mtds.com

HTML metadata

Title

MTDS - Experts in Internet, Cloud and IT Security in Morocco

Description

Entrust your IT projects to MTDS, Morocco’s leader in internet, hosting, cloud, cybersecurity, and digital transformation. Contact us today!

Language

en-US

Generator

WPML ver:4.9.2 stt:1,4;

Canonical

https://www.mtds.com/

Translations

en
fr

Open Graph

url: https://www.mtds.com/
title: MTDS - Experts in Internet, Cloud and IT Security in Morocco
locale: en_US
site name: MTDS
description: Entrust your IT projects to MTDS, Morocco’s leader in internet, hosting, cloud, cybersecurity, and digital transformation. Contact us today!

Technology

CDN: Cloudflare
CMS: WordPress

Analytics

Cloudflare Insights
Google Tag Manager

Ads

Meta Pixel

Fonts

Font Awesome

Third-party hosts loaded (6)

code.jquery.com×4
use.fontawesome.com×2
www.googletagmanager.com×2
connect.facebook.net×1
gmpg.org×1
static.cloudflareinsights.com×1

Social

Contact

Phone

+212 537 674861

Registration

Registrar

eNom, LLC

Created

1996-02-14

Expires

2027-02-15 271 days left

Updated

2025-06-12

Name servers

ken.ns.cloudflare.com
roxy.ns.cloudflare.com

DNS records live

NS

ken.ns.cloudflare.com
roxy.ns.cloudflare.com

MX

0 mtds-com.mail.protection.outlook.com
10 mx1.mtds.com
20 mx2.mtds.com
50 harira.mtds.com

TXT

Show 8 TXT records

KE9-VS9-DB8
MS=42B0371F485703BCC685D419F0A53DC7D2FFE133
MS=ms79427242
a6122643-2655-4ba4-b77a-d25a2ea74d80
brevo-code:919bc91381d1185a6ff165b4f7b8583d
gh4-y76-fn9
google-gws-recovery-domain-verification=60219458
google-site-verification=6PNNiadqKqU4aPaR6v3daYQd0sPFxSKC4BDDpE6BrOY

Email authentication strong

SPF

v=spf1 +ip4:196.2.80.0/24 +include:spf.antispamcloud.com include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; pct=100; rua=mailto:rua@dmarc.brevo.com; ruf=mailto:ruf@dmarc.brevo.com; adkim=s; aspf=s; fo=1

policy: quarantine

DKIM

default: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHBpBkeGxpfpxFUXO4tDxgUSIcCpMCm1ewDrrqGK20AzIoTK6ZREUh9jbPrB3RxqhnAl7pWo3TQWt9…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

WE1

from 2026-05-04 to 2026-08-02

Expires in 75 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.mtds.com/

present

strict-transport-security
content-security-policy
content-security-policy-report-only
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy
cross-origin-embedder-policy
cross-origin-resource-policy

findings

short HSTS max-age
CSP allows unsafe inline scripts/styles
weak frame protection

Header values

referrer-policy: same-origin, strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN, SAMEORIGIN
permissions-policy: geolocation=(), microphone=(), camera=(), fullscreen=(self), payment=(), camera=(), microphone=(), geolocation=(), payment=(), usb=(), fullscreen=(self)
x-content-type-options: nosniff
content-security-policy: upgrade-insecure-requests;, default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://cdn.datatables.net https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net https://www.google.com https://www.gstatic.com https://code.jquery.com https://static.cloudflareinsights.com https://cdn.tailwindcss.com; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://cdn.datatables.net https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net https://www.google.com https://www.gstatic.com https://code.jquery.com https://static.cloudflareinsights.com https://cdn.tailwindcss.com; worker-src 'self' blob:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://use.fontawesome.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdn.datatables.net; style-src-ele
strict-transport-security: max-age=2592000
cross-origin-opener-policy: unsafe-none
cross-origin-embedder-policy: unsafe-none; report-to='default'
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: default-src 'self'; script-src 'self' https://www.googletagmanager.com https://www.google-analytics.com 'unsafe-inline'; style-src 'self' https://fonts.googleapis.com 'unsafe-inline'; img-src 'self' data:; report-uri /csp-report-endpoint;