Site Info - Consumerfinance.gov

JavaScript is a lightweight, object-oriented, cross-platform scripting language, often used within web pages.

Bootstrap is an open source HTML, CSS, and JavaScript framework.

Salesforce is a US-based provider of cloud-based software. This includes the former Demandware brand.

Amazon is a US-based e-commerce and cloud computing provider.

Akamai provides a content delivery network. This includes the former brands Instart Logic and StackPath.

Akamai provides a content delivery network.

CenturyLink is a multinational communications company headquartered in USA, owned by Lumen. This includes its subsidiaries CenturyTel, Savvis, Qwest, Embarq and the former brand Level 3.

Microsoft is a multinational technology company headquartered in USA, also offering email services.

CenturyLink is a multinational communications company headquartered in USA, owned by Lumen. This includes its subsidiaries CenturyTel, Savvis, Qwest, Embarq and the former brand Level 3.

DigiCert is an SSL certificate authority. This includes Verizon, whose Enterprise SSL Business has been acquired by DigiCert.

Sectigo (formerly Comodo CA) is a US-based SSL certificate authority.

SSL.com is an SSL certificate authority.

Google Analytics is a free service to get detailed statistics about the visitors of a website, provided by Google. This includes the Ads conversion tracking and the Floodlight services.

The Google Advertising network consists of AdSense, DoubleClick and other services.

External Cascading Style Sheets define style rules in a separate CSS file.

Embedded Cascading Style Sheets define a set of style rules in a <style> element within a web page.

Session cookies are temporary cookies, which are deleted when the user closes the browser.

Persistent cookies with an expiration time between 1 month and 1 year.

Non-HttpOnly cookies are used in the HTTP protocol and also in client side scripts, which may be a security threat.

Secure cookies are used only via an encrypted connections, which may increase security.

Gzip (GNU zip) is a file compression algorithm.

The Internet Protocol version 6 (IPv6) provides amongst others a vastly larger address space than the preceding version 4. We consider a website to support IPv6 if a 128-bit address is assigned to it, regardless of the content delivered at that address.

HTTP/2 is the second major version of the HTTP network protocol.

HTTP Strict Transport Security (HSTS) defines a mechanism enabling web sites to declare themselves accessible only via secure connections.

The websites redirects visitors to its www subdomain, e.g. from example.com to www.example.com.

The websites redirects visitors to use SSL encryption, e.g. from http://example.com/ to https://example.com/.

HTML5 is the fifth revision of the HTML standard.

UTF-8 (8-bit Unicode Transformation Format) is a variable-length character encoding for Unicode, which is backwards compatible with ASCII.

United States Government