viaplaygroup.com

HTML metadata

Title

Homepage | Viaplay Corp

Description

Viaplay Group is the Nordic region’s leading entertainment provider. From live sports to movies to series to music and our own original shows – we enable content experiences everywhere and on any device.

Language

en

Canonical

https://www.viaplaygroup.com/en

Translations

en

Open Graph

url: https://www.viaplaygroup.com/en/homepage
title: Homepage
site name: Viaplay Corp

Technology

CDN: Cloudflare

Analytics

Cloudflare Insights
Google Tag Manager

Third-party hosts loaded (5)

cdn.jsdelivr.net×3
cdnjs.cloudflare.com×2
www.googletagmanager.com×2
irs.tools.investis.com×1
static.cloudflareinsights.com×1

Social

Registration

Registrar

Ascio Technologies, Inc. Danmark - Filial af Ascio technologies, Inc. USA

Created

2021-10-28

Expires

2026-10-28 149 days left

Updated

2025-10-29

Name servers

ns1.fxh42.net
ns2.fxh42.net
ns5.fxh42.net

DNS records live

NS

ns1.fxh42.net
ns2.fxh42.net
ns5.fxh42.net

MX

10 viaplaygroup-com.mail.protection.outlook.com

TXT

Show 13 TXT records

lime-domain-verification=D0D182C252E01A3
_u6wmm97uw2m5lhgl7jo8n20nq38r6r7
d925h55f5dmghv691k25yllby26z2cjr
v=DMARC1; p=none; rua=mailto:dmarc_agg@vali.email
_github-challenge-nentgroup-org0fe8125fa5
_kqnht9p05zw0xd1hhkra8zv08umm98r
DomainVerification=4K4MHCYEYAACI8F57AJL16HLAEUS4X120LOCDI65WQP2X5NLRQ5AN6MCMPFSC358
ibmid=e561baf6-f579-48ac-96fa-9df596f362f3
amazonses:CfJFgRDLuCkhyQbBnZXibaw9ivUVQwSAw/6H+F7NZv4=
vpe=b0334b33
_dmarc v=DMARC1; p=none;
datadome-domain-verify=XuY2WhVko3NLNtVv7HaT1A56WcOzjc3L
d6cq6ts360s4dw165d3241dj8n7k1vn8

Verified for

Anthropic
Apple
Atlassian
DocuSign
GlobalSign
Google
Microsoft 365
Miro
OneTrust
OpenAI
Zoom

Email authentication partial

SPF

v=spf1 a include:spf.mailanyone.net include:spf.protection.outlook.com include:spf.lianamailer.com ip4:192.176.163.238 ip4:192.176.163.242 include:spf1.emarketeer.com -all

strict (-all)

DMARC

v=DMARC1; p=none;

policy: none (monitoring only)

DKIM

Show 4 DKIM selectors

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3K3S9CGiSZCjq70X32TZp327PLvExPtCXU1Nm7dOKPnIV0tyP38LkWt9VO44tYLf3ZqbXFu6iT5oC/…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8PzH94NPym0e3hN2UQjapm7aF3auscvb0Rl8zlm/6BelV59FsV/yjcL15PR4u4chisPLMU7iKukeNZ…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
s1: v=DKIM1;k=rsa;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgU4b4+Hlrsr2F8vADrMaUUgAEoeUKFxczUKbdlj+FeXeCH+sWozm3L5flUysPtOjpWm9ipzGmgvOaqNQ…

selectors probed

Certificate (current)

GlobalSign GCC R3 DV TLS CA 2020

from 2025-07-15 to 2026-08-16

Expires in 77 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.viaplaygroup.com/en

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self' edge.api.brightcove.com viz.tools.investis.com *.media.brightcove.com cdn.jsdelivr.net dev-api.investisdigital.com api.investisdigital.com dev-assets.investisdigital.com assets.investisdigital.com qaotp.tools.investisdigital.com *.investisdigital.com google-analytics.com cookiemanager.investisdigital.com google-analytics.com * otp.tools.investis.com house-fastly-signed-eu-west-1-prod.brightcovecdn.com malihu.github.io *.googleapis.com *.nr-data.net *.myidx.cloud ; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdnjs.cloudflare.com ict.infinity-tracking.net www.gstatic.com viz.tools.investis.com www.google.com maps.googleapis.com maps.google.com www.linkedin.com ajax.googleapis.com pi.pardot.com bam.nr-data.net *.googletagmanager.com *.google-analytics.com sjs.bizographics.com connect.facebook.net *.jquery.com irs.tools.investis.com *.hotjar.com px.ads.linkedin.com d2wy8f7a9ursnm.cloudfront.net ssl.p.jwpcdn.com js-agent.newrelic.com cdn.jsdelivr.net edge.api.brightco
strict-transport-security: max-age=15552000; includeSubDomains; preload