mahindrausa.com

HTML metadata

Title: Home - Mahindra USA
Language: en-US
Generator: dominant-color-images 1.2.1
Canonical: https://www.mahindrausa.com/

Open Graph

url: https://www.mahindrausa.com/
title: Home - Mahindra USA
locale: en_US
site name: Mahindra USA

Technology

CDN: Cloudflare
CMS: WordPress

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (10)

cdnjs.cloudflare.com×4
www.facebook.com×2
www.google.com×2
www.googletagmanager.com×2
cdn.jsdelivr.net×1
code.jquery.com×1
fonts.googleapis.com×1
maps.googleapis.com×1
qscripts.s3.amazonaws.com×1
tag.simpli.fi×1

Social

Registration

Registrar

Network Solutions, LLC

Created

1999-05-13

Expires

2030-05-13 1453 days left

Updated

2025-03-14

Name servers

ns.rackspace.com
ns2.rackspace.com

DNS records live

NS

dns1.stabletransit.com
dns2.stabletransit.com

MX

0 mahindrausa-com.mail.protection.outlook.com

Verified for

Citrix
Microsoft 365

Email authentication partial

SPF

v=spf1 ip4:192.40.173.196 ip4:199.115.76.26 ip4:199.115.76.18 include:spf.protection.outlook.com include:sendgrid.net include:mailgun.org include:servers.mcsv.net include:aspmx.pardot.com include:spf.dealerspike.com ~all

softfail (~all)

DMARC

v=DMARC1;p=none;pct=100;rua=mailto:rua@dmarc.mailer91.com;ruf=mailto:ruf@dmarc.mailer91.com;aspf=r;adkim=r;ri=86400;sp=none;fo=1;

policy: none (monitoring only) · sp=none

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDVfJ66YsLVhJG/o2LEMpbJhOQ3PnZ/dQwX6lsvbl0qJnVjeyVkfFW2G71MH63LjkkpcM5T7NBvS9ePf8rO6m…
k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…
s1: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC7435vIrTgC+WSoHZvobNRfcrmsHoTM6f4De2PpBOAZdN7GkesZwPSNjtfrhkFYoocfxGe9H4nVU7nUZ3F2+/2AM…

selectors probed

Certificate (current)

R12

from 2026-05-06 to 2026-08-04

Expires in 75 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.mahindrausa.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=(self), microphone=(), camera=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://synerg.adp.com https://*.googletagmanager.com https://*.googleapis.com https://cdnjs.cloudflare.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://synerg.adp.com https://unpkg.com https://workforcenow.adp.com https://ajax.cloudflare.com https://app.viralsweep.com https://tags.tiqcdn.com https://static.ads-twitter.com https://code.jquery.com https://cdn.jsdelivr.net https://*.youtube.com https://*.googleadservices.com https://*.googleapis.com https://*.clarity.ms https://*.google.com https://*.gstatic.com https://cdnjs.cloudflare.com https://static.cloudflareinsights.com https://*.googletagmanager.com https://*.google-analytics.com https://*.doubleclick.net https://*.facebook.net https://*.simpli.fi https://qscripts.s3.amazonaws.com; font-src 'self' data: https://synerg.adp.com https://*.gstatic.com https://cdnjs.cloudflare.com; img-src 'self' data: blob: https://analytics.twitter.com https://t.co https://qr-code.it
strict-transport-security: max-age=15552000
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin

Links to (9)

Linked from (1)

mndeerhunters.com×1