afgdistribution.com

.com crawl

First seen 2026-04-20 · Last seen 2026-05-16 · ok HTTP/1.1 200 2350 ms crawled 2026-05-13

US · 3.33.251.168 · AS16509 Amazon.com, Inc.

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title: AFG Distribution
Language: en

Technology

CMS: Gatsby

Analytics

Google Tag Manager

Fonts

Adobe Fonts
Google Fonts

Third-party hosts loaded (5)

fonts.googleapis.com×6
script.crazyegg.com×1
static.klaviyo.com×1
use.typekit.net×1
www.googletagmanager.com×1

Social

Contact

Phone

8552344386

Registration

Registrar

GoDaddy.com, LLC

Created

2011-02-11

Expires

2027-02-11 267 days left

Updated

2024-02-12

Name servers

ns47.domaincontrol.com
ns48.domaincontrol.com

DNS records live

NS

ns47.domaincontrol.com
ns48.domaincontrol.com

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

Show 7 TXT records

google-site-verification=_fdwdHPkcmYBopJ3vzmOPc9Wy6HGvXxit2omUD_z4eg
klaviyo-site-verification=TLinhb
154a24dd76b84e7f2e3d92ac6b2f689bc7547485e53409ffac044e54d3166ae3
google-site-verification=x91RquaiKKH6HLHuZPTVLfNUAx5ZsV9stcoq4hMY0MI
google-site-verification=V_rdpiKLpkNiLHRiJ_mr9aqzz-n_cNX6vrE4ho6X1sg
apple-domain-verification=OWow7jkclDBEQkhjvYCqjm90ozhLTYdt5oPJzfM9wm4
zoho-verification=zb64387652.zmverify.zoho.com

Email authentication partial

SPF

v=spf1 ip4:96.30.48.81 include:em1898.afgdistribution.com include:_spf.google.com include:_spf.emailcampaigns.net include:amazonses.com include:mailsenders.netsuite.com include:spf.exclaimer.net include:spf.us.exclaimer.net include:zoho.com -all

strict (-all)

DMARC

v=DMARC1; p=none; pct=100; rua=mailto:dmarc-reports@afgdistribution.com

policy: none (monitoring only)

DKIM

google: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCdiRhtz0U6Jxy0qxC19N+QBbn5RzgIZ8N6cDPJ15lQrLbwhVooyygp6H1kLcxkgkhL6vEEIjMV+VgkURvX8c…
selector1: v=DKIM1;k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCsi4ZRNstxK3CKuyKmShormSS0HqMRLfwU9r4zItB3PTvWADPB+B5HaIaVRsm2MhuxCdX+UjTBjHoBAA/60TIw…

selectors probed

Certificate (current)

GoDaddy TLS Intermediate CA DV - R1v1

from 2026-03-16 to 2026-09-30

Expires in 134 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.afgdistribution.com

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: font-src fonts.gstatic.com use.typekit.net https://static.klaviyo.com *.gstatic.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.meetanshi.com meetanshi.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com https://www.youtube.com
strict-transport-security: max-age=31557600