danacol.com
HTML metadata
Technology
Third-party hosts loaded (3)
- smartmedia.digital4danone.com×11
- static-p72053-e643882.adobeaemcloud.com×2
- cdn.tagcommander.com×1
Contact
- Phone
Registration
- Registrar
- CSC Corporate Domains, Inc.
- Created
- 2004-03-26
- Expires
- 2027-03-26 310 days left
- Updated
- 2026-03-22
- Name servers
-
- dns1.cscdns.net
- dns2.cscdns.net
DNS records live
- NS
-
- dns1.cscdns.net
- dns2.cscdns.net
- MX
-
- 15 custmx.cscdns.net.danacol.com
- TXT
-
google-site-verification=QOuUWZxBWEuxKdwQ-zkZtoikL30kxvmxU5NJZx0c1ak
Email authentication strong
- SPF
-
v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com -allstrict (-all) - DMARC
-
v=DMARC1; p=reject; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.compolicy: reject (enforced) - DKIM
- no key found at common selectors
Certificate (current)
Sectigo Public Server Authentication CA OV R36
Expires in 22 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Permissions Policy
Header values
- referrer-policy
strict-origin- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
default-src 'self'; style-src 'self' *.adobe.com/ *.live.com/ *.adobe.io/ *.scene7.com/ *.adobeaemcloud.com/ *.digital4danone.com/ *.aemcs.digital4danone.com/ *.live2support.com/ *.bootstrapcdn.com/ *.trustcommander.net/ *.zencdn.net/ *.sharethis.com/ *.googleapis.com/ *.google.com/ *.google-analytics.com/ *.analytics.google.com/ *.googletagmanager.com/ 'unsafe-inline'; script-src 'self' *.adobe.com/ https://cdn.jsdelivr.net/ *.algolia.net/ *.algolianet.com/ https://js-agent.newrelic.com/ *.adobe.io/ *.live.com/ *.usercentrics.eu/ *.scene7.com/ https://live2support.com/ *.adobeaemcloud.com/ *.trustcommander.net/ *.tagcommander.com/ *.facebook.net/ *.googleadservices.com/ *.google-analytics.com/ *.sharethis.com *.addthis.com/ *.live2support.com/ *.doubleclick.net/ *.googleapis.com/ *.google.com/ *.digital4danone.com/ *.aemcs.digital4danone.com/ *.addthisedge.com/ *.google-analytics.com/ *.analytics.google.com/ *.googletagmanager.com/ blob: 'unsafe-inline' 'unsafe-eval'; img-src 'self- strict-transport-security
max-age=31536000; includeSubDomains; preload