sempra.com

HTML metadata

Title

Home | Sempra

Description

As owners of one of the largest energy networks in America, nearly 40 million consumers rely on Sempra for safe, reliable and affordable energy.

Language

en

Generator

Drupal 10 (https://www.drupal.org)

Canonical

https://www.sempra.com/

Translations

en

Open Graph

url: https://www.sempra.com/home
title: Home | Sempra
site name: Sempra
description: As owners of one of the largest energy networks in America, nearly 40 million consumers rely on Sempra for safe, reliable and affordable energy.

Technology

CDN: Cloudflare
CMS: Drupal

Analytics

Google Tag Manager

Third-party hosts loaded (5)

challenges.cloudflare.com×1
images×1
platform-api.sharethis.com×1
www.google.com×1
www.googletagmanager.com×1

Social

Registration

Registrar

CSC Corporate Domains, Inc.

Created

1997-12-11

Expires

2026-12-10 205 days left

Updated

2024-12-06

Name servers

pdns1.ultradns.net
pdns2.ultradns.net
pdns3.ultradns.org
pdns4.ultradns.org
pdns5.ultradns.info
pdns6.ultradns.co.uk

DNS records live

NS

pdns1.ultradns.net
pdns2.ultradns.net
pdns3.ultradns.org
pdns4.ultradns.org
pdns5.ultradns.info
pdns6.ultradns.co.uk

MX

10 mxa-000c8601.gslb.pphosted.com
10 mxb-000c8601.gslb.pphosted.com

TXT

Show 10 TXT records

cisco-ci-domain-verification=4cf71c4d6f1af8ef83519353f33f36062caa90e1aa72645c52da0842ace440ef
MS=ms30745239
apple-domain-verification=ncw6GX2Oyhh6gMgz
openai-domain-verification=dv-KAOUBBJWwHfrS947gOH8mNFN
logmein-verification-code=6e78d137-7627-4ec8-86e4-e4718b5d338a
google-site-verification=I68-Xw-UNd0cc45MsZG95fkIYyIAZgWVkLkA6mBF4r4
google-site-verification=vCfisW7fnmyk5O1JbTLKPMnLIesZSPGRwqnQ9JDA3mo
9bQrHCUmSlt8GXgAovzR2PfOglDrLL43WD7GM+Ty8ltgbm5ABRtVv+mWH8XiJH9461f9R0k9BCu+4YAMmtT/lg==
cisco-ci-domain-verification=115a5b83c14c2a63d6a3906df7d918c22546107efbe5e57bf1e4addfa23eb0d7
cisco-ci-domain-verification=28576dd20651879d14ba3536c94950700d466a16cc00766d4c1f4865ddf9e378

Email authentication strong

SPF

v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; fo=1; ri=3600; rua=mailto:dmarc_rua@emaildefense.proofpoint.com,mailto:dmarcrua@sempra.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com,mailto:dmarcruf@sempra.com

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrzUxr6DbWDVhOw6NGXZ+sRdo4+av/nrkZ0x8U/tEAfhse4m2ywdLG4Ct5XnQD/rTgznPGgMVW/IJv…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46QetRwWVNcbIwb8ZFuKMp+R3MBs/m+PxdWWqgLleZxyZw6YDTFKYffTmY8eSMxqsYElsCsDA3maS+…

selectors probed

Certificate (current)

R13

from 2026-03-30 to 2026-06-28

Expires in 40 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.sempra.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

short HSTS max-age
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: same-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' *.youtube.com cdn.linkedin.oribi.io *.google.com us-central1-sempra-stock.cloudfunctions.net www.google-analytics.com l.sharethis.com *.lottiefiles.com ad.ipredictive.com bob.dmpxs.com data.adxcel-ec2.com *.doubleclick.net *.linkedin.com *.adnxs.com t.co analytics.twitter.com *.nr-data.net sempra.mediaroom.com mma.prnewswire.com data: *.cognitoforms.com *.podcasts.apple.com *.googleadservices.com *.googletagmanager.com challenges.cloudflare.com *.simpleanalyticscdn.com *.usefathom.com *.sempra.com.cdn.cloudflare.net plausible.io *.usermaven.com *.prnewswire.com; font-src 'self' fonts.gstatic.com data:; frame-src 'self' *.google.com *.podcasts.apple.com *.youtube.com www.google-analytics.com *.googleadservices.com sempra.mediaroom.com challenges.cloudflare.com *.doubleclick.net *.prnewswire.com; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.gstatic.com platform-api.sharethis.com www.googletagmanager.com *.googleap
strict-transport-security: max-age=300