astellasventure.com
HTML metadata
Technology
- CDN
- Amazon CloudFront
- Server
- Apache
Third-party hosts loaded (3)
- astellas-qa.scene7.com×3
- assets.adobedtm.com×1
- rum.hlx.page×1
Registration
- Registrar
- MarkMonitor Inc.
- Created
- 2005-01-27
- Expires
- 2027-01-27 252 days left
- Updated
- 2025-01-16
- Name servers
-
- a1-217.akam.net
- a10-67.akam.net
- a13-65.akam.net
- a16-67.akam.net
- a28-64.akam.net
- a7-65.akam.net
DNS records live
- NS
-
- a1-217.akam.net
- a10-67.akam.net
- a13-65.akam.net
- a16-67.akam.net
- a28-64.akam.net
- a7-65.akam.net
- MX
-
- 10 astmxpa1.us.astellas.com
- 20 astmxpa2.us.astellas.com
- TXT
-
4v98s59c5s8kgf7d57ls2w9mqk4ym4tp_e7jmtdu0fo1y4j7dhx4p909l4bham7a
Email authentication weak
- SPF
- not published
- DMARC
- not published
- DKIM
- no key found at common selectors
Certificate (current)
DigiCert Global G2 TLS RSA SHA256 2020 CA1
Expires in 138 days
HTTP security headers
- present
-
- content-security-policy
- x-frame-options
- x-content-type-options
- findings
-
- missing HSTS
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
default-src 'self' *.pmsrv.co *.dotomi.com; script-src 'self' *.typekit.net *.pmsrv.co media.net pmserv.com *.scene7.com *.astellas.com 'unsafe-eval' api.fouanalytics.com *.dotomi.com tr.contextweb.com c82308.csd.dotomi.com assets.adobedtm.com td.doubleclick.net gateway.zscalerthree.net analytics.tiktok.com www.facebook.com insight.adsrvr.org thrtle.com js.adsrvr.org js.pulseinsights.com survey.pulseinsights.com activitymap.adobe.com www.googletagmanager.com bat.bing.com ad.doubleclick.net googleads.g.doubleclick.net dpm.demdex.net www.googleadservices.com *.fls.doubleclick.net bh.contextweb.com cdn.di-capt.com connect.facebook.net astellas.demdex.net cm.everesttech.net cdn.cookielaw.org 'unsafe-inline'; object-src 'none' ; connect-src *; font-src 'self' *.typekit.net * data:; frame-src 'self' login.doccheck.com match.adsrvr.org gateway.zscalerthree.net astellas.demdex.net insight.adsrvr.org *.fls.doubleclick.net td.doubleclick.net tr.contextweb.com thrtle.com analytics.tiktok.com ac