imacorp.com

HTML metadata

Title: IMA Financial Group - Insurance and Financial Services
Description: IMA provides insurance, employee benefits, and wealth management solutions—backed by 100% employee ownership and industry expertise.
Language: en-US
Canonical: http://imacorp.com/

Open Graph

url: http://imacorp.com/
title: IMA Financial Group - Insurance and Financial Services
locale: en_US
site name: IMA Financial Group
description: IMA provides insurance, employee benefits, and wealth management solutions—backed by 100% employee ownership and industry expertise.

Technology

CDN: Cloudflare
CMS: WordPress

Analytics

Google Tag Manager

Cookie consent

Osano

Fonts

Adobe Fonts

Third-party hosts loaded (5)

www.google.com×3
cmp.osano.com×1
gmpg.org×1
use.typekit.net×1
www.googletagmanager.com×1

Social

Registration

Registrar

Network Solutions, LLC

Created

1996-05-22

Expires

2031-05-23 1829 days left

Updated

2022-02-09

Name servers

ns10.dnsmadeeasy.com
ns11.dnsmadeeasy.com
ns12.dnsmadeeasy.com
ns13.dnsmadeeasy.com
ns14.dnsmadeeasy.com
ns15.dnsmadeeasy.com

DNS records live

NS

ns10.dnsmadeeasy.com
ns11.dnsmadeeasy.com
ns12.dnsmadeeasy.com
ns13.dnsmadeeasy.com
ns14.dnsmadeeasy.com
ns15.dnsmadeeasy.com

MX

10 imacorp-com.mail.protection.outlook.com

TXT

Show 5 TXT records

fPfrKtDmfWAxgET0LvaLTlsnLZYSWZzhK62aLqofsIDRTnhyJ6TnEHMigds2mnHetFqXnuMDgpcDG/eLavZQMA==lt81d1rdxbsqr3wwf8lclf3c7cpd6thghfz1q1w757dcl74nsn0glnkzgz8r398yxx0hkwk90zzzbxn2ns2vxh9yfdrd1g4mpardot529992=cab10abee7b5f35632d3d050bf3ec14ef19d06dba471fe0307fc27f8f6e47ac6
bw=nM3FimAnnyKju0H6RM2Ot4a2yirOYxYYCel7lc0WNArM
box-domain-verification=c1f55ba0d71c9e4ec4995bc6c0be5b39fecabbe0a787564c58d71f57fb21c6f7
hq1ggmwr7hbq0m9bm09pfd94mg2t4hw2
ms-domain-verification=12da0481-3044-4170-98ed-87e316193371

Email authentication strong

SPF

v=spf1 include:_spf.imacorp_com._d.easydmarc.pro include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1;p=reject;rua=mailto:81b61f60cf@rua.easydmarc.us;ruf=mailto:81b61f60cf@ruf.easydmarc.us;fo=1

policy: reject (enforced)

DKIM

Show 4 DKIM selectors

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7YPePqmqNKRHVd7HEy6RUh6ex0C+KqJkU2sh1EZIfZ8/SyOeKQXP6nl/6gB8dTYJb5K9qfpuFTIWxk…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArf7iEpyaINZHbcBEUdIkwz1T9ClAt0Mad0Rsr6Ihzwuxq3EsR0zilj1gi0XqR4+mS4scbL1neH3Ckw…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvo1YrhkbhfY3gBwRHScV6yIkKX/SS0mj7i4dcH6PzmaBvON7ie/kAOjDfGTMKSEW7YcuYe9/JnBSdOCWCV…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCWPLKotbJWSSvLZotgfjNDqNfNSpsBxyTYybmtufOdzvJxHvq84lp/Fx7SduVCBcRVn8kI3MaFYGGEaFGCae9MbN…

selectors probed

Certificate (current)

E8

from 2026-03-15 to 2026-06-13

Expires in 25 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://imacorp.com/

present

strict-transport-security
content-security-policy
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing Referrer Policy
missing Permissions Policy

Header values

x-content-type-options: nosniff
content-security-policy: frame-ancestors 'self' pi.pardot.com; upgrade-insecure-requests; default-src 'self'; script-src 'self' blob: 'report-sample' 'unsafe-inline' 'unsafe-eval' https://imacorp.com https://*.zendesk.com https://assets.zendesk.com https://code.jquery.com https://connect.facebook.net https://content.linkedin.com https://graph.facebook.com https://google-analytics.com https://googletagmanager.com https://go.imacorp.com https://js.facebook.com https://nexus.ensighten.com https://platform.linkedin.com https://pi.pardot.com https://ssl.google-analytics.com https://snap.licdn.com https://static-exp1.licdn.com https://tagmanager.google.com https://theme.zdassets.com https://use.typekit.net https://v2.zopim.com https://www.google-analytics.com https://www.googletagmanager.com https://widget-mediator.zopim.com https://cdnjs.cloudflare.com https://ajax.googleapis.com https://*.wufoo.com https://*.wpenginepowered.com *.osano.com *.greenhouse.io *.chatfunnels.com *.zi-scripts.com *.youtube.com https://ww
strict-transport-security: max-age=63072000; includeSubDomains