basf-coatings.com

HTML metadata

Title: Coatings
Description: Get to know one of the leading suppliers of global surface solutions. At BASF Coatings, we are driven by passion and science to always go beyond the surface. We tell a story, where science and aesthetics merge to redefine color and protection of surfaces.
Language: en-US
Canonical: https://www.basf-coatings.com/global/en

Open Graph

url: https://www.basf-coatings.com/global/en
title: Coatings
image:url: /api/imaging/focalarea/16x9/1200x/dam/jcr%3A5a904144-915d-3b20-bce9-cc14f41199ed/basf_surface_solutions_products_1.jpg?vid=fdJ7mENkLGI17oG7IQumdZfT18dnqgMO
description: Get to know one of the leading suppliers of global surface solutions. At BASF Coatings, we are driven by passion and science to always go beyond the surface. We tell a story, where science and aesthetics merge to redefine color and protection of surfaces.

Technology

CDN: Amazon CloudFront

Social

Registration

Registrar

CSC Corporate Domains, Inc.

Created

2002-01-18

Expires

2027-01-18 244 days left

Updated

2026-01-14

Name servers

ns01.basf.com
ns02.basf.com

DNS records live

NS

ns01.basf.com
ns02.basf.com

TXT

Show 9 TXT records

_globalsign-domain-verification=pzgTYZtYhYTHSi1EwFNNgDFS8UJtAJJ9OZt0iYqVvR
_pnt8jdvc9vnopu91q3egdeet3lflnd4
google-site-verification=JTp2P_-88JJg4otPFJHIfVV8DPxcY6rET77GOrST-Ww
google-site-verification=_8RsgmgbQv0usRQ9fGyl1UG3HgCX8k3z0Wp0PsE2n8U
rzw9rn8zc1jngfkw4nfxqzt1tkcbt4dr
wlsfvf8hm4h2j9chdfwxj6q4b0ycm0gm
20tzlplhvyjvhf5y7gkqpqzd4hj654kx
5x9s65kq2vm4wg7fsnh0yg1b9kt2kgh5
_eu7iuc93fdkb1qi0lzri1trfdut28gm

Email authentication no MX

SPF: not published
DMARC: v=DMARC1; p=reject; rua=mailto:dmarc_other@basf.com
policy: reject (enforced)
DKIM: no key found at common selectors

Certificate (current)

Amazon RSA 2048 M01

from 2026-05-05 to 2026-11-19

Expires in 184 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://www.basf-coatings.com/global/en

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
content-security-policy: child-src blob:; connect-src 'self' 'unsafe-inline' https:; default-src 'self'; font-src 'self' data: https://*.wcms.basf.com; frame-ancestors https://*.wcms.basf.com; frame-src https://* blob:; img-src 'self' data: https://*.basf.com https://assets.dcp-storefront.basf.com https://cdn.cookielaw.org https://collect.tealiumiq.com https://platform.b4u-cloud.de *.kampyle.com *.medallia.eu *.qualtrics.com *.facebook.com https://maps.gstatic.com/mapfiles/ https://maps.googleapis.com/maps/; media-src 'self' blob: https://*.wcms.basf.com; object-src 'none'; script-src 'wasm-unsafe-eval' 'unsafe-inline'; script-src-elem 'self' https: 'sha256-ttfnBjqp3Wtmn9FUPKkR3GLb0D3xMFCg7QcjYux8Y+o='; style-src 'unsafe-inline' 'self'; style-src-elem 'self' 'unsafe-inline' https://*.wcms.basf.com https://player.youku.com https://platform.b4u-cloud.de https://privacyportal-eu-cdn.onetrust.com; worker-src blob:
strict-transport-security: max-age=63072000; includeSubDomains; preload