fitchsolutions.com

HTML metadata

Title: Fitch Solutions | Data, Research & Analytics for Credit Risk & Strategy
Description: Make better-informed credit risk and strategy decisions with reliable data, insightful research, and powerful analytics.
Language: en
Generator: Gatsby 5.15.0
Canonical: https://www.fitchsolutions.com/

Open Graph

url: /
title: Fitch Solutions | Data, Research & Analytics for Credit Risk & Strategy
site name: Fitch Solutions
description: Make better-informed credit risk and strategy decisions with reliable data, insightful research, and powerful analytics.

Technology

CDN: Amazon CloudFront
Server: AmazonS3
CMS: Drupal

Analytics

Google Tag Manager

Third-party hosts loaded (5)

images.ctfassets.net×9
dpm.demdex.net×2
edge.adobedc.net×2
assets.adobedtm.com×1
www.googletagmanager.com×1

Social

Contact

Phone

Registration

Registrar

101domain GRS Limited

Created

2005-11-17

Expires

2026-11-17 181 days left

Updated

2024-09-19

Name servers

ns-1310.awsdns-35.org
ns-1628.awsdns-11.co.uk
ns-398.awsdns-49.com
ns-983.awsdns-58.net

DNS records live

NS

ns-1310.awsdns-35.org
ns-1628.awsdns-11.co.uk
ns-398.awsdns-49.com
ns-983.awsdns-58.net

MX

10 mxa-001c1a01.gslb.pphosted.com
10 mxb-001c1a01.gslb.pphosted.com

TXT

Show 14 TXT records

docusign=74aa915b-eca9-454d-a997-15991d3349ac
miro-verification=e287737ccdcd3744b61ae2ebb6caf1a48ee88757
ZOOM_verify_WzULzDXVSZu59QL5G2SfLA
digicert-verification=_x5x6zmiwsifyo40jm5i74uex5jtjfqx
MS=ms94850726
anthropic-domain-verification-dz2e7r=Cvs96ArK3n47kq5UbQlJtxSC6
2MS=ms20842182
wiz-domain-verification=f18077501c241ff64479dac2ddcad324ed00a0c6087e4e7a7096b40cf7ba1f39
google-site-verification=H3fQ7amGI4mcYbJFW6x_DOG0EQSBn9v3nYkzEHeexsU
h9A46sjXIdsOoutHQJp9fHAONu5/LN+PtPZRo6imqY9zM2Be6+4geVID4TpUrMDz5ouD3+HagAik05h0VfbBHA==
smartsheet-site-validation=VO1fKKPdyyLS-Kb-kfodjpnjRPnZea6z
atlassian-domain-verification=pUNaJ0CSDQKoKLGdC64qeRZBYniN2yPLgSaU7QsmzzoLam5rf9c3JcKWv4ML2IC0
atlassian-sending-domain-verification=5dd04a62-c66f-4349-8eab-899e9c6436b5
webexdomainverification.4C675B89C716B136E053AB06FC0A3F65=e637be9c-cea6-4f1a-9532-03b3dfc95c23

Email authentication strong

SPF

v=spf1 include:spf-001c1a01.pphosted.com ip4:185.28.196.98 ip4:94.236.119.41 include:app.sgizmo.com include:_spf.salesforce.com include:amazonses.com include:_spf.atlassian.net include:gtmail.fitchsolutions.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com;fo=1

policy: reject (enforced)

DKIM

s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAye1CTuOLt4UsPra1xUFG3MFisX1p0uSyG2RjO864lcM5wpxrWO43ddrwh/800m54xk8BFPzGSGuA80Yt8y…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDYCgtjj+WInsJqKPW7MzujGcA3wOFuJuqtEoyrfSSiBy14IVy3sBQcAsi1q6sA9p8CjcNl/IdYQZaXdmAgPyyho/…

selectors probed

Certificate (current)

Amazon RSA 2048 M03

from 2025-06-28 to 2026-07-28

Expires in 69 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.fitchsolutions.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: same-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self' blob: *.fitchsolutions.com; child-src 'self' blob: *.fitchsolutions.com; frame-ancestors 'self' *.fitchsolutions.com *.evidon.com *.hotjar.com *.hotjar.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: assets.adobedtm.com demdex.net edge.adobedc.net ajax.googleapis.com ajax.aspnetcdn.com *.doubleclick.net td.doubleclick.net *.td.doubleclick.net *.fitchsolutions.com *.googleadservices.com googleads.g.doubleclick.net *.linkedin.com *.ads.linkedin.com linkedin.com *.ampproject.org app-lon06.marketo.com unpkg.com cdn.jsdelivr.net cdnjs.cloudflare.com reveal.clearbit.com *.googletagmanager.com players.brightcove.net *.google-analytics.com *.analytics.google.com analytics.google.com *.evidon.com cdn2.funnelenvy.com assets.map.brightcove.com your.fitchsolutions.com snap.licdn.com static.hotjar.com munchkin.marketo.net js.idio.co script.hotjar.com s.idio.co api.idio.co cdn.jsdelivr.net infogram.com e.infogram.com infogram-download-eu.s3.eu-west-1.amazonaws.com infogr
strict-transport-security: max-age=63072000; includeSubdomains; preload