digitiva.com
HTML metadata
Technology
- CDN
- Amazon CloudFront
- Server
- Apache
Third-party hosts loaded (4)
- assets.adobedtm.com×1
- assets.astellas.com×1
- rum.hlx.page×1
- www.digitiva.net×1
Contact
- Phone
Registration
- Registrar
- MarkMonitor Inc.
- Created
- 2020-03-08
- Expires
- 2027-03-08 277 days left
- Updated
- 2026-02-04
- Name servers
-
- ns1.markmonitor.com
- ns2.markmonitor.com
- ns3.markmonitor.com
- ns4.markmonitor.com
- ns5.markmonitor.com
- ns6.markmonitor.com
- ns7.markmonitor.com
DNS records live
- NS
-
- ns1.markmonitor.com
- ns2.markmonitor.com
- ns3.markmonitor.com
- ns4.markmonitor.com
- ns5.markmonitor.com
- ns6.markmonitor.com
- ns7.markmonitor.com
- MX
-
- 10 mxa.mailgun.org
- 10 mxb.mailgun.org
- TXT
-
kqp7qfjksfnkrq43vhbhp3oh77831xn7jzyx4ttmhb96dd4zdn2fyzdzst
- Verified for
-
Email authentication weak
- SPF
-
v=spf1 include:mailgun.org ~allsoftfail (~all) - DMARC
- not published
- DKIM
-
- k1:
k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDu9198x2KWsh3l87Cdjp3lfBz9mriV/Pa+MBHVRSJgoM7HUn8/Qs5xUBt41pftgYGpSoeIyXyje0NFVUUGB9DU3wV1SvU…
selectors probed - k1:
Certificate (current)
DigiCert Global G2 TLS RSA SHA256 2020 CA1
Expires in 41 days
HTTP security headers
- present
-
- content-security-policy
- x-frame-options
- x-content-type-options
- findings
-
- missing HSTS
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
default-src 'self' *.pmsrv.co *.dotomi.com; script-src 'self' *.typekit.net *.pmsrv.co media.net pmserv.com *.scene7.com *.astellas.com 'unsafe-eval' api.fouanalytics.com *.dotomi.com tr.contextweb.com c82308.csd.dotomi.com assets.adobedtm.com td.doubleclick.net gateway.zscalerthree.net analytics.tiktok.com www.facebook.com insight.adsrvr.org thrtle.com js.adsrvr.org js.pulseinsights.com survey.pulseinsights.com activitymap.adobe.com www.googletagmanager.com bat.bing.com ad.doubleclick.net googleads.g.doubleclick.net dpm.demdex.net www.googleadservices.com *.fls.doubleclick.net bh.contextweb.com cdn.di-capt.com connect.facebook.net astellas.demdex.net cm.everesttech.net cdn.cookielaw.org js.hs-scripts.com js.hs-analytics.net js.hscollectedforms.net js.hs-banner.com 'unsafe-inline'; object-src 'none' ; connect-src *; font-src 'self' *.typekit.net * data:; frame-src 'self' login.doccheck.com match.adsrvr.org gateway.zscalerthree.net astellas.demdex.net insight.adsrvr.org *.fls.doublecl