duro-last.com

HTML metadata

Title

Duro-Last®: "World's Best Roof®" | Durable Commercial Roofing Solutions

Description

Discover Duro-Last®, the leader in commercial roofing solutions. Our high-quality, customizable roofing systems are built to withstand the toughest conditions, providing superior durability, energy efficiency and long-term protection for commercial buildings

Language

en-US

Generator

WordPress 6.9.4

Canonical

https://duro-last.com/

Feeds

Open Graph

url: https://duro-last.com/
title: Duro-Last®: "World's Best Roof®" | Durable Commercial Roofing Solutