thomastonsavingsbank.com

.com crawl

First seen 2026-04-26 · Last seen 2026-05-19 · ok HTTP/1.1 200 2308 ms crawled 2026-05-19

US · 192.140.7.143 · AS54420 COCC

Reputation 92/100 no dmarc policy

sector finance type homepage

HTML metadata

Title: Thomaston Savings Bank | CT Personal & Business Banking
Description: Thomaston Savings Bank - CT Personal & Business Banking | Securely manage your finances, loans, and investments, with CT's leading community bank.
Language: en
Generator: Concrete CMS
Canonical: https://www.thomastonsavingsbank.com/

Technology

Third-party hosts loaded (1)

cdn.segmint.net×1

Social

Contact

Phone

855.344.1874

Registration

Registrar

Network Solutions, LLC

Created

1996-06-05

Expires

2031-06-04 1840 days left

Updated

2026-04-07

Name servers

kara.ns.cloudflare.com
lou.ns.cloudflare.com

DNS records live

NS

kara.ns.cloudflare.com
lou.ns.cloudflare.com

MX

10 thomastonsb-com.mail.protection.outlook.com

TXT

q5ee555c6f13ghojvtlu2646ci
rr7sjocvogs28kb5ohtskue7br
SxY1BUbhLHaBqLJYR8LzH3/lDj0QB5ThOwGPxMJm9IAq9DeH9oynJly30UyMFNY5bcZDWRkxXUr1ZbxaR+3ujw==

Verified for

Cisco
Google
Microsoft 365
Zoom

Email authentication weak

SPF: v=spf1 a mx include:spf1.thomastonsavingsbank.com include:spf.cocci.com include:spf.constantcontact.com include:spf.webaccess1.com include:spfhost.messageprovider.com include:_spf.optimalblue.com include:_phishspf.knowbe4.com -all
strict (-all)
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

Go Daddy Secure Certificate Authority - G2

from 2025-12-17 to 2026-12-19

Expires in 213 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://www.thomastonsavingsbank.com/

present

strict-transport-security
x-frame-options
x-content-type-options
referrer-policy

findings

missing Content Security Policy
missing Permissions Policy

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=63072000; includeSubdomains; preload