vaillant.com

.com crawl

First seen 2026-05-11 · Last seen 2026-05-17 · ok HTTP/1.1 200 13956 ms crawled 2026-05-17

DE · 195.179.164.10 · AS61157 PlusServer GmbH

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title
Pioneering technology | Vaillant!
Description
The best technologies to make people feel good - it's what we go to work for.
Language
en
Translations
  • en-gb
  • fr-fr

Open Graph

url
http://www.vaillant.com/home/
country-name
en_GB

Technology

Analytics
  • Google Tag Manager

Third-party hosts loaded (3)

  • cdn01l.vaillant-group.com×7
  • cdn.consentmanager.net×1
  • www.googletagmanager.com×1

Registration

Registrar
CSL Computer Service Langenbach GmbH d/b/a joker.com
Created
1996-03-20
Expires
2027-03-21 305 days left
Updated
2026-03-14
Name servers
  • a.prim-ns.de
  • a.sec-ns.net
  • c.sec-ns.de
  • m.sec-ns.de
  • n.sec-ns.net

DNS records live

NS
  • a.prim-ns.de
  • a.sec-ns.net
  • c.sec-ns.de
  • m.sec-ns.de
  • n.sec-ns.net
MX
  • 10 vaillant-com.mail.protection.outlook.com
TXT
Show 12 TXT records
  • _8jcmbcnwdwe6x86x7nmdlmn2wzqplln
  • adobe-idp-site-verification=53d24a82affcaaea37f7e04f49d17cba57aa0e64fa4d4becd72788f6e917f90d
  • umO9Z/kT95xAYxw9HxwvLt5up6IG28FGGGQxZZ1uixWnG2u8ifXr1P+m8v60/4OhsQFBpv6p/XeY2EIjaUEv7w==
  • docusign=80f44a41-efb4-468c-9c09-b04929a9fba1
  • docusign=033eb2f3-aa79-473b-9465-4ec3b6a28b9d
  • MS=ms62551441
  • mandrill_verify.1ouvLPEXBNdIC7Fb1u2cUw
  • google-site-verification=Gz29wQ8U-vKV5DiEE1K4TUVYuZqa1iFquskqvwHzedk
  • asv=89b8ed4e2bf3d60bf02f9c7359a62f95
  • brevo-code:2a5849fea4ba4b792e953f69400cd80c
  • j3rb1rfxpqc388fjnhp7g309f8qhcb9y
  • _globalsign-domain-verification=vj1tEhxXBO33GFTgbIDUgNwI-XzzjF4bA5XpPIY9sx

Email authentication partial

SPF
v=spf1 mx ip4:57.66.132.25 ip4:57.66.132.26 ip4:57.66.132.12 ip4:57.66.211.122 ip4:57.66.211.126 ip4:57.66.211.130 ip4:57.66.211.134 include:spf.protection.outlook.com include:servers.mcsv.net -all
strict (-all)
DMARC
v=DMARC1; p=none; rua=mailto:rua@dmarc.brevo.com
policy: none (monitoring only)
DKIM
Show 4 DKIM selectors
  • k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…
  • k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
  • s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVSHaVJVmw7y77WNpEuXGwCPWFa6vANuoX47EVcsIkBxIBH9raRWAtUObFkfciy0uKcA6Zt/H6y7oqEAC0…
  • s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweaS91bLBwJvca4me2s+EYaYON8athiR55NZz1y331r8Vl4fmrktXyomYs8hfwBMxZ6U0B3Qn/iaFE1JmI…
selectors probed

Certificate (current)

GlobalSign GCC R6 AlphaSSL CA 2025
from 2026-02-05 to 2027-03-09
Expires in 294 days

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.vaillant.com/home/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
Header values
referrer-policy
no-referrer-when-downgrade
x-frame-options
SAMEORIGIN
permissions-policy
geolocation=(self "https://cat.vaillant.it" "https://cat.hermann-saunierduval.it")
x-content-type-options
nosniff
content-security-policy
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: cdn01l.vaillant-group.com *.adalyser.com *.adform.com *.adform.net *.adroll.com *.bing.com *.consentmanager.net *.contentsquare.net *.criteo.com *.doubleclick.net *.facebook.com *.facebook.net *.g.doubleclick.net *.glp8.net *.google.ad *.google.ae *.google.al *.google.am *.google.as *.google.at *.google.az *.google.ba *.google.be *.google.bf *.google.bg *.google.bi *.google.bj *.google.bs *.google.bt *.google.by *.google.ca *.google.cat *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.cl *.google.cm *.google.cn *.google.co.ao *.google.co.bw *.google.co.ck *.google.co.cr *.google.co.id *.google.co.il *.google.co.in *.google.co.jp *.google.co.ke *.google.co.kr *.google.co.ls *.google.co.ma *.google.co.mz *.google.co.nz *.google.co.th *.google.co.tz *.google.co.ug *.google.co.uk *.google.co.uz *.google.co.ve *.google.co.vi *.google.co.za *.google.co.zm *.google.co.zw *.google.com *.google.com.af
strict-transport-security
max-age=63072000; preload

Links to (1)

Linked from (1)