sabic.com

HTML metadata

Title: SABIC - SABIC homepage
Language: en
Canonical: https://www.sabic.com/en

Open Graph

url: https://www.sabic.com/en
title: Sabic
locale: en_us
imagewidth: 640
description: From making cars and planes more fuel-efficient, to helping conserve the world’s water supply and enabling colorful smartphone cases, we find solutions to the challenges of today to help our customers achieve their ambitions and build a better tomorrow.
imageheight: 396

Technology

Analytics

Google Tag Manager

Third-party hosts loaded (1)

www.googletagmanager.com×1

Social

Registration

Registrar

MarkMonitor Inc.

Created

1998-10-01

Expires

2030-01-09 1331 days left

Updated

2020-12-03

Name servers

ns1.sabic.com
ns2.sabic.com
ns3.sabic.com
ns4.sabic.com
ns5.sabic.com

DNS records live

NS

ns1.sabic.com
ns2.sabic.com
ns3.sabic.com
ns4.sabic.com
ns5.sabic.com

MX

10 sabic.mail.protection.outlook.com

TXT

Show 17 TXT records

google-gws-recovery-domain-verification=59096804
_sfzubg7lc01ilt1xna46ut0qiuyazbh
lksnlwjrpbjdrtbbrb8bclh5p810qxns
google-gws-recovery-domain-verification=59096697
88.85.236.69
C7hJXDh/brF3MJAtAY/9sGZROzUwNgTCBSWXKaqCAQbpaV6vL9ywmzcehmWNQvjdDtD5MnG8kjqUZ/PqNmXTUQ==
google-site-verification=jG9NR7Z--Q5rkYZql6PQGKMbf6ssfFx2mPLQ90MJDzM
2b546085-52bf-4066-b822-ee9bd9d73840
ip4:141.146.165.0/27 -all
xeLlvxUpNU5Sq3D4/E4XtRYgehFEWrI+nvosieMHLmkejJQ26KVz36svkjPb+VntPe5o7tGKCI1/XWkB1v3AZw==
cisco-ci-domain-verification=3bcab517c5a98e0fbed6206ce435c78397f62bc9d7e62b0b6888d64da7a610a8
MS=ms90212888
jhft8whywbqyztld1qtskgcy54nnch05
google-gws-recovery-domain-verification=59096430
docusign=2e91f3d8-87d3-468a-89a7-9552e694eb72
RUSWrvXCejR57cLmsXJudsMOYtbZEg0xCkhLuUyuSFJ6N/EqJsui6DC+q2rN7WHv4USXXaBhbqFu4S9sBCrvdA==
zdwljx4vp736xqlck7q42hqr86lgmksv

Email authentication strong

SPF

v=spf1 ip4:88.85.236.35 ip4:20.229.252.212 ip4:20.229.252.198 ip4:20.229.252.196 ip4:4.175.245.237 ip4:34.1.48.21 ip4:34.1.58.89 include:_spf.sabic.com a:FMG.nourmail.com.sa -all

strict (-all)

DMARC

v=DMARC1; p=reject; rua=mailto:dmarc@sabic.com,mailto:haseen@rua.dmarc.gov.sa; ruf=mailto:dmarc@sabic.com,mailto:haseen@ruf.dmarc.gov.sa; pct=100; fo=1; ri=3600

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC4lLiy0xiM1ik7aRMg7Uj5l/Gw9mD3cX58SjgCT5AR3Sl8mgx41G+bfBbCNUYeqUisSYpqbkABq/nNdGTUWC…
selector2: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCa/f+NBvvkBOs+8a2h4OGhfCWRPNaJG8nLXx6FT+dmQLCr9vHZsVg1w7lT3H8FJ6tJZ3yGpjXWIcfTNv79SJ…

selectors probed

Certificate (current)

DigiCert Global G2 TLS RSA SHA256 2020 CA1

from 2026-01-06 to 2027-02-07

Expires in 264 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.sabic.com/en

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy

Header values

x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), cross-origin-isolated=(), display-capture=(), document-domain=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), navigation-override=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(), gamepad=(), speaker-selection=()
x-content-type-options: nosniff
content-security-policy: default-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.gstatic.cn googleads.g.doubleclick.net snap.licdn.com static.ads-twitter.com secure.perk0mean.com *.googletagmanager.com www.google-analytics.com maps.googleapis.com cdn.jsdelivr.net www.google.com sc.lfeeder.com www.gstatic.com; font-src 'self' fonts.googleapis.com fonts.gstatic.com fonts.gstatic.cn;frame-src 'self' www.google.com www.youtube.com v.qq.com player.vimeo.com pc-api-public.sabic.com; connect-src px.ads.linkedin.com *.google-analytics.com stats.g.doubleclick.net analytics.google.com *.analytics.google.com *.analytics.google.com maps.googleapis.com 'self'; img-src 'self' data: www.gstatic.cn *.googleapis.com www.google.nl www.google.com www.google.co.uk px.ads.linkedin.com *.ggpht.com *.google-analytics.com *.googletagmanager.com productcatalogue.sabic.com maps.gstatic.com maps.googleapis.com tr-rc.lfeeder.com www.gstatic.com productcatalogue.sabic.com; style-src 'self' 'unsafe-inline' fonts.googleapis.
strict-transport-security: max-age=31536000; includeSubDomains