aaon.com

HTML metadata

Title: Commercial & Industrial HVAC | AAON
Description: Leading commercial and industrial HVAC solutions manufacturer, AAON provides innovative, energy-efficient products tailored for your needs.
Language: en
Generator: HubSpot
Canonical: https://www.aaon.com

Open Graph

url: https://www.aaon.com
title: Commercial & Industrial HVAC | AAON
description: Leading commercial and industrial HVAC solutions manufacturer, AAON provides innovative, energy-efficient products tailored for your needs.

Technology

CDN: Cloudflare
CMS: Joomla
jQuery: 1.11.2 known XSS (<3.5)

Analytics

Google Tag Manager

Third-party hosts loaded (4)

cdnjs.cloudflare.com×5
7052064.fs1.hubspotusercontent-na1.net×2
maps.googleapis.com×1
www.googletagmanager.com×1

Social

Contact

Phone

918-5832266

Registration

Registrar

GoDaddy.com, LLC

Created

1996-07-01

Expires

2027-06-30 394 days left

Updated

2023-02-28

Name servers

mns01.domaincontrol.com
mns02.domaincontrol.com

DNS records live

NS

mns01.domaincontrol.com
mns02.domaincontrol.com

MX

10 aaon-com.mail.protection.outlook.com

TXT

Show 11 TXT records

MS=696FC28EA595571F9EEADB85C71B08B3C20CF8AC
mp6apfdcrjhimpmug14d6uooch
dvi8esto0ha0cu65npkf7t623o
msfpkey=1vgqt3mefazgfr61cs6v18xws
54558e67-099e-4564-a1f8-b592506812c9
Ome4IE7cqZGInbS6U8UdlRAYxgvxaIFQNRw49ZU1WSDInJdkEY18aFT9abvEz0gvSW4oZQK5U6eS8mkUMRVRvw==
3201kbusi3593foq8dnna8v8co
0ed1fe018a5824ee3f24fb4d02bca0b0c3b4da73ea
spf2.0/pra
Foxit-domain-verification=41197659a89ac0cd04ff68080c829ff4
axios-domain-verification-bkzpx2=MGvbFavrNVxjsp8gtsyj8ZY1u

Verified for

Apple
Cisco
DocuSign
Dynamics 365
Google
Microsoft
Microsoft 365
TeamViewer

Email authentication partial

SPF

v=spf1 include:aaon.com._d.sgen.io ~all

softfail (~all)

DMARC

v=DMARC1;p=none;pct=100;rua=mailto:aaon@us.cp-dmarc.com, mailto:aaon@us.cp-dmarc.com;ruf=mailto:aaon@us.cp-dmarc.com;ri=3600;fo=1;

policy: none (monitoring only)

DKIM

Show 4 DKIM selectors

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5VdyUNvHya2SLPJoJM9qV8aLtzi0u6ykwQRMqWNzZV6IufnrUqxAhFBHpBx6UNKFL3JSPj+8QjS5hL…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYQldpa2Zuxi/elFKgd4eOVvKDLcOfNHa9dJHIgK8cZ4B+ngupifyAhGmta9BpkqWKX5T2VBCL0v8q…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3SezGIFrwsL4NkJ1FRbxWrDPDCGki38zeRajInixO76DpTJMvCmtokxuwVHNr0l/rX7emFjNQOXD3Bx18r…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGEsiZuD9B1sBV4z6jnlQ4ebBgTmqCUOU7EyIrTE5GRZQVn6Gqq8kKLS4Ql4osQnphfOkuxefH245rZ2nM…

selectors probed

Certificate (current)

WE1

from 2026-04-20 to 2026-07-19

Expires in 48 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.aaon.com/

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy

findings

missing frame protection
missing Permissions Policy

Header values

referrer-policy: no-referrer-when-downgrade
x-content-type-options: nosniff
content-security-policy: upgrade-insecure-requests
strict-transport-security: max-age=31536000