petronas.com

HTML metadata

Title

Passionate about Progress | PETRONAS Global

Description

We are a dynamic global energy group with an international presence. We produce and deliver energy & solutions that power society’s progress responsibly.

Language

en

Canonical

https://www.petronas.com/

Translations

en
ms

Open Graph

url: https://www.petronas.com/frontpage
title: PETRONAS Global
site name: PETRONAS Global
description: A Progressive Energy and Solutions Partner Enriching Lives for a Sustainable Future

Technology

Server: Apache
CMS: Drupal

Analytics

Google Tag Manager

Fonts

Adobe Fonts

Third-party hosts loaded (4)

cdn.jsdelivr.net×5
cdnjs.cloudflare.com×1
use.typekit.net×1
www.googletagmanager.com×1

Social

Registration

Registrar

Web Commerce Communications Limited dba WebNic.cc

Created

1996-11-01

Expires

2027-10-31 530 days left

Updated

2026-02-21

Name servers

ns1.a0.impervasecuredns.net
ns1.a1.impervasecuredns.net
ns1.a2.impervasecuredns.net

DNS records live

NS

ns1.a0.impervasecuredns.net
ns1.a1.impervasecuredns.net

MX

10 petronas-com.mail.protection.outlook.com

TXT

Show 17 TXT records

ptsg-1cmsdb01.azurewebsites.net
sitecore-domain-verification=994e932a01874b18b2ee43b2efdd2b05
v=spf1 include:spfint.petronas.com include:spfext.petronas.com include:spf.protection.outlook.com include:spf_c.oraclecloud.com include:ap.rp.oracleemaildelivery.com include:spf.mailjet.com -all
google-site-verification=9-6x9rz5SXDQGSo80T6q0_gflY9oWKZjHIeUrWuMRJo
dtm-domain-verification=n_8QBd3-I96Td6ssTCTEfRVndUrVfrSyuPmZn7ciXlI
_qb8tx3tx86m16y3mi86e6f1dqc3n0g6
sitecore-domain-verification=3458c1e18aa246b4bafa41823f00856e
docusign=63457d71-741e-4b40-a4aa-20348a7a32eb
PSWB6WFU7ZH151MC7TL8U1NG4X07RWLFEWG7QSUO
apple-domain-verification=ZxTixvtMz4XnoXDR
docusign=c63e3df6-5d91-4ece-b12e-036f340d851e
MS=ms47820606
google-site-verification=NPfMRjJ5Vz9Rm2vinjKYBa7ufHUMOIRjmMCHfaTao-o
7pHss+hSJSIK9bqxPmx0Cv+pYbKW875qYw1lAXPjvrByLY9+2FAnXztJ4MRF00IzybZZKEljDqBD+Wnj+SB2Ew==
miro-verification=a7fdc7b8f3aead47187e1bb8014ad6c84cbe5040
gk6-g5f-ar2
ms-domain-verification=8d4379ee-8d16-4902-9279-9bba623b85df

Certificate (current)

DigiCert Global G2 TLS RSA SHA256 2020 CA1

from 2025-10-22 to 2026-10-22

Expires in 156 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://www.petronas.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: interest-cohort=()
x-content-type-options: nosniff
content-security-policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://cdnjs.cloudflare.com/ https://www.youtube.com/ https://cdn.jsdelivr.net/ https://www.googletagmanager.com/ https://www.google-analytics.com/ https://app-script.monsido.com/ https://cdn-apac.onetrust.com/ https://u.heatmap.it/ https://cdn.yellowmessenger.com/ https://www.google.com/ https://www.gstatic.com/ https://static.elfsight.com/platform/platform.js https://elfsightcdn.com/platform.js https://www.petronas.com/608242b4-6b3e-4aff-8979-014519414d0c https://app-script.monsido.com/ https://static.elfsight.com/ https://api.swiftype.com/ https://geotargetly-api-1.com/ https://g10498469755.co/ https://code.jquery.com/; object-src 'none'; upgrade-insecure-requests
strict-transport-security: max-age=31536000; includeSubDomains, max-age=31536000