other

English

The domain 'www.pennymac.com' uses the commercial generic top-level domain (.com), featuring subdomain 'www'. The second-level label 'pennymac' is 8 characters long split between 2 vowels and six consonants. It segments into 2 words: penny, mac. Median word length is 4 characters. 'penny' most strongly signals Breton. You may catch it in Catalan and Norwegian as well.

html/87/1f/871fdc8d-e0de-4920-9bd5-2a41638e347d.html.gz

default-src 'self' 'unsafe-inline' blob:; font-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com *.visualwebsiteoptimizer.com *.vwo.com; style-src-elem 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com *.googletagmanager.com *.vwo.com *.visualwebsiteoptimizer.com; frame-ancestors *.pennymac.com *.adobe.com *.google.com *.googletagmanager.com *.vwo.com *.visualwebsiteoptimizer.com; frame-src 'self' *.pennymac.com *.youtube.com *.vimeo.com *.youtube-nocookie.com *.googletagmanager.com *.doubleclick.net *.adsrvr.org *.google.com *.leadid.com *.cloudfront.net *.vwo.com *.visualwebsiteoptimizer.com app.vwo.com; connect-src 'self' *.algolia.net *.onetrust.com *.google.com *.play.google.com *.googleapis.com *.bing.com *.nr-data.net *.cookielaw.org *.reson8.com *.visualwebsiteoptimizer.com *.pennymac.com *.tealiumapis.com *.doubleclick.net *.tealiumiq.com *.yimg.com *.linkedin.com *.adsrvr.org *.leadid.com *.googleadservices.com *.googletagmanager.com *.facebook.com *.facebook.net *.exacttarget.com *.yahoo.com *.trcknow.com *.vwo.com app.vwo.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.newrelic.com *.googletagmanager.com *.pennymac.com *.vwo.com *.visualwebsiteoptimizer.com; script-src-elem 'self' 'unsafe-inline' *.tailwindcss.com *.algolia.net *.gstatic.com *.googletagmanager.com *.visualwebsiteoptimizer.com *.newrelic.com *.lidstatic.com *.vimeo.com *.google.com *.googleapis.com *.cookielaw.org *.youtube.com *.tiqcdn.com *.facebook.com *.facebook.net *.bing.com *.licdn.com *.yimg.com *.adsrvr.org *.tealiumiq.com *.resonate.com *.doubleclick.net *.nr-data.net *.vwo.com *.exacttarget.com *.trcknow.com *.pennymac.com; img-src 'self' data: *.townsgateservicing.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.visualwebsiteoptimizer.com *.vimeocdn.com *.adsvr.org *.google.com *.yahoo.com *.linkedin.com *.bing.com *.facebook.com *.facebook.net *.cloudinary.com *.cookielaw.org *.pennymac.com *.googleadservices.com *.resonate.com *.doubleclick.net *.reson8.com *.yimg.com *.leadid.com *.exacttarget.com *.trcknow.com *.vwo.com *.vwo.io app.vwo.com; worker-src 'self' blob:;

multipart/form-data; boundary=----WebKitFormBoundaryHvODijWPKwtqXEX8

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

Requests	IP Address	Location	AS Autonomous System
15	13.32.23.195	New York, New York, United States	AS16509AMAZON-02
4	54.205.214.205	Ashburn, Virginia, United States	AS14618AMAZON-AES
4	18.213.226.252	Ashburn, Virginia, United States	AS14618AMAZON-AES
4	142.250.185.168	United States	AS15169GOOGLE
4	3.225.48.173	Ashburn, Virginia, United States	AS14618AMAZON-AES
4	172.66.159.241	United States	AS13335CLOUDFLARENET
4	54.210.37.242	Ashburn, Virginia, United States	AS14618AMAZON-AES
4	52.20.29.119	Ashburn, Virginia, United States	AS14618AMAZON-AES
4	98.86.42.196	Ashburn, Virginia, United States	AS14618AMAZON-AES
4	142.250.186.68	United States	AS15169GOOGLE
67	14	-	-

Security Scan Report: www.pennymac.com

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies11

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Other Hashes

Scan History