aam.com

HTML metadata

Title: American Axle & Manufacturing | Delivering Power
Description: As a leading global Tier 1 Automotive and Mobility Supplier, AAM designs, engineers and manufactures Driveline and Metal Forming technologies to support electric, hybrid and internal combustion vehicles.
Language: en
Generator: Sitefinity 14.4.8150.0 DX
Canonical: https://www.aam.com

Technology

CDN: Azure Front Door
ASP.NET: 4.0.30319

Analytics

Google Tag Manager

Cookie consent

Cookiebot

Social widgets

Vimeo Embed

Third-party hosts loaded (5)

cdnjs.cloudflare.com×3
player.vimeo.com×2
consent.cookiebot.com×1
www.facebook.com×1
www.googletagmanager.com×1

Social

Contact

Phone

48211-1198

Registration

Registrar

CSC Corporate Domains, Inc.

Created

1997-09-12

Expires

2026-09-11 98 days left

Updated

2025-09-07

Name servers

pdns1.cscdns.net
pdns2.cscdns.net

DNS records live

NS

pdns1.cscdns.net
pdns2.cscdns.net

MX

0 aam-com.mail.protection.outlook.com

TXT

Show 7 TXT records

OMU42cCD4TT4MKJDEuk6XQ4JRdvHySccbfiJWSZerUMZO8B004YuK7XvVHSwSOjEQGEboC0ff8TIgEBUmm7E3A==
hpe-greenlake-domain-verification=61717a3570784763583570764572454d4231795a4178795338586d7338687755
_in81etjr57s9h8vj3gz7fhbqwh9ljrh
717e0659-42c2-459a-85b6-492fa009d6a4
62F94D94B252A37A8DBFF7 50EDBA2565E00E6DD8
5PVEHnh2rXKuvRY6OGn/kvrsWIffTNMubnOsblwZ0sA=
autodesk-domain-verification=1nDydcy6CryaR7dDt2EX

Verified for

Apple
Atlassian

Email authentication strong

SPF

v=spf1 include:spf.protection.outlook.com include:1xz5kjjra.spf.checkpoint-spf.com include:spfa.cpmails.com ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; fo=1; ruf=mailto:americanaxlemanufacturing@us.cp-dmarc.com; rua=mailto:americanaxlemanufacturing@us.cp-dmarc.com; aspf=r;

policy: quarantine

DKIM

Show 4 DKIM selectors

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCdizSoHyAaTi+3tYjBGbzBL2RA58SHAmqKejFmfNw5Xe6uSWCB8yO3Po9gvLNAzB6JmSNoTUpV1ZOR9lIa9u…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJA0MDghn0n0YR+x8dhAKsrvTdQ/UUlSp85yVm76Vi1B0pwSAfi0eN2qPA9fg6Y7QnKr6x3LEeZLLT…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA50oZwNixKrCAxd9QiIRSegT7z2eg4u8fLhTMfeSnfRbDp8t7M7s7t40EaOe8UFPhFFBfzKzi6vr/uaVqQg…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCas3gkEGogKc2MtExyWkFl0+xOcM86rR6EhxNu3m1GNiiDquIF5e01Pea/BpW/JC/xQAu87fZ+e/82PJe7q+bHdF…

selectors probed

Certificate (current)

GeoTrust TLS RSA CA G1

from 2026-02-16 to 2026-08-17

Expires in 73 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.aam.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self' *.acsbapp.com acsbapp.com; script-src 'self' *.googleapis.com *.gstatic.com www.google.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://*.googletagmanager.com *.cookiebot.com *.facebook.net *.google-analytics.com *.googletagmanager.com *.twitter.com *.vo.msecnd.net acsbapp.com ajax.googleapis.com cdn.datatables.net cdnjs.cloudflare.com maps.googleapis.com player.vimeo.com s.ytimg.com twimg.com www.youtube.com cdn.ampproject.org 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.googleapis.com *.gstatic.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com platform.twitter.com/css/ *.twimg.com cdn.datatables.net cdn.insight.sitefinity.com dec.azureedge.net fast.fonts.net fonts.googleapis.com platform.twitter.com 'unsafe-inline'; img-src '
strict-transport-security: max-age=31536000; includeSubDomains