veoza.se
HTML metadata
Technology
- CDN
- Amazon CloudFront
- Server
- Apache
Third-party hosts loaded (3)
- assets.astellas.com×4
- assets.adobedtm.com×1
- rum.hlx.page×1
Contact
- Phone
DNS records live
- NS
-
- ns1.markmonitor.com
- ns2.markmonitor.com
- ns3.markmonitor.com
- ns4.markmonitor.com
- ns5.markmonitor.com
- ns6.markmonitor.com
- ns7.markmonitor.com
- TXT
-
qttfk4799y4mfbd3n3yt9r438j4wy6l6
Email authentication no MX
- SPF
- not published
- DMARC
- not published
- DKIM
- no key found at common selectors
Certificate (current)
DigiCert Global G2 TLS RSA SHA256 2020 CA1
Expires in 135 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
default-src 'self' *.dotomi.com *.scene7.com *.astellas.com; script-src 'self' activitymap.adobe.com *.dotomi.com tr.contextweb.com c82308.csd.dotomi.com www.facebook.com js.adsrvr.org thrtle.com insight.adsrvr.org assets.adobedtm.com analytics.tiktok.com gateway.zscalerthree.net td.doubleclick.net www.googletagmanager.com bat.bing.com ad.doubleclick.net googleads.g.doubleclick.net dpm.demdex.net www.googleadservices.com *.fls.doubleclick.net bh.contextweb.com astellas.demdex.net cdn.di-capt.com connect.facebook.net cm.everesttech.net *.scene7.com *.astellas.com cdn.cookielaw.org js.pulseinsights.com survey.pulseinsights.com 'unsafe-inline' 'unsafe-eval' blob: data:; object-src 'none' ; connect-src *; font-src * data:; frame-src 'self' login.doccheck.com *.genially.com match.adsrvr.org gateway.zscalerthree.net js.adsrvr.org thrtle.com insight.adsrvr.org www.facebook.com tr.contextweb.com td.doubleclick.net analytics.tiktok.com astellas.demdex.net activitymap.adobe.com *.fls.doubleclick- strict-transport-security
max-age=16070400; includeSubDomains