hexion.com

HTML metadata

Title: Imagine Everything | Hexion
Description: Our purpose is to activate science to change our world.
Language: en-US
Canonical: https://www.hexion.com

Open Graph

title: Imagine Everything
description: Our purpose is to activate science to change our world.

Technology

CDN: Azure Front Door

Fonts

Google Fonts

Third-party hosts loaded (4)

hpwcdneu2p.azureedge.net×14
fonts.googleapis.com×2
fonts.gstatic.com×1
hexion.widen.net×1

Social

Registration

Registrar

CSC Corporate Domains, Inc.

Created

2005-03-04

Expires

2027-02-13 270 days left

Updated

2026-02-09

Name servers

ns0.dnsmadeeasy.com
ns1.dnsmadeeasy.com
ns2.dnsmadeeasy.com
ns3.dnsmadeeasy.com
ns4.dnsmadeeasy.com

DNS records live

NS

ns0.dnsmadeeasy.com
ns1.dnsmadeeasy.com
ns2.dnsmadeeasy.com
ns3.dnsmadeeasy.com
ns4.dnsmadeeasy.com

MX

0 hexion-com.mail.protection.outlook.com

TXT

Show 22 TXT records

miro-verification=8120504fdf320434a7b1107a60c40440f0bc8178
anthropic-domain-verification-198eq6=r9EqRVekMoebZSK3qNnnGSX4H
d365mktkey=3HcZ2Cx5KTROVi7WftJBWapz1Fxgg5BCZyNnhxxtssUx
pardot_388842_*=ac649e8141f2b559cdb4c9e685d2f67ef2b483e74ea8359c456c4f0c688c6559
nNbonOWfDjE8nqpakUWSVI5c5+4ympDUpVuJAX7uQbUJ0bIJ6iI0wqtRYkE67LG+oZbjZHzzYcTjT861uGtrjQ==
jamf-site-verification=qqvMFiyTsiBCZS1Av7egbQ
d365mktkey=agVT69h7Lb9gsw9c4XUxsXYv9NwamCe850xoCH7OxkQx
d365mktkey=nLEx3JJmM46jKk9tNTMInQTaddcOvFwoLIbgH2SenXUx
d365mktkey=7TkrguDjxXxV1z0eGYxHtxYxFq4kj4ttPcWwAzxQo7ox
_tgswc1407a9qm5w4ch3wxue0wjrrs4r
pardot388842=8a7805c0f0c61553a70ea86574dabbd8fb47ef02d3cb2ed9d6e30ed7f8e85df6
google-site-verification=7sh8QhmW4AfyY69jkBd9lLvjMAsOPriCjamfSShCRfM
monday-com-verification=CvcVGDjpuEM9PpQVAJzqvPnHrrVqivjHuMrE9gXrnoQ
apple-domain-verification=2SceUTGhYFxkQnSo
d365mktkey=CM4ZsmBYfDii9cMUexkVd4jfpjaWUjAQIlxCfh0ZoMQx
d365mktkey=sULZgrM5xrHRytxESMixUlxLsu0fREkl1Qh7NVQxEnUx
d365mktkey=oIxi6dxwJSeNXk8uLHJemqQZXDOUKmqBdlIZyx40Vxwx
msfpkey=4eeajt5fa3jh6e7pinlhuutxi
GqwrCzCMJ2iSlCnoZiFs5cukLLHeCpxqcj6K/XnrqRZf8JzS4dpkF6EXGsBzavpG24cFMwf/GMyLvqnFplKAeQ==
FF4FDB9B45FB04AB5F958F6DFF624D0266A99F6279B8A4F0AB0E7D3989410E18
openai-domain-verification=dv-UnU0KFcP1xAVcegit4vDijoC
atlassian-domain-verification=qXEC7MR3Z0Iu1ke5I8DxVCa1YOn1JNjSLZWV4yAIBx8nHNr6mjMsqybAr0NWW0qH

Email authentication strong

SPF

v=spf1 ip4:66.11.4.36 ip4:66.11.4.37 ip4:65.221.8.29 ip4:67.205.157.40 ip4:65.221.12.128 ip4:65.221.12.148 ip4:74.122.253.72 ip4:209.166.158.108 ip4:155.56.208.100/30 ip4:157.133.97.216/30 ip4:169.145.66.70/31 ip4:169.145.66.72/31 ip4:91.198.224.29 ip4:194.37.255.29 ip4:155.56.222.0/24 include:spf-eu.wfs.cloud include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; rua=mailto:dmarcreports@hexion.com

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAke4hQtETlGXPLvNE19RMVERFUbBeoNNgpsF0akQ07CZL45U9E7uf0HqS1d82kJe4Da/Y+a8K4OxOAi…

selectors probed

Certificate (current)

GeoTrust TLS RSA CA G1

from 2026-01-13 to 2026-07-14

Expires in 56 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.hexion.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com www.google.com apis.google.com https://www.google-analytics.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com https://*.googletagmanager.com js.hs-scripts.com js.hs-analytics.net js.hs-banner.com js.hsleadflows.net forms.hubspot.com js.hscollectedforms.net https://cdn.insight.sitefinity.com https://dec.azureedge.net *.eloqua.com *.en25.com web-chat.nativechat.com cdn.ampproject.org https://players.brightcove.net/ *.juicer.io *.azureedge.net 'unsafe-eval' https://cookie-cdn.cookiepro.com/ https://cdn-prod.securiti.ai/ https://snap.licdn.com/ https://googleads.g.doubleclick.net/ *.acquiadam.com; style-src 'self' *.googleapis.com *.gstatic.com kendo.cdn.telerik.com www.google.com platform.twitter.com/css/ *.twimg.com https://cdn.insight.sitefinity.com ht
strict-transport-security: max-age=31536000; includeSubDomains

Links to (5)

Linked from (1)

prometalplus.com×2