altana.com

HTML metadata

Title: Global leader in true specialty chemicals - ALTANA AG
Description: ALTANA AG
Language: en
Generator: TYPO3 CMS

Technology

CDN: Azure Front Door
CMS: Joomla

Third-party hosts loaded (1)

altanacomcdn.azureedge.net×31

Registration

Registrar

InterNetX GmbH

Created

1997-03-25

Expires

2027-03-26 311 days left

Updated

2026-03-27

Name servers

ns1-03.azure-dns.com
ns2-03.azure-dns.net
ns3-03.azure-dns.org
ns4-03.azure-dns.info

DNS records live

NS

ns1-03.azure-dns.com
ns2-03.azure-dns.net
ns3-03.azure-dns.org
ns4-03.azure-dns.info

MX

10 smail-alt-mta1.dts-security.de
10 smail-alt-mta2.dts-security.de

TXT

Show 15 TXT records

nintex.62825e1428ff4600696c43fd
xLexQp5w+FYSsyImL31i9rtrgjinLGbk+LYOupkwwV0bLKEdR0VpYdRPWdA5mPkTqTCp6I/DSUsM6gwCcNoclQ==
smartsheet-site-validation=Znz9N0cII9VE822HmuIIEL17C6i1AEiU
_globalsign-domain-verification=pDRdvk0Qx5cKNpBHxpXvuAXEZOFR5m-elFjrFCsPBM
_globalsign-domain-verification=g-CsiPOzY5tmwqcQOZ1Ahuy64BgtHgiYwZlXPNZIDt
docusign=3a2b4618-b8ba-418b-bc5e-d92458bdd274
globalsign-domain-verification=jLxWfIXVpUAPCddJWCtVFpHzlnBDm8KlCiZm7LLXdz
_e20xnvl113rmv9p0hhc2w98l19x9fls
globalsign-domain-verification=pDRdvk0Qx5cKNpBHxpXvuAXEZOFR5m-elFjrFCsPBM
google-site-verification=vmkbYMx9vBxWD6wF9ABmFUnrDLFbMPV_61BF-pj7x1M
MS=ms88569544
atlassian-domain-verification=6ppPxI0NnPU656g1PinThS2EzhBJpetEIMmPA1ri4fEGfb3jWWqsfW4IOOZIVG73
wws6l55xgvz21883ftf8ts74cwd3ry5f
globalsign-domain-verification=yehm0BI70GGGyEmKtJSLDlk4iEpCe1nRcFO_lDp-rC
miro-verification=cbc456a7b0ca03a2b99d8e42693731aae2d1d954

Email authentication strong

SPF

v=spf1 include:spf.altana.com include:spf.recruitmail.com include:spfhard.crsend.com include:spf.protection.outlook.com include:spf1.dts-security.de include:spf.afas.online include:_spf.salesforce.com include:spf.constantcontact.com include:spf.haihaimail.jp -all

strict (-all)

DMARC

v=DMARC1; p=reject; rua=mailto:dmarc_agg@vali.email;

policy: reject (enforced)

DKIM

Show 5 DKIM selectors

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0sJ95b8gIj9mUnN7WsDdqczFwHZ0q/mHTKcrAuQX9lwVf7E7Ny/HXS9qQR3X7tkwWZX5hgkERa3+R…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9WUXwrJGpxZYtomv1oQUYzHb1NYfcaeJyrY/gRCfAQDd/PLtmmiIm5M2PVkzofv3tMrjz1FEb2ygZ…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzH+OqAGEaXYn30UiUKzNY7t1EFrb7a/pdPR8MHtVRR6neJHDyqnQgkvEQ32wgwukceXp22EHxHc5/7bi89…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6N5gyLszjcXvGvDpJCASXx+filPNouVFwspgttPvUGaKwKdy4Ba+hZqiu4pyVhu97tM4pvBZAjNJzJXgF6…

selectors probed

Certificate (current)

GeoTrust TLS RSA CA G1

from 2026-03-18 to 2026-09-19

Expires in 123 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.altana.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: script-src 'self' 'unsafe-inline' altanacomcdn.azureedge.net altanadecdn.azureedge.net *.azureedge.net *.choice.faktor.io cmp.faktor.mgr.consensu.org *.privacymanager.io *.google.com *.gstatic.com maps.googleapis.com *.recruitmentplatform.com *.etracker.com *.etracker.de *.googletagmanager.com api.signalize.com *.consentmanager.net *.googleapis.com *.easy-feedback.com *.vimeo.com vimeo.com *.stripe.com *.paypal.com; default-src 'self' 'unsafe-inline' maps.googleapis.com maps.gstatic.com *.etracker.com *.etracker.de *.googletagmanager.com api.signalize.com *.google.com *.consentmanager.net *.googleapis.com *.easy-feedback.com *.google-analytics.com *.azureedge.net *.juicer.io *.vimeo.com vimeo.com *.stripe.com *.paypal.com; img-src 'self' data: maps.googleapis.com maps.gstatic.com *.consentmanager.net *.azureedge.net *.vimeo.com; form-action 'self' *.paypal.com;
strict-transport-security: max-age=31536000; includeSubDomains; preload; always;