indexo.dev

mydawa.com

.com crawl

First seen 2026-06-01 · Last seen 2026-06-01 · ok HTTP/1.1 200 2224 ms crawled 2026-06-02

US · 192.124.249.55 · AS30148 Sucuri

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title
MYDAWA | Most Trusted Online Pharmacy in Kenya
Description
MYDAWA - Kenya's most trusted online pharmacy. Order medicines, healthcare products, and get professional consultation online. Fast delivery across Kenya.
Language
en
Canonical
https://mydawa.com/

Open Graph

url
https://mydawa.com/
title
MYDAWA - Most Trusted Online Pharmacy in Kenya
locale
en_KE
site name
MYDAWA
description
Kenya's most trusted online pharmacy for medicines and healthcare products.

Technology

Server
Sucuri
Analytics
  • Google Tag Manager
Third-party hosts loaded (8)
  • cdn.mydawa.store×73
  • media.gettyimages.com×61
  • storagemydawadocsprod.blob.core.windows.net×32
  • cdn.jsdelivr.net×3
  • maps.googleapis.com×1
  • unpkg.com×1
  • www.facebook.com×1
  • www.googletagmanager.com×1

Registration

Registrar
Amazon Registrar, Inc.
Created
2010-12-29
Expires
2026-12-29 208 days left
Updated
2026-05-14
Name servers
  • adel.ns.cloudflare.com
  • jarred.ns.cloudflare.com

DNS records live

NS
  • adel.ns.cloudflare.com
  • jarred.ns.cloudflare.com
MX
  • 0 mydawa-com.mail.protection.outlook.com
TXT
Show 6 TXT records
  • 1761922mydawa669361
  • 24wmpytj12lcw3jt3629bqd59ycnr18q
  • 65v74cc9ft0h3hzl3j19hhwpm6l9ddmv
  • _upkcuntf85me029jim8qborvih7qttx
  • klaviyo-site-verification=JT2yfV
  • mwm45lygxyrsvcqmbv4pfh8ngrkqb6g2
Verified for
  • Google
  • Meta
  • Microsoft

Email authentication partial

SPF
v=spf1 include:spf.protection.outlook.com include:spf.emailsignatures365.com include:spf-westeu.emailsignatures365.com include:sendgrid.net -all
strict (-all)
DMARC
v=DMARC1; p=none; rua=mailto:info@mydawa.com; ruf=mailto:info@mydawa.com; fo=1
policy: none (monitoring only)
DKIM
  • k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
  • s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxc780ePVTtK6v55zBacHnjgguhm02hZ/40a8fpYVjgi6E968rWSCBn0rZbZnfqxG9ZrVli0oU02NfOGH7Z…
  • s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZ0wbK1QVyfhIyrYNdzCuQcWNEAgwFPOfgWHiPlBokgStqhRp3Uo5Z4jEx6hBTff3psUBdsqWcT5ls8g6hDfx3z6…
selectors probed

Certificate (current)

Starfield Secure Certificate Authority - G2
from 2026-05-28 to 2026-08-26
Expires in 84 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://mydawa.com/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
  • cross-origin-opener-policy
  • cross-origin-embedder-policy
  • cross-origin-resource-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
Header values
referrer-policy
strict-origin-when-cross-origin
x-frame-options
DENY
permissions-policy
geolocation=(self), microphone=(), camera=(), payment=(), usb=()
x-content-type-options
nosniff
content-security-policy
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://www.gstatic.com https://maps.googleapis.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://unpkg.com https://*.clarity.ms https://connect.facebook.net https://cdn.moengage.com https://cdn.mydawa.store https://storagemydawadocuments.blob.core.windows.net https://storagemydawadocsprod.blob.core.windows.net https://www.googletagmanager.com https://tagmanager.google.com https://www.google-analytics.com https://js.appboycdn.com https://snap.licdn.com https://secure.quantserve.com https://*.quantcount.com https://rules.quantcount.com https://static.klaviyo.com https://*.klaviyo.com https://analytics.tiktok.com https://*.tiktok.com https://googleads.g.doubleclick.net https://*.doubleclick.net https://static.criteo.net https://*.criteo.net https://sslwidget.criteo.com https://*.criteo.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com ht
strict-transport-security
max-age=31536000; includeSubDomains; preload
cross-origin-opener-policy
same-origin
cross-origin-embedder-policy
unsafe-none
cross-origin-resource-policy
cross-origin

Links to (2)

Linked from (1)