kutakrock.com

.com crawl

First seen 2026-04-18 · Last seen 2026-05-12 · ok HTTP/1.1 200 2920 ms crawled 2026-05-12

US · 23.100.43.208 · AS8075 Microsoft Corporation

Reputation 100/100

sector legal type homepage

HTML metadata

Title: Kutak Rock | National Law Firm
Description: Kutak Rock is a leading national law firm with 21 offices serving business and governmental clients in public finance, real estate, litigation, and corporate law.
Language: en
Canonical: https://www.kutakrock.com/

Open Graph

title: Home | Kutak Rock LLP

Technology

CDN: Cloudflare

Analytics

Google Tag Manager

Fonts

Adobe Fonts

Third-party hosts loaded (4)

cdnjs.cloudflare.com×1
use.typekit.net×1
www.google.com×1
www.googletagmanager.com×1

Social

Contact

Phone

20221994-2026

Registration

Registrar

Network Solutions, LLC

Created

1996-01-11

Expires

2028-01-10 600 days left

Updated

2022-11-11

Name servers

dns1.kutakrock.com
dns2.kutakrock.com

DNS records live

NS

dns1.kutakrock.com
dns2.kutakrock.com

MX

10 mxa-00214801.gslb.pphosted.com
10 mxb-00214801.gslb.pphosted.com

TXT

Show 4 TXT records

ZOOM_verify_c53KNE3s85dHANxBPIXO6o
_8tnrnshi131emsgd8vom1lk3ccn8toh
cisco-ci-domain-verification=57a70b421954e4e0b11ba3c756d1669e79efef5a294f93d9c304301a29d305e0
duo_sso_verification=801JlFCE4BsPbx6T1elIxSFHOSjAuFP5gEkLguDqEJE3LU3szMcTy5fao8O6jlON

Email authentication strong

SPF: v=spf1 include:spf-00214801.pphosted.com include:b9295e12-spf.mta.tessian-gw.com ~all
softfail (~all)
DMARC: v=DMARC1; p=reject; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com
policy: reject (enforced)
DKIM: no key found at common selectors

Certificate (current)

DigiCert Global G2 TLS RSA SHA256 2020 CA1

from 2025-12-08 to 2027-01-09

Expires in 234 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.kutakrock.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://www.googletagmanager.com https://tagmanager.google.com https://www.google-analytics.com https://ssl.google-analytics.com https://www.google.com https://ajax.googleapis.com https://optimize.google.com https://www.youtube.com https://s.ytimg.com https://siteimproveanalytics.com https://cdnjs.cloudflare.com https://www.gstatic.com https://*.typekit.net; img-src 'self' data: https://www.googletagmanager.com https://ssl.gstatic.com https://www.gstatic.com https://www.google-analytics.com https://optimize.google.com https://www.google.com https://img.youtube.com https://i.ytimg.com https://*.siteimproveanalytics.io https://*.analytics.google.com; style-src 'self' 'unsafe-inline' https://tagmanager.google.com https://fonts.googleapis.com https://optimize.google.com https://www.youtube.com https://*.typekit.net https://cdnjs.cloudflare.com; font-src 'self' data: https://fonts.gstatic.com https://*.typekit.net htt
strict-transport-security: max-age=31536000; includeSubDomains;