aafintl.com

HTML metadata

Title: AAF International
Language: en
Canonical: https://www.aafintl.com

Open Graph

url: https://www.aafintl.com
title: AAF International
site name: AAF International

Technology

CDN: Cloudflare

Analytics

Google Tag Manager

Third-party hosts loaded (2)

res.cloudinary.com×5
www.googletagmanager.com×1

Registration

Registrar

Network Solutions, LLC

Created

1997-02-20

Expires

2027-02-21 278 days left

Updated

2025-12-23

Name servers

ns1-05.azure-dns.com
ns2-05.azure-dns.net
ns3-05.azure-dns.org
ns4-05.azure-dns.info

DNS records live

NS

ns1-05.azure-dns.com
ns2-05.azure-dns.net
ns3-05.azure-dns.org
ns4-05.azure-dns.info

MX

10 d8805a.ess.barracudanetworks.com
10 d8805b.ess.barracudanetworks.com

TXT

Show 5 TXT records

docusign=9fcd2bed-5a4c-4809-90e5-c353938f2e46
apple-domain-verification=lElhzj46VARR6Lna
google-site-verification=SjjcQa7xKoVINMu1dnysVXDjKluBDqD9n5_hPUVXZUA
atlassian-domain-verification=IFjzA3gMOIK10yQf82bH/SShhtcrk0egAavQNqAfqxWdn1stLw0h6HY1mFTbhl8L
cisco-ci-domain-verification=515db813fdd094a523a03ad4c074b21f31ef3eddd3938a57d68a16f18c8692b

Email authentication strong

SPF

v=spf1 mx ip4:206.196.12.17/28 ip4:35.80.141.6 ip4:44.229.121.55 ip4:148.59.100.16/28 include:eskerondemand.com include:_spf.salesforce.com include:spf.protection.outlook.com ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; rua=mailto:5x5od0bgtm@rua.powerdmarc.com; ruf=mailto:5x5od0bgtm@ruf.powerdmarc.com; pct=100; fo=1;

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrvuIOzc8V60Dih7V3I95zxW++4TaiDEEKOL/Vt7prTkC7gLXlt+aPyBtG/keZXa+YYsfR7ffXeyWO…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzybQaI5K+bICZJpLncXcs5Xana7+cjFyBSJ6JGhIxDFwKy1+ZstJVQESTm+Z2iDpKvXwRMdOSGX5iP…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wF6dlXqRAcUApSdttmTIY1a8pHQj/uLGhsJ/sZWIQtKZrMwen+Wjull50RdwrOq+G6LybmsSI+fQEcjFk…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDjLNib73PGrzOStAzk9mhHteL3LA3KvEtgqsoZUkgIQe28RBOHPJ7hHBJj1RkBQJRc2VhUd/SXhv8YQKfTBp5Y7q…
smtpapi: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPtW5iwpXVPiH5FzJ7Nrl8USzuY9zqqzjE0D1r04xDN6qwziDnmgcFNNfMewVKN2D1O+2J9N14hRprzByFwfQW76…

selectors probed

Certificate (current)

WE1

from 2026-04-05 to 2026-07-04

Expires in 46 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.aafintl.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src *.googleapis.com *.gstatic.com www.google.com apis.google.com *.google-analytics.com connect.facebook.net ajax.aspnetcdn.com platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js cdnjs.cloudflare.com https://www.youtube.com/iframe_api https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com js.hs-scripts.com js.hs-analytics.net *.en25.com cdn.ampproject.org *.msecnd.net *.cloudinary.com *.mapbox.com *.cookieyes.com cdn-cookieyes.com *.googletagmanager.com *.google.com *.hotjar.com *.zoominfo.com api.swiftype.com https://js.hubspot.com https://js.hs-banner.com https://js.hsleadflows.net *.hscollectedforms.net *.hubspot.com https://bat.bing.com/bat.js https://www.clarity.ms/ https://googleads.g.doubleclick.net/ https://bat.bing.com/p/action/187177432.js https://www.youtube.com/s/player/ *.convertexperiments.com https://click.lin
strict-transport-security: max-age=31536000; preload

Links to (1)

daikin.com×1