS RSA CA G1

from 2026-02-23 to 2026-08-24

Expires in 96 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 55/100 Checked live page: https://www.stmarysbank.com/

present

strict-transport-security
content-security-policy

findings

short HSTS max-age
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing content type protection
missing Referrer Policy
missing Permissions Policy

Header values

content-security-policy: default-src fonts.gstatic.com https://www.youtube.com 'self'; style-src 'unsafe-inline' *.googleapis.com https://cdn.insight.sitefinity.com 'self'; connect-src wss://localhost:* *.googleapis.com https://sessions.bugsnag.com/ *.pusher.com *.bugherd.com wss://ws-mt1.pusher.com *.google.com www.googleadservices.com https://stats.g.doubleclick.net https://eastus-8.in.applicationinsights.azure.com https://*.insight.sitefinity.com https://*.dec.sitefinity.com 'self'; img-src data: https://i.ytimg.com/ *.gstatic.com *.googleapis.com https://bugherd-attachments.s3.amazonaws.com/ *.google.com *.siteimproveanalytics.io https://www.facebook.com https://cdn.insight.sitefinity.com 'self'; frame-src https://player.vimeo.com/ https://www.youtube.com/ sidebar.bugherd.com https://www.dinkytown.net/ *.nice-incontact.com quickquote-consumer.optimalblue.com quickquote-config.optimalblue.com *.googletagmanager.com https://td.doubleclick.net/ https://www.penny-finance.com online.fliphtml5.com www.google.com
strict-transport-security: max-age=2592000