No Security Risks Detected
This domain appears to be safe and secure
100%
Score
Disclaimer: This assessment is based on automated analysis of publicly available information. Results are for informational purposes only. For critical applications, consult security professionals.
Scan Information
Last checked:November 13, 2025 19:18:58
Scan Complete
Refresh page after 10 minutes
for updated results
Page Information
Target URL
https://oportun.com/wp-content/themes/oportun/dist/apple-touch-icon.png
Page Title
apple-touch-icon.png (128×128)
Status
Active
Host Information
Domain
oportun.com
Server
cloudflare
Country
United States
IP Address
104.17.63.207
ASN Information
13335
CLOUDFLARENET
Technologies
Apple iCloud Mail
Webmail
Salesforce
CRM
Zendesk
Documentation
Sendgrid
Email
HSTS
Security
Dropbox
Digital asset management
+1 more technologies detected
SSL Certificate
HTTPS Enabled
Secure
Certificate Issuer
N/A
Valid From
2025-11-12 19:19:02
Valid Until
2026-11-13 19:19:02
Subject Name
oportun.com
Performance Statistics
2
Total Requests
1
Domains
1
IP Addresses
9.01 KB
Transfer Size
Content Size2.41 KB
HTTP Headers
Accept-Ranges
bytes
Age
637264
CF-Cache-Status
HIT
CF-RAY
99e09e52cfe126ae-SJC
Cache-Control
public, max-age=2592000
Cf-Bgj
imgq:100,h2pri
Cf-Polished
origSize=3973
Connection
keep-alive
Content-Length
2464
Content-Type
image/png
Date
Thu, 13 Nov 2025 19:19:02 GMT
Expires
Sat, 13 Dec 2025 19:19:02 GMT
Server
cloudflare
access-control-allow-origin
*
content-security-policy
object-src 'none'; form-action 'self'; upgrade-insecure-requests; block-all-mixed-content; font-src 'self' data: http://*.wpengine.netdna-cdn.com https://fonts.googleapis.com https://fonts.gstatic.com https://res.cloudinary.com https://*.demdex.net/ https://tr.snapchat.com/ https://*.dedmex.net https://www.facebook.com/; frame-src 'self' https://oportun.com https://api.five9.com/ https://oportundev3.wpengine.com/ https://oportunstg3.wpengine.com/ https://s4desktop.com/ https://login.microsoftonline.com/ https://forms.office.com https://callcenter-oportun.icims.com/ https://technology-oportun.icims.com/ https://retail-oportun.icims.com https://www.youtube.com/ https://careers-oportun.icims.com/ https://app.five9.com/ https://player.vimeo.com https://collect.tealiumiq.com https://hackerone.com https://www.google.com https://*.medallia.com https://app.vwo.com https://td.doubleclick.net https://www.googletagmanager.com/; img-src 'self' data: blob: https://www.gstatic.com https://oportun.com https://firstlook.oportun.com http://*.wpengine.netdna-cdn.com https://lh3.googleusercontent.com https://app.five9.com/ https://maps.googleapis.com https://maps.gstatic.com https://googleads.g.doubleclick.net https://www.google.com https://collect.tealiumiq.com https://cx.atdmt.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://secure.gravatar.com https://www.google-analytics.com https://i.vimeocdn.com https://www.google.co.in https://www.facebook.com https://r1.visualwebsiteoptimizer.com https://dev.visualwebsiteoptimizer.com https://*.visualwebsiteoptimizer.com https://www.google.ie https://res.cloudinary.com https://s.w.org https://*.kampyle.com https://heapanalytics.com https://user-images.trustpilot.com https://*.prod.bidr.io https://d21y75miwcfqoq.cloudfront.net https://*.adobedtm.com https://*.demdex.net https://smetrics.westernunion.com https://metrics.westernunion.com https://*.westernunion.com https://bat.bing.com/ https://collector-40051.us.tvsquared.com https://cm.everesttech.net/; media-src 'self' https://oportun.com https://oportundev3.wpengine.com/ https://oportunstg3.wpengine.com/ https://player.vimeo.com https://res.cloudinary.com https://td.doubleclick.net
etag
"68acd1e1-f85"
feature-policy
camera 'none'; fullscreen 'self'; geolocation *; microphone 'self'
last-modified
Mon, 25 Aug 2025 21:13:05 GMT
referrer-policy
no-referrer-when-downgrade
strict-transport-security
max-age=63072000; includeSubDomains; preload
max-age=31536000
vary
accept
x-content-type-options
nosniff
x-frame-options
SAMEORIGIN
x-xss-protection
1; mode=block
24 headers detected
Technology Stack Analysis
Apple iCloud Mail
Webmail
Apple iCloud Mail is a webmail service provided by Apple, Inc.
Salesforce
CRM
Salesforce is a cloud computing service software (SaaS) that specializes in customer relationship management (CRM).
Zendesk
DocumentationIssue trackers
Zendesk is a cloud-based help desk management solution offering customizable tools to build customer service portal, knowledge base and online communities.
+1 more categories
Sendgrid
Email
SendGrid is a cloud-based email delivery platform for transactional and marketing emails.
HSTS
Security
HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
Dropbox
Digital asset management
No description available
Cloudflare
CDN
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
Website Cookies 1
__cf_bm
.oportun.com
HttpOnly Secure
Value
jVrZRr73lbQCcApsr9GyAK2zTSI9qVrVZk_PDYYcd9w-1763061542.9142425-1.0.1.1-gvzLQGZZKBno7z2se8zRsjm4sApRT2JHgdTjPWhDXfH9arHyQvcZWnOz.UbGSVtLRCCVSo26G6TXQKjceLO_k9vhl_fUYepwApwVl93U2zwhPGWjp2WRiAY3FWl5yL8G
Expires:11/13/2025
External Links 0
Requested Domains 1
oportun.com
Apex domain
Categories
Personal FinanceBusiness & EconomyVideo StreamingEntertainment