corporate

forum

English

CMSLandingPageLoaded

_ga_TVR74WFNTK

CurrentContact

_gcl_au

_fbp

.AspNetCore.Session

visits

_ga_ZZ48JHLTF3

__arank_duid

cofcu_last_sessionid

The domain 'www.cofcu.org' uses the non-profit oriented generic top-level domain (.org); it also runs on subdomain 'www'. The registrable portion 'cofcu' spans 5 characters split between 2 vowels and 3 consonants. It segments into 3 words: c, of, cu. Median word length is two characters. No strong language cues emerged from the frequency lists.

SearchTerm

html/4a/94/4a94897b-2f8a-4548-98cb-6131091f26f0.html.gz

frame-ancestors 'self' *.cofcu.org *.zagclients.net

connect-src 'self' https://api.consumerpay.getswivel.io https://api.baconpay.com; frame-src 'self' https://www.consumer-integrations.prodvault.swbc.com; img-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.consumer-integrations.prodvault.swbc.com https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; report-uri https://swivel.report-uri.com/r/t/csp/enforce; report-to default

default-src 'none'; connect-src 'self' https://api.consumerpay.getswivel.io https://api.baconpay.com; frame-src 'self' https://www.consumer-integrations.prodvault.swbc.com; img-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.consumer-integrations.prodvault.swbc.com https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; report-uri https://swivel.report-uri.com/r/t/csp/enforce; report-to default

inline; filename=Step-up-your-checking-account-game.svg

inline; filename=Reward-your-spending.svg

inline; filename=Get-a-mortgage-with-modern-options.svg

inline; filename=Watch-your-savings-bloom.svg

inline; filename=Great-rates-on-loans.svg

inline; filename=Youth-programs-and-services.svg

inline; filename=Lower-fees-and-service-charges.svg

inline; filename=Financial-Counseling-Services.svg

inline; filename=Higher-dividends-on-accounts.svg

inline; filename=Local-branches-and-nationwide-ATMs.svg

inline; filename=Cellphone_on_laptop_with_security_emblem_on_screen_505x385.webp

inline; filename=Share-Savings-Account.webp

inline; filename=Kasassa-Saver-Savings-Account.webp

inline; filename=Year-End-Financial-Checkup.webp

default-src 'self' blob: *;script-src 'nonce-T2bQrLid' *.facebook.com *.fbcdn.net *.facebook.net 127.0.0.1:* blob: 'self' https://*.google-analytics.com *.google.com;style-src 'self' data: blob: 'unsafe-inline';connect-src 'self' data: blob: https://edge-chat.facebook.net https://edge-chat-latest.facebook.net wss://edge-chat-latest.facebook.net wss://edge-chat.facebook.net wss://edge-chat.socialplugin.facebook.net wss://edge-chat-latest.socialplugin.facebook.net https://edge-chat.socialplugin.facebook.net https://edge-chat-latest.socialplugin.facebook.net *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* *.cdninstagram.com https://*.google-analytics.com;font-src 'self' data: blob: *;img-src 'self' data: blob: * https://*.google-analytics.com;media-src 'self' data: blob: *;child-src 'self' data: blob: *;frame-src 'self' data: blob: *;manifest-src 'self' data: blob: *;object-src 'self' data: blob: *;worker-src 'self' data: blob: *;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script';

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:112:0

default-src 'self' blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;script-src 'nonce-NPs0HGgq' *.facebook.com *.fbcdn.net *.facebook.net 127.0.0.1:* blob: 'self';style-src 'self' data: blob: 'unsafe-inline';connect-src 'self' data: blob: https://edge-chat.facebook.net https://edge-chat-latest.facebook.net wss://edge-chat-latest.facebook.net wss://edge-chat.facebook.net wss://edge-chat.socialplugin.facebook.net wss://edge-chat-latest.socialplugin.facebook.net https://edge-chat.socialplugin.facebook.net https://edge-chat-latest.socialplugin.facebook.net *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* *.cdninstagram.com;font-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;img-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;media-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;child-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;frame-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;manifest-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;object-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;worker-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;require-trusted-types-for 'script';

