unitedfcu.com — domain check, WHOIS, DNS & reputation

HTML metadata

Title: Home | United Federal Credit Union
Description: United Federal Credit Union – since 1949, United has been built on local community values and dedicated to serving you, our members.
Language: en
Canonical: https://unitedfcu.com/

Open Graph

url: https://unitedfcu.com/
title: Home | United Federal Credit Union
site name: United Federal Credit Union
description: United Federal Credit Union – since 1949, United has been built on local community values and dedicated to serving you, our members.

Technology

CDN: Cloudflare

Analytics

Google Tag Manager

Fonts

Adobe Fonts
Google Fonts

Third-party hosts loaded (8)

assets.sitescdn.net×3
use.typekit.net×3
fonts.googleapis.com×2
cds-sdkcfg.onlineaccess1.com×1
d21y75miwcfqoq.cloudfront.net×1
embed.signalintent.com×1
fonts.gstatic.com×1
www.googletagmanager.com×1

Social

Contact

Phone

+18889821400

Address

150 Hilltop Rd, 49085, St. Joseph, MI

Registration

Registrar

Network Solutions, LLC

Created

1999-12-27

Expires

2027-12-27 564 days left

Updated

2022-10-28

Name servers

brad.ns.cloudflare.com
lorna.ns.cloudflare.com

DNS records live

NS

brad.ns.cloudflare.com
lorna.ns.cloudflare.com

MX

10 mxa-00168801.gslb.pphosted.com
10 mxb-00168801.gslb.pphosted.com

TXT

Show 6 TXT records

_pda9pred9pkonkqoomgwrylgilo0pvg
_xiysnllibyj6wuumpk4odou1ufsp1iy
msfpkey=6ho7f17drhczrazruh0q74z9b
w+s5sygcPNR97ZrWaF3lR22p1GUwGHKJv1Unn0BqzOjC+oowtqNeUmEYciRB7tTydvf+miHGFjoCD1qStv3/Aw==
02c9f0cc-a7d0-4b1a-b126-ab775e63c0eb
0ed1fe018ae30b0f7d8ede47898be29d607d7f21ea

Verified for

Apple
Cisco
DocuSign
Dynamics 365
Google
Meta
Microsoft 365
Yahoo

Email authentication strong

SPF

v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDlnKu8eUS1es5IdRWw1hIl0+G4QiTZz+dXfd+ME2k6c6pMj0XouvFCIhXgP66g7FlP6xsxUWkh4Iqms1+qle…
selector2: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDWjchnk6autKbnt8+9bDFzA3s8AcHG26r2rsXP37jeQ4Vigjmrst6A2fr+XgM90hKu3F81sIPPqAb85+Hw97…

selectors probed

Certificate (current)

WE1

from 2026-04-13 to 2026-07-12

Expires in 31 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 40/100 Checked live page: https://unitedfcu.com/

present

content-security-policy

findings

missing HSTS
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing content type protection
missing Referrer Policy
missing Permissions Policy

Header values

content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.g.doubleclick.net *.googleadservices.com *.vimeo.com *.googletagmanager.com *.wistia.com *.bugherd.com *.jquery.com *.googleapis.com *.gstatic.com *.google.com *.google-analytics.com *.facebook.net *.youtube.com *.twitter.com *.jsdelivr.net *.signalintent.com *.segment.com *.cookiebot.com *.yext-cdn.com *.sitescdn.net *.referlive.com *.segment.io *.yextevents.com *.onlineaccess1.com *.referlive.com *.mkt.dynamics.com *.azureedge.net; style-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.gstatic.com *.bootstrapcdn.com *.google.com *.typekit.net *.fontawesome.com *.jsdelivr.net *.signalintent.com *.yext-cdn.com *.sitescdn.net *.referlive.com *.segment.io *.yextevents.com *.onlineaccess1.com *.mkt.dynamics.com *.azureedge.net; font-src * data:; img-src * data:; media-src 'self' data: blob: *.wistia.com; child-src 'self' blob: *.twitter.com *.youtube.com *.vimeo.com *.optimalblue.com/ *.bugherd.com *.google.c

Links to (4)

Linked from (5)

Use this data via API

Everything on this page for unitedfcu.com is available as JSON from the indexo.dev REST & MCP API.

curl "https://indexo.dev/api/v1/domains/unitedfcu.com" \
  -H "X-API-Key: idx_..."

Read the docs & get a free key →