realmjoin.com

HTML metadata

Title: RealmJoin: Cloud-Based Software Distribution | RealmJoin
Description: We have been helping organizations to leverage Microsoft 365 to build a 100 % cloud-based environment with IntuneWin, MSIX and Chocolatey application lifecycle, LAPS, Runbook Management and Automation.
Language: en
Canonical: https://www.realmjoin.com/

Open Graph

url: https://www.realmjoin.com/
title: RealmJoin: Cloud-Based Software Distribution
locale: en
site name: RealmJoin
description: We have been helping organizations to leverage Microsoft 365 to build a 100 % cloud-based environment with IntuneWin, MSIX and Chocolatey application lifecycle, LAPS, Runbook Management and Automation.

Technology

CDN: Cloudflare
CMS: Nuxt
JS framework: Nuxt

Analytics

Cloudflare Insights

Third-party hosts loaded (4)

res.cloudinary.com×51
i1.ytimg.com×6
gdpr.c4a8.net×2
static.cloudflareinsights.com×1

Social

Contact

Email

Registration

Registrar

GoDaddy.com, LLC

Created

2012-02-20

Expires

2027-02-20 264 days left

Updated

2026-01-22

Name servers

ns1-03.azure-dns.com
ns2-03.azure-dns.net
ns3-03.azure-dns.org
ns4-03.azure-dns.info

DNS records live

NS

ns1-03.azure-dns.com
ns2-03.azure-dns.net
ns3-03.azure-dns.org
ns4-03.azure-dns.info

MX

1 smtp.google.com

TXT

www-realmjoin-com.azurewebsites.net

Verified for

Google

Email authentication strong

SPF: v=spf1 include:spf.mandrillapp.com include:fdspfeuc.freshemail.io include:amazonses.com ~all
softfail (~all)
DMARC: v=DMARC1; p=reject; sp=reject; rua=mailto:re+2f9e47827e29@inbound.dmarcdigests.com; adkim=s; aspf=r
policy: reject (enforced) · sp=reject
DKIM: no key found at common selectors

Certificate (current)

ZeroSSL RSA Domain Secure Site CA

from 2026-03-21 to 2026-06-20

Expires in 19 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.realmjoin.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: NOSNIFF
content-security-policy: default-src 'self'; base-uri 'self'; font-src 'self' data: *.cloudfront.net; form-action 'self'; img-src 'self' data: res.cloudinary.com i1.ytimg.com; object-src 'none'; style-src 'self' https: 'unsafe-inline'; script-src-attr 'self' 'unsafe-inline'; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.youtube.com *.youtube-nocookie.com *.cloudfront.net *.cloudcannon.com ajax.googleapis.com *.googletagmanager.com gdpr.c4a8.net *.googleadservices.com *.googlesyndication.com *.doubleclick.net *.licdn.com static.cloudflareinsights.com; frame-src *.youtube.com *.youtube-nocookie.com *.googlesyndication.com; media-src 'self'; connect-src 'self' *.google-analytics.com gdpr.c4a8.net cloudflareinsights.com
strict-transport-security: max-age=31536000; includeSubDomains; preload