branditscan.com
HTML metadata
Technology
- CDN
- Amazon CloudFront
- Server
- nginx
- Analytics
-
- Google Tag Manager
Third-party hosts loaded (3)
- ui-avatars.com×7
- widget.trustpilot.com×5
- www.googletagmanager.com×1
Social
Contact
- Phone
- Address
- 15 boulevard Montcalm N. CP 73012, J5R 3L4, Candiac, QC, CA
Registration
- Registrar
- GoDaddy.com, LLC
- Created
- 2020-08-08
- Expires
- 2026-08-08 80 days left
- Updated
- 2024-08-09
- Name servers
-
- ns-107.awsdns-13.com
- ns-1078.awsdns-06.org
- ns-1895.awsdns-44.co.uk
- ns-755.awsdns-30.net
DNS records live
- NS
-
- ns-107.awsdns-13.com
- ns-1078.awsdns-06.org
- ns-1895.awsdns-44.co.uk
- ns-755.awsdns-30.net
- MX
-
- 1 smtp.google.com
- TXT
-
Show 6 TXT records
stripe-verification=30daecce2651b40adc97f111c46147c81f502cc4b951235a97445af61169e4a9zoho-verification=zb48091260.zmverify.zoho.comMS=ms92152949google-site-verification=QK1NHDAHHoSFHuIpFSJ93IldF299RSAJGagXR3mDZvAgoogle-site-verification=fzSiDzEKZDzqFWH4LgactQLhHSu_LrjgfIWjhMC3bm4include:secureserver.net NETORGFT6959673.onmicrosoft.com -all"
Email authentication strong
- SPF
-
v=spf1 mx include:_spf.mlsend.com include:zoho.com include:amazonses.com include:_spf.google.com include:mail.zendesk.com ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=quarantine; rua=mailto:void@branditscan.com; ruf=mailto:void@branditscan.com; sp=quarantine; adkim=r; aspf=rpolicy: quarantine · sp=quarantine - DKIM
-
- google:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCv31bxAkJs/5GAibEsKQ/htR/z9PDZt/PO/qJxBhx28OtRQ9a75W+XcFnhr1DBF8rx7RngUC919G4jSH+FCy…
selectors probed - google:
Certificate (current)
Amazon RSA 2048 M04
Expires in 203 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- cross-origin-opener-policy
- findings
-
- CSP uses wildcard sources
- missing Permissions Policy
Header values
- referrer-policy
same-origin- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
upgrade-insecure-requests; object-src 'none'; base-uri 'none'; connect-src 'self' *.onesignal.com *.facebook.com *.twitter.com t.co email-assets.branditscan.com *.hsappstatic.net bat.bing.net *.googleadservices.com salesiq.zohopublic.com conf.config-security.com api.config-security.com widget.trustpilot.com pixel-config.reddit.com bat.bing.com events.framer.com translate.googleapis.com *.googleapis.com *.gtranslate.net *.hotjar.io *.hotjar.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.g.doubleclick.net *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.go- strict-transport-security
max-age=31536000; includeSubdomains- cross-origin-opener-policy
same-origin
Links to (9)
- x.com×4
- instagram.com×4
- linkedin.com×4
- livechat.com×4
- reddit.com×4
- tiktok.com×4
- trustpilot.com×4
- google.com×4
- urlinks.ai×2