AirPR · Domain Security

Airpr Domain Security

Domain security

Domain security posture for AirPR, probed live across 4 host(s) and 2 registrable domain(s). 4 host(s) serve HTTPS (up to TLSv1.3); 0 advertise HSTS. Email/DNS controls: DNSSEC absent, SPF present, DMARC present (p=quarantine).

CompanyPublic RelationsMedia IntelligenceMedia MonitoringAnalyticsCommunicationsMarketingPR MeasurementOnclusive

Transport & Host Security

onclusive.com
HTTPS: yes · TLS: TLSv1.3 · HSTS: no · cert expires: Oct 1 21:56:45 2026 GMT
airpr.com
HTTPS: yes · TLS: TLSv1.3 · HSTS: no · cert expires: Sep 29 15:02:40 2026 GMT
developer.onclusive.com
HTTPS: yes · TLS: TLSv1.3 · HSTS: no · cert expires: Jan 12 23:59:59 2027 GMT
crawler-api-auth.onclusive.com
HTTPS: yes · TLS: TLSv1.3 · HSTS: no · cert expires: Jan 12 23:59:59 2027 GMT

Domain (DNS/Email) Security

onclusive.com
DNSSEC: no · SPF: yes · DMARC: yes (p=quarantine) · CAA: none
airpr.com
DNSSEC: no · SPF: yes · DMARC: yes (p=quarantine) · CAA: none

Source

Domain Security

airpr-domain-security.yml Raw ↑
generated: '2026-08-13'
method: probed
source: live DNS/TLS/HTTP probes of apis.yml hosts + the developer-portal and auth hosts
note: >-
  Extends the mechanical probe (probe-domain-security.py, which resolves only
  the apis.yml Website host) with the three further hosts contract discovery
  turned up: the legacy airpr.com origin, the AWS-hosted developer portal, and
  the Cognito hosted-UI domain that fronts it. No host in this estate sets HSTS,
  and neither registrable domain is DNSSEC-signed or publishes a CAA record.
hosts:
- host: onclusive.com
  https: true
  tls_version: TLSv1.3
  cert_expires: Oct  1 21:56:45 2026 GMT
  hsts: false
- host: airpr.com
  https: true
  tls_version: TLSv1.3
  cert_expires: Sep 29 15:02:40 2026 GMT
  hsts: false
  note: >-
    Still live and separately certificated, but 301s to onclusive.com. DNS is an
    ALIAS to airpr.com.herokudns.com — the original AirPR Heroku estate.
- host: developer.onclusive.com
  https: true
  tls_version: TLSv1.3
  cert_expires: Jan 12 23:59:59 2027 GMT
  hsts: false
  note: CloudFront in front of an S3 origin (AWS API Gateway Developer Portal)
- host: crawler-api-auth.onclusive.com
  https: true
  tls_version: TLSv1.3
  cert_expires: Jan 12 23:59:59 2027 GMT
  hsts: false
  note: Amazon Cognito hosted UI for user pool us-east-1_F0XmSWr9T
domains:
- domain: onclusive.com
  dnssec: false
  caa: []
  spf: true
  dmarc: true
  dmarc_policy: quarantine
- domain: airpr.com
  dnssec: false
  caa: []
  spf: true
  spf_record: >-
    v=spf1 include:spf.protection.outlook.com include:_spf.google.com
    include:_spf.salesforce.com include:mktomail.com include:sendgrid.net ~all
  dmarc: true
  dmarc_policy: quarantine
  dmarc_record: 'v=DMARC1; p=quarantine; pct=50; rua=mailto:airadmin@airpr.com'
  note: >-
    DMARC is still enforced at only 50% sampling (pct=50) and reports still go
    to an @airpr.com mailbox years after the Onclusive acquisition.

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this
  • find_securityBrowse and filter every security artifact in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This security artifact
curl "https://apis.io/api/v1/security/airpr-domain-security"
All security posture
curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.