mrcglobal.com

HTML metadata

Title: MRC Global
Description: MRC Global is a leading global distributor of pipe, valve and fitting (PVF), products and services to the energy and industrial markets.
Language: en

Open Graph

title: MRC Global
description: MRC Global is a leading global distributor of pipe, valve and fitting (PVF), products and services to the energy and industrial markets.

Technology

CDN: Amazon CloudFront
CMS: Next.js

Analytics

Google Tag Manager

Cookie consent

Osano

Third-party hosts loaded (3)

images.ctfassets.net×38
cmp.osano.com×1
www.googletagmanager.com×1

Social

Contact

Phone

77010-3035

Registration

Registrar

GoDaddy.com, LLC

Created

2008-09-18

Expires

2026-09-18 121 days left

Updated

2025-09-19

Name servers

ns10.dnsmadeeasy.com
ns11.dnsmadeeasy.com
ns12.dnsmadeeasy.com
ns13.dnsmadeeasy.com
ns14.dnsmadeeasy.com

DNS records live

NS

ns10.dnsmadeeasy.com
ns11.dnsmadeeasy.com
ns12.dnsmadeeasy.com
ns13.dnsmadeeasy.com
ns14.dnsmadeeasy.com
ns15.dnsmadeeasy.com

MX

10 mrcglobal-com.mail.protection.outlook.com

TXT

Show 7 TXT records

0ed1fe018aa1b2447ad1544896ab7bbc2450e08c41
pardot1045793=8f7ca8dab9d059b1c23473d2fab2ac9da352b5acd7fe3e35c80f490eabba5177
sending_domain1045793=156309393936a20477a7b9833780ca53755b61f18b898655caf85801500d6559
AQj01k8k8857fdDO2vEcXQrFQEKBSLkobSaHrPB5WwCvCfc58I1UR7ud9NcbmKaRgyQGVgQUOFTPDD/Qx4jSaQ==
google-site-verification=P1im_mdmRcVr042IGFnaGHbi_o_bwaR6mFSZq_icYNM
MS=ms45521861
b8da1775-9b6d-423a-b3af-05594e886dcc

Email authentication strong

SPF

v=spf1 ip4:208.84.8.5  ip4:208.84.9.154 ip4:208.84.9.153  ip4:208.84.11.5 ip4:38.108.8.146 ip4:166.90.161.70 ip4:20.185.215.242 ip4:129.146.198.199 ip4:54.146.225.73  include:spf2.mrcglobal.com ~all

softfail (~all)

DMARC

v=DMARC1;p=reject;pct=100;rua=mailto:dmarc_report@mrcglobal.com;ruf=mailto:dmarc_report@mrcglobal.com;ri=86400;aspf=s;adkim=s;fo=1

policy: reject (enforced)

DKIM

Show 4 DKIM selectors

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC8FswCA9qsJOzR7OPb1qScktqIKQt285QvpfX0yeY1GYcfU5nxfBia4mBY57cbOrlgRHWpY6tPK2JGhpo39X…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoiNPftXqbcT+Qi4QAkuOnCxtxPFD/d8mLOiR6g/HojR6+uuBij0szTrNcy0fBAAkTMAEvFs2sdaO2…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA052oPUZuJpJrfRQd3Hwk9/lnbu+yVRl+7nFNEPHMFUf6gi4e5jBZg9MS7nGlCnjWiJKAk/ABXdUzGKxt6s…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDLop85IP91r8ib4qJgohzqHp6E9EZf8UkokUvqsFySZHSqJw66sCfcEmpuR6+pMHXV9p8LhUave/f3f5vTHFcmkC…

selectors probed

Certificate (current)

Amazon RSA 2048 M04

from 2026-02-18 to 2027-03-20

Expires in 304 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.mrcglobal.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=(self), microphone=(), camera=(), payment=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'nonce-OGUwMjgyNTktYzg4MC00NWFjLTk5ZjctOGQxMDQ3MmMzMjFl' 'strict-dynamic' 'unsafe-hashes' 'unsafe-inline'; script-src-elem 'self' 'unsafe-hashes' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://assets.adobedtm.com https://tags.tiqcdn.com https://maps.googleapis.com https://maps.gstatic.com https://developers.google.com https://cmp.osano.com https://cdn.storerocket.io https://cdn.jsdelivr.net https://*.brightcove.net https://*.zencdn.net; style-src 'self' 'unsafe-hashes' 'unsafe-inline' https://fonts.googleapis.com https://maps.googleapis.com https://cmp.osano.com; img-src 'self' blob: data: https://*.google-analytics.com https://*.googletagmanager.com https://images.ctfassets.net https://cdn.shopify.com https://images.unsplash.com https://maps.googleapis.com https://maps.gstatic.com https://cmp.osano.com https://*.storerocket.io https://*.brightcove.com https://*.boltdns.net; font-src 'self' https://fonts.g
strict-transport-security: max-age=63072000; includeSubDomains; preload