TTD Universal Pixel

e57f8e3a19d89cc9dc02e8e02bb5a1e77de5d0a77d04fc9c80844a7983a5882c

4a25be1f0513a03c0595d7adc16dbd4402afaa9f00fdcb2564b53613eba2ad8b

ee0869d33edcbaa122c94a800d91c5805c8d911b3082d2498183ed65262fc024

bc6b2a48f6de3fcee36fad3950bcace060cf4dca2587b279a1eb91a2db774ac5

f97ff1489afff4583ca829dc1cf1463c442401c16a7fe7c292b31ac48f588c6f

cf4012855810edd80ff5404202e855e5c57f735d55131472105b51987d81cd35

bf7e2cde356efa546da864c041a11f1f363aabcb1ec26b6cf8dd97c9d210da8f

1fc12623bb3a71f8c3b1f3b822f5080333250c240c6bf35e822832ab1bff7cee

66fc50512969b0561b82282f680351103aa773984bddf7f8327837259ccaf857

width=device-width, initial-scale=1, shrink-to-fit=no

viewport

facebook-domain-verification

CommonWealth One Federal Credit Union has locations in Northern VA and Washington D.C. Explore our website to learn about our checking and loan products.

description

CommonWealth One | VA & Washington D.C. Credit Union Checking

https://www.cofcu.org/cofcu/media/Images/open-graph.jpg

apple-itunes-app

app-id=com.softek.ofxclmobile.commonwealthonefcu

google-play-app

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

GoDaddy.com, LLC

cofcu.org

Amazon EC2 Abuse

IP Management

Amazon AWS Network Operations

Amazon.com, Inc.

AWS RPKI Management POC

IP Routing

Amazon EC2 Network Operations

AMAZO-ZPDX


        (function (w, d, s, l, i) {
            w[l] = w[l] || []; w[l].push({
                'gtm.start':
                    new Date().getTime(), event: 'gtm.js'
            }); var f = d.getElementsByTagName(s)[0],
                j = d.createElement(s), dl = l != 'dataLayer' ? '&l=' + l : ''; j.async = true; j.src =
                    'https://www.googletagmanager.com/gtm.js?id=' + i + dl; f.parentNode.insertBefore(j, f);
        })(window, document, 'script', 'dataLayer', 'GTM-M4MT9MN');


                    var onlineBankingUrl = "https://cofcu.financialhost.org";
                


            var SpeedbumpData = SpeedbumpData || {};
            SpeedbumpData.ExemptList = ["powerforms.docusign.net","na2.docusign.net","app.loanspq.com","app.acuityscheduling.com","online-branch.cofcu.org","web.baconpay.com","onlinebanktours.com","cofcu.coconutcalendar.com","cofcu.financialhost.org","commonwealthone.memberadvantagemortgage.com","loansphereservicingdigital.bkiconnect.com/midwestloanservices/#/login","www.borrowercenter.memberadvantagemortgage.com","app.consumer.meridianlink.com"];
        


window.kentico = window.kentico || {};
window.kentico.builder = {}; 
window.kentico.builder.useJQuery = true;

!function(b,e,f,g,a,c,d){b.fbq||(a=b.fbq=function(){a.callMethod?a.callMethod.apply(a,arguments):a.queue.push(arguments)},b._fbq||(b._fbq=a),a.push=a,a.loaded=!0,a.version="2.0",a.queue=[],c=e.createElement(f),c.async=!0,c.src=g,d=e.getElementsByTagName(f)[0],d.parentNode.insertBefore(c,d))}(window,document,"script","https://connect.facebook.net/en_US/fbevents.js");fbq("init","332896790446643");fbq("track","PageView");

window._monsido=window._monsido||{token:"XkbSEZGCkYvudv3bporPiQ"};

ttd_dom_ready(function(){if(typeof TTDUniversalPixelApi==="function"){var a=new TTDUniversalPixelApi;a.init("sfpmu6u",["ppwry5d"],"https://insight.adsrvr.org/track/up",{td1:google_tag_manager["rm"]["32224042"](17)})}});

Requests	IP Address	Location	AS Autonomous System
66	104.16.174.82	United States	AS13335CLOUDFLARENET
6	184.24.77.156	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
6	104.26.6.75	United States	AS13335CLOUDFLARENET
4	172.217.23.104	United States	AS15169GOOGLE
4	104.26.12.183	United States	AS13335CLOUDFLARENET
4	18.173.205.74	United States	AS16509AMAZON-02
4	216.239.32.36	United States	AS15169GOOGLE
3	3.174.47.131	United States	AS16509AMAZON-02
3	52.88.183.153	Boardman, Oregon, United States	AS16509AMAZON-02
3	157.240.0.35	Frankfurt am Main, Hesse, Germany	AS32934FACEBOOK
133	105	-	-

Security Scan Report: www.cofcu.org

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History