tamko.com

HTML metadata

Title: TAMKO Building Products
Description: Tamko Building Products!
Language: en-us
Generator: Sitefinity 13.3.7649.0 PE
Canonical: https://www.tamko.com

Technology

Third-party hosts loaded (7)

cdn.jsdelivr.net×9
ajax.aspnetcdn.com×3
code.jquery.com×2
cloud.typography.com×1
img.youtube.com×1
kendo.cdn.telerik.com×1
www.youtube.com×1

Social

Contact

Address: 220 W 4th Street, 64801, Joplin, MO, US

Registration

Registrar

Network Solutions, LLC

Created

1996-09-18

Expires

2027-09-17 486 days left

Updated

2025-08-01

Name servers

dns01.tamko.com
dns02.tamko.com
dns03.tamko.com

DNS records live

NS

dns01.tamko.com
dns02.tamko.com
dns03.tamko.com

MX

10 mxa-00511b01.gslb.pphosted.com
10 mxb-00511b01.gslb.pphosted.com

TXT

Show 22 TXT records

cn7bsegbn7eqhc3gmj2jpclb2n
teamviewer-sso-verification=909bcbb0ac2d4719a0fae189566d9f2d
loom-site-verification=bf58429bde8f4646ab5709a9f5e6802b
docusign=7d5bc83d-e583-4875-a103-1c62a905bcdc
anthropic-domain-verification-m416jh=pojpL4kymW9ZQb0UTeau7LP6Y
siv0h5ci0p14smh08emfjp7rfo
piLdrB2fRET4/Cp/b47xi/nqc96MGUTNS7w1FJo+nduFkTxSpylEtLMhcMeW7VLPN0tHG11JT/igQmlL0WPAIw==
vmware-cloud-verification-5800a31c-d29b-4ed2-9c9a-10736bfd861a
MS=DCA9191D5375A028652F2913D2659C10880C1431
stripe-verification=2c5c766913cda493393ab5c85f88277ec1c006fca38349d082f91e86817f5705
DA4AB3A8348068548A697BF40F3781B7EFF46F08BC06C89E7B8DB4D59C83D4BB
smartsheet-site-validation=ownIzq1JSDZXrK-gjpwtG5yru-wPmHj8
google-site-verification=Jv3DWGXGsF1KwIraFw8j7XDrJzjlZ44pYWMV4kTamJg
apple-domain-verification=OSiOOBRkt4BhbUag
pardot782943=6c59f69c7b72418fbaad7244f712489f8550e56538b61cd61b41558cd0fc4be4
sending_domain782943=3640126dd1ccd0c1d007935306ede44c10fa5c2edd26e2f75e3ca54be944372f
edgpfjcj029c3i9l10ojgappl8
ns492vbjgpvg0btqaso76c4d9i
1b8k1igdsbep06c6qu9qn66rdt
openai-domain-verification=dv-JG5qS4djb0tGMlAxWQIuybhw
8vr0pu3idbaikhgifcrh08nv4r
SFMC-DZyMJJrCkMsqpXCPr6KyS2sLbBIZAkhR254pDWQH

Email authentication strong

SPF

v=spf1 include:_s00152764.autospf.email -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; sp=none; rua=mailto:0f71a13097d6.a@dmarcinput.com,mailto:ron_bramblett@tamko.com; ruf=mailto:0f71a13097d6.f@dmarcinput.com,mailto:ron_bramblett@tamko.com; fo=1

policy: quarantine · sp=none

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPkTXCZYbIoyyZ6h45zmcY9qHQ/GwHGckvwQxng8ix0wiik5z6h4caoZR5479LrNkiB2Ktdeh87Sl9…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JAzJmD/tGLEv25Czuk3U1kMFRPxryusOrrNJKvdk12SNgj9/qkRlAkSEEjaAePzrIfLxXM+5/n1ZF…

selectors probed

Certificate (current)

Entrust OV TLS Issuing RSA CA 2

from 2025-08-12 to 2026-08-13

Expires in 86 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.tamko.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.clarity.ms *.eloqua.com *.en25.com *.google-analytics.com *.googleapis.com *.gstatic.com *.twimg.com ajax.aspnetcdn.com apis.google.com cdn.ampproject.org cdnjs.cloudflare.com code.jquery.com connect.facebook.net go.tamko.com googleads.g.doubleclick.net http://platform.stumbleupon.com/1/widgets.js https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js https://d8ejoa1fys2rk.cloudfront.net/bynder-embed/latest/bynder-embed.js https://dec.azureedge.net/ https://s.ytimg.com https://www.youtube.com js.hs-analytics.net js.hs-scripts.com kendo.cdn.telerik.com munchkin.marketo.net pi.pardot.com platform.linkedin.com platform.twitter.com player.vimeo.com static.addtoany.com www.google.com www.googleadservices.com www.googletagmanager.com *.vimeocdn.com cdn.jsdelivr.net *.tvsquared.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com *.tamko.com *.azurewebsites.net *.tbpllcdev.net *.twimg.com *.
strict-transport-security: max-age=31536000; includeSubDomains