lyondellbasell.com

HTML metadata

Title: LyondellBasell (LYB)
Description: LyondellBasell creates solutions for everyday sustainable living as the global chemical industry leader & leading polymer producer.
Language: en
Canonical: https://www.lyondellbasell.com/en/

Open Graph

title: LyondellBasell (LYB)
description: LyondellBasell creates solutions for everyday sustainable living as the global chemical industry leader & leading polymer producer.

Technology

CDN: Cloudflare

Analytics

Google Tag Manager

Cookie consent

OneTrust

Third-party hosts loaded (4)

cdn.cookielaw.org×2
play.vidyard.com×1
www.google.com×1
www.googletagmanager.com×1

Social

Registration

Registrar

MarkMonitor Inc.

Created

2007-10-23

Expires

2027-10-23 521 days left

Updated

2025-09-21

Name servers

ns1-03.azure-dns.com
ns2-03.azure-dns.net
ns3-03.azure-dns.org
ns4-03.azure-dns.info

DNS records live

NS

ns1-03.azure-dns.com
ns2-03.azure-dns.net
ns3-03.azure-dns.org
ns4-03.azure-dns.info

MX

10 lyondellbasell-com.mail.protection.outlook.com

TXT

Show 15 TXT records

msfpkey=4u7w5e8gz9imp417xfx43n9iy
mindmanager-verification=69dd6197020d7978f49961cf22664af600c42a46fa3299c5c0bd0f3679964e22
google-site-verification=NXz55V2vDLwcMAPdRutBqFP_FwwgYNqeMHgaYj1Qz6c
apple-domain-verification=gAwcnGedfn7mdHUC
onetrust-domain-verification=4138f1a1b755439d982dc523b9c38219
cisco-ci-domain-verification=41e53b5d84a2e05ce16cccae2dbd5a1fbb79b455a17a9dc744130e374f4f7f2c
google-site-verification=H8m5JgCcFrngVohRd559BsKhgL3M6xJFhgGwhqI2fBw
smartsheet-site-validation=lM8-lkvTab-A2HSCOKVFrYkPuwJw0I5j
logmein-domain-confirmation
docusign=4d56e503-9beb-4117-9639-2ffb3b310957
onetrust-domain-verification=e4635af0ceac409c800454390c084926
docusign=6434ad5d-46d5-463a-8ad8-3b67daf52648
PDYjIMGSfELYVmNaRyZwq3g5ExoFuWVYUSoEOKtg0r60/NL7D5fJUjgL8Sib7Rp6PcA7KZaBDVtzSFCrkPiGyw==
logmein-verification-code=1d12339b-b0a1-4c66-b309-9ab0e76de4b9
autodesk-domain-verification=X1EZLRAe-Zn0_3gfCznL

Email authentication strong

SPF

v=spf1 include:spf.protection.outlook.com include:_spf.cmail.ondemand.com include:_spf.salesforce.com ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; pct=100

policy: quarantine

DKIM

Show 4 DKIM selectors

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtqcSk91Fzw2JwQo9RR9+JHoY6iJXRKS14dRMesVr+eNbV6biZOLYlvtEFmb4f2bcLCj8knPvCwEiO…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQfsgFG0jZ0EwnSNp/4sH/AxFzLlLGryBNmrxixRFzNIZnxAB3npQv0KLUsApkExysD1jShkn6flqJ…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SFXZflALkMjd/80g7W5eMB0sAjXLYSo4EsV/wMak6r5RBcTWHke2u9MI4E9tIfUOjtNhECIQuUVntrBR4…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJJLiLBDSOYdPPY7HRuIzkJsJTPMnosI7o4jo4ZGru587St2AUy+fCJN5NWv+Fc/a8A3ZFDNvaN1TMsgXz…

selectors probed

Certificate (current)

Entrust OV TLS Issuing RSA CA 2

from 2025-10-13 to 2026-10-14

Expires in 147 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.lyondellbasell.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
cross-origin-opener-policy
cross-origin-resource-policy

findings

CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: script-src 'sha256-pn62HST5cu7nkOLnnKPuhAkgfigvu0o2XI9aYuXIHR8=' 'sha256-MzEFhcIQQ6QYm2RWmf+K0dsJ4IuM6hHJowhNdysLDlE=' 'sha256-/B+zItg1uJKtHArLHdYPcPR2XqTH9qTQtj6DXsBv+os=' 'sha256-OirZiB3ZwR6+XiNFGjc2bqIHNE1c/+F4JssOCAFsRUA=' 'sha256-WpZzD9mqG/GGndYzYEdMHAR+84H8GBfCAPTwTEydydU=' 'sha256-lbAjSebS23ogDPB1f9RQFqIXV18LNb/pSILd8AUaybw=' 'self' https://scripts.clarity.ms/ https://*.azure.com/ https://www.clarity.ms/ https://d1igp3oop3iho5.cloudfront.net/ https://*.episerver.net/ https://play.vidyard.com/ https://cdn.jsdelivr.net/npm/feather-icons@4.29.0/dist/feather.min.js https://cdn.jsdelivr.net/npm/bootstrap@5.2.3/dist/js/bootstrap.bundle.min.js https://www.gstatic.com/ https://www.google.com/ https://s.usea01.idio.episerver.net https://manager.usea01.idio.episerver.net 'unsafe-eval' https://platform.twitter.com/widgets.js https://www.googletagmanager.com 'sha256-2pCDpw9joJa+iTmAB1o9YH+N9W9776FEM6Nmplj7NCQ=' 'sha256-ka3xBp9kPEdafj6sE97HFhpJY8ZN+Aj6Fv/z1KyWvBQ=' 'sha256-Jx32NwoG/k6nRFSUcw
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: cross-origin