fitchratings.com

HTML metadata

Title: Fitch Ratings: Credit Ratings & Analysis For Financial Markets
Description: Fitch Ratings is a leading provider of credit ratings, commentary and research for global capital markets.
Language: en
Generator: Gatsby 4.25.8

Open Graph

url: /
title: Fitch Ratings: Credit Ratings & Analysis For Financial Markets
site name: Fitch Ratings
description: Fitch Ratings is a leading provider of credit ratings, commentary and research for global capital markets.

Technology

CDN: Amazon CloudFront
Server: n
CMS: Gatsby

Analytics

Google Analytics
Google Tag Manager

Third-party hosts loaded (16)

global-assets.fitch.group×7
732-ckh-767.mktoresp.com×1
assets.adobedtm.com×1
cf-images.us-east-1.prod.boltdns.net×1
demdex.net×1
edge.adobedc.net×1
fitchconnect.piwikpro.com×1
house-fastly-signed-us-east-1-prod.brightcovecdn.com×1
manifest.prod.boltdns.net×1
map.brightcove.com×1
munchkin.marketo.net×1
players.brightcove.net×1
px.ads.linkedin.com×1
snap.licdn.com×1
www.google-analytics.com×1
www.googletagmanager.com×1

Social

Registration

Registrar

Network Solutions, LLC

Created

2000-04-07

Expires

2029-04-07 1054 days left

Updated

2026-02-06

Name servers

ns-1310.awsdns-35.org
ns-1628.awsdns-11.co.uk
ns-398.awsdns-49.com
ns-983.awsdns-58.net

DNS records live

NS

ns-1310.awsdns-35.org
ns-1628.awsdns-11.co.uk
ns-398.awsdns-49.com
ns-983.awsdns-58.net

MX

10 mxa-001c1a01.gslb.pphosted.com
10 mxb-001c1a01.gslb.pphosted.com

TXT

Show 24 TXT records

miro-verification=e287737ccdcd3744b61ae2ebb6caf1a48ee88757
cisco-ci-domain-verification=55f2d4250154a46b1bfa81f735637dffc888a902a409a73c026778d981313899
VBCPF1aCfidjQcLZL7RHr+eul8FVN8JEZtKuxc9nRAsMSOu7ezjYFkRwh4AJWUETFIcY0fYTpb2bUU0/fO+iMQ==
ZOOM_verify_G400HY5QRn-0a2JPHEuDPA
smartsheet-site-validation=3GKJUla5Olgu6jZbzHuSwKDa3eOkmbE1
mongodb-site-verification=pEyM2mRJ67ipuM1Y3RRfKVylL5upxhCt
webexdomainverification.1Q93I=809536e1-4ef1-4976-82b9-61b6450bd2b2
google-site-verification=nYQFkfOeZU7AgXX5_RHaD-_JO2ct6F16vJooB8zvVi8
jamf-site-verification=r2dozSjfcYBASYWY-2ULGA
adobe-sign-verification=c71a93d6eec813a38d871deff7f2fc57
atlassian-sending-domain-verification=398192ad-7c7e-4274-94f9-2c7e39a37c47
apple-domain-verification=r0R7g6IdDS89GVML
docusign=a3b85c61-f5e5-4189-bc4e-8d120b47b86a
MS=ms78667889
google-site-verification=1tHvohDH0wtvFNGap2rDuM1uNwFUasJEjjVIpWt-i7A
digicert-verification=_3e4iiv9iyur15nplmhclgxh464uej1u
successfactors-site-verification=ZTk1MTg4NGQ4MDZjY2QxNDA3YTkwNjBkYjI2YWM4MGMyMTdlNzI3MzRkYTNhZGY0YzBhZjY3MDY0Y2VhNDYwMQ==
wiz-domain-verification=f18077501c241ff64479dac2ddcad324ed00a0c6087e4e7a7096b40cf7ba1f39
webexdomainverification.4C675B89C716B136E053AB06FC0A3F65=9bfe63a6-3aee-496a-90e6-d51be5f37ce8
anthropic-domain-verification-1hbpyz=CzjhEqqX57tK78J9qJ4IkSzv0
hj= 2372539-17022022
atlassian-domain-verification=pUNaJ0CSDQKoKLGdC64qeRZBYniN2yPLgSaU7QsmzzoLam5rf9c3JcKWv4ML2IC0
MS=ms36743396
amazonses:B4267OJk0mQd+ha/mmY4zX1ewlQUPbOKpnnT6UO1iOU=

Email authentication strong

SPF

v=spf1 include:spf-001c1a01.pphosted.com ip4:185.28.196.98 ip4:94.236.119.41 include:app.sgizmo.com include:_spf.salesforce.com include:amazonses.com include:_spf.atlassian.net include:_spf-dc12.successfactors.com include:gtmail.fitchratings.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com;fo=1

policy: reject (enforced)

DKIM

s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAye1CTuOLt4UsPra1xUFG3MFisX1p0uSyG2RjO864lcM5wpxrWO43ddrwh/800m54xk8BFPzGSGuA80Yt8y…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDYCgtjj+WInsJqKPW7MzujGcA3wOFuJuqtEoyrfSSiBy14IVy3sBQcAsi1q6sA9p8CjcNl/IdYQZaXdmAgPyyho/…

selectors probed

Certificate (current)

Amazon RSA 2048 M04

from 2026-03-20 to 2026-10-04

Expires in 138 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://www.fitchratings.com/

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
content-security-policy: default-src 'self' *.fitchratings.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' assets.adobedtm.com *.demdex.net edge.adobedc.net cdn.jsdelivr.net *.google.com *.google.co.uk *.google.com.hk *.twitter.com *.googletagmanager.com *.google-analytics.com fitchconnect.piwikpro.com fitchconnect.piwik.pro *.brightcove.net *.brightcove.com munchkin.marketo.net your.fitchratings.com *.evidon.com cdn2.funnelenvy.com script.crazyegg.com *.licdn.com *.clearbitscripts.com *.clearbit.com *.idio.co chart-studio.plotly.com public.flourish.studio app.fitchconnect-stg.com app.fitchconnect.com *.fitch.group *.hotjar.com vjs.zencdn.net *.mktorest.com *.clearbitjs.com *.ads-twitter.com *.googleadservices.com *.linkedin.com *.googlesyndication.com *.doubleclick.net *.bizographics.com *.adsymptotic.com *.linkedin.oribi.io onemark.grazitti.com frontend.cdn.splashthat.com d3m889aznlr23d.cloudfront.net cdn.ketchjs.com global.ketchcdn.com secure.intuitionoperation.com e.infogram.com cdnjs.cloudflare.com;
strict-transport-security: max-age=63072000; includeSubDomains; preload