basf.com
Our aspiration is to grow profitably and create value for society ► This is how we create chemistry for a sustainable future
At a glance
- Category
- Industry & Manufacturing
- Language
- English
- Paid-content signal
- No paid content foundObserved
- Registered
- Unknown
- Hosting
- Amazon CloudFrontInferred
- HTTPS certificate trusted
- UnknownObserved
- Last updated
Related questions
More questions →What is basf.com?
Does basf.com offer paid content?
What languages does basf.com support?
How can I visit basf.com?
What are some alternatives to basf.com?
Website Overview
The available information shows a mix of normal operation and configuration gaps. Depending on how the website is used, these gaps may affect secure access or the consistency of its public presentation.
Domain and Registration
Unknown
DNS and Email
Unknown
TLS and Certificates
Unknown
HTTP and Browser Security
The response lacks these common security headers: Permissions-Policy. No X-Powered-By header was found, reducing one common source of backend fingerprinting information. The x-cache, via response header indicates a CDN or caching proxy in the delivery path. No obvious internal addresses or debug information were found in the headers. No CORS permission header was found, so browsers normally restrict cross-origin script access.
Technology Stack Analysis
Unknown
Search and Social Sharing
Unknown
Hosting and Email
Registration details
Unknown
DNS records
Unknown
TLS and certificates
Unknown
HTTP response headers
| Header | Value |
|---|---|
| content-type | text/html; charset=utf-8 |
| strict-transport-security | max-age=63072000; includeSubDomains; preload |
| content-security-policy | child-src blob:; connect-src 'self' 'unsafe-inline' https:; default-src 'self'; font-src 'self' data: https://*.wcms.basf.com; frame-ancestors https://*.wcms.basf.com https://app.datadoghq.eu; frame-src https://* blob:; img-src 'self' data: https://*.basf.com https://assets.dcp-storefront.basf.com https://cdn.cookielaw.org https://collect.tealiumiq.com https://platform.b4u-cloud.de *.kampyle.com *.medallia.eu *.qualtrics.com *.facebook.com https://maps.gstatic.com/mapfiles/ https://maps.googleapis.com/maps/; media-src 'self' blob: https://*.wcms.basf.com; object-src 'none'; script-src 'wasm-unsafe-eval' 'unsafe-inline'; script-src-elem 'self' https: 'sha256-ttfnBjqp3Wtmn9FUPKkR3GLb0D3xMFCg7QcjYux8Y+o='; style-src 'unsafe-inline' 'self'; style-src-elem 'self' 'unsafe-inline' https://*.wcms.basf.com https://player.youku.com https://platform.b4u-cloud.de https://privacyportal-eu-cdn.onetrust.com; worker-src blob: |
| x-content-type-options | nosniff |
| referrer-policy | strict-origin-when-cross-origin |
Identified technologies
Technology stack: Unknown
Pages, Search and Sharing
Unknown
Recent Updates
- HTTP Response Information
- Website profile
- Website Description
- Website Name
- Website profile
- Website Description
- Website Name
User reviews (0)