nationalgypsum.com

HTML metadata

Title: National Gypsum® Company | Gypsum Board Suppliers
Description: National Gypsum® is a leading supplier of gypsum board and drywall products. Click here to discover more.
Language: en
Generator: SEOmatic
Canonical: https://www.nationalgypsum.com

Open Graph

url: https://www.nationalgypsum.com/
title: National Gypsum® Company | Gypsum Board Suppliers
locale: en_US
site name: National Gypsum
description: National Gypsum® is a leading supplier of gypsum board and drywall products. Click here to discover more.

Technology

Server: nginx

Analytics

Google Tag Manager

Fonts

Adobe Fonts

Third-party hosts loaded (7)

d3q01gc7kwv7n6.cloudfront.net×32
www.googletagmanager.com×2
cdn-cookieyes.com×1
challenges.cloudflare.com×1
js.hs-scripts.com×1
unpkg.com×1
use.typekit.net×1

Social

Contact

Address: 2001 Rexford Road, 28211, Charlotte, North Carolina, US

Registration

Registrar

GoDaddy.com, LLC

Created

1998-01-22

Expires

2027-02-22 277 days left

Updated

2026-01-29

Name servers

pdns92.ultradns.biz
pdns92.ultradns.com
pdns92.ultradns.net
pdns92.ultradns.org

DNS records live

NS

pdns92.ultradns.biz
pdns92.ultradns.com
pdns92.ultradns.net
pdns92.ultradns.org

MX

10 nationalgypsum-com.mail.protection.outlook.com
20 nationalgypsum-com.mail.protection.outlook.com

TXT

aIdsI7AyyYJlcfEvls7NlUyz4fDMVaDtoDolB9eX4jSTaoD5OF7E/DiRUIb46kFDH1m4yzbpZlMHKRy9FemgGQ==

Verified for

Apple
Brevo
Google
Microsoft 365

Email authentication strong

SPF

v=spf1 ip4:64.132.141.22/32 ip4:13.77.104.149/32 ip4:20.186.154.97/32 include:spf.protection.outlook.com include:7229635.spf06.hubspotemail.net include:spf-us.wfs.cloud include:_spf.ultipro.com include:amazonses.com -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:3cf1ea18@mxtoolbox.dmarc-report.com,mailto:dmarc_agg@vali.email; ruf=mailto:3cf1ea18@forensics.dmarc-report.com; fo=1
;

policy: quarantine

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDVLBIWkkn7FC+Me5bF8x1h7/wKHJwqfEQuaAj1ZPjJmbT8/daCN+3aUw8yb7rnSSf78LIX8OhHJnUDE0ieNP…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ZThnj2wNcRFxA2oCZPu0UejpUjzTIS1iSPh+eUMMETLeDFd8Iih4uehO2iBK381eOT74bqP8vKiVt…

selectors probed

Certificate (current)

Amazon RSA 2048 M02

from 2025-08-01 to 2026-08-30

Expires in 101 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://www.nationalgypsum.com/

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing Permissions Policy

Header values

referrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade
x-content-type-options: nosniff
content-security-policy: default-src https: *.nationalgypsum.com *.goldbondbuilding.com *.proformfinishing.com *.permabase.com *.askforpurple.com *.bugsnag.com *.googletagmanager.com *.ipredictive.com *.google.com data: 'unsafe-inline' 'unsafe-eval'; frame-src *.nationalgypsum.com *.goldbondbuilding.com *.proformfinishing.com *.permabase.com *.askforpurple.com *.youtube.com forms.hsforms.com *.facebook.com *.doubleclick.net *.adsrvr.org *.googletagmanager.com *.ipredictive.com *.google.com
strict-transport-security: max-age=15768000; includeSubDomains; preload