tkogrp.com

HTML metadata

Title

TKO Group Holdings, Inc.: A Premium Sports & Entertainment Company

Description

TKO Group Holdings, Inc. (NYSE: TKO) is a premium sports & entertainment company that comprises UFC and WWE.

Language

en-US

Canonical

https://tkogrp.com/

Feeds

TKO Group Holdings, Inc. » Feed RSS

Open Graph

url: https://tkogrp.com/
title: TKO Group Holdings, Inc.: A Premium Sports & Entertainment Company
locale: en_US
site name: TKO Group Holdings, Inc.
description: TKO Group Holdings, Inc. (NYSE: TKO) is a premium sports & entertainment company that comprises UFC and WWE.
updated time: 2026-02-25T16:48:06-05:00

Technology

Server: nginx
CMS: WordPress

Cookie consent

OneTrust

Social widgets

Vimeo Embed

Third-party hosts loaded (4)

kit.fontawesome.com×2
cdn.cookielaw.org×1
gmpg.org×1
player.vimeo.com×1

Social

Contact

Email

Registration

Registrar

MarkMonitor Inc.

Created

2023-05-24

Expires

2027-05-24 369 days left

Updated

2025-06-17

Name servers

ns-1477.awsdns-56.org
ns-1673.awsdns-17.co.uk
ns-437.awsdns-54.com
ns-822.awsdns-38.net

DNS records live

NS

ns-1477.awsdns-56.org
ns-1673.awsdns-17.co.uk
ns-437.awsdns-54.com
ns-822.awsdns-38.net

MX

10 us-smtp-inbound-1.mimecast.com
10 us-smtp-inbound-2.mimecast.com

TXT

Show 11 TXT records

box-domain-verification=ebc4ffe430159b1eb87b54e00a50d396b575d69bddf33b063be6dfdfe369cc31
box-domain-verification=edb85437ca72f31e767911f841f439f89163c386727c3d540cd3d8bb219da6d1
dropbox-domain-verification=d25nsjw8mdm0
google-site-verification=YnzM69KLNpYyQYhIPbUJxIncHZfW7bOXkJjs83HwrMg
onetrust-domain-verification=da57897d25c44f2fb2ed2693de94a955
teamviewer-sso-verification=2127b0c4975349d0aa75790e3df58da4
0ed1fe018aafcef0516f4246b5b8f1b8e68a84ecd2
MS=ms51361408
ZOOM_verify_BesCXkEeIkEjT786NWw67A
adobe-sign-verification=fa6c7608eb3590d11eda0e7ba8e6c8e
apple-domain-verification=2zfDxAtxQOAS2VwU

Email authentication strong

SPF: v=spf1 include:us._netblocks.mimecast.com include:spf.protection.outlook.com a:b.spf.service-now.com a:c.spf.service-now.com a:d.spf.service-now.com -all
strict (-all)
DMARC: v=DMARC1; p=reject; rua=mailto:2c66da6c@mxtoolbox.dmarc-report.com; ruf=mailto:2c66da6c@forensics.dmarc-report.com; fo=1
policy: reject (enforced)
DKIM: no key found at common selectors

Certificate (current)

R13

from 2026-04-21 to 2026-07-20

Expires in 62 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://tkogrp.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(), autoplay=(), camera=(), encrypted-media=(self), fullscreen=(), geolocation=(), microphone=(), midi=(), payment=(), display-capture=(*)
x-content-type-options: nosniff
content-security-policy: upgrade-insecure-requests; default-src 'self' ; script-src 'self' 'unsafe-inline' 'unsafe-eval' ; script-src-elem 'self' 'unsafe-inline' https://cdn.cookielaw.org https://kit.fontawesome.com https://www.googletagmanager.com https://maps.googleapis.com https://js-agent.newrelic.com https://bam.nr-data.net https://www.google-analytics.com ; style-src 'self' https://fonts.googleapis.com 'unsafe-inline' ; style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com ; font-src 'self' https://ka-p.fontawesome.com https://fonts.gstatic.com data:; connect-src 'self' https://geolocation.onetrust.com https://cdn.cookielaw.org https://api.ipdata.co https://ka-p.fontawesome.com https://www.google-analytics.com https://www.googletagmanager.com https://fonts.googleapis.com https://bam.nr-data.net https://maps.googleapis.com; img-src 'self' data: https://cdn.cookielaw.org *.pantheonsite.io *.tkogrp.com https://tkogrp.com https://www.google-analytics.com https://maps.gstatic.com https://maps.g
strict-transport-security: max-age=31536000;, max-age=31622400; includeSubDomains; preload
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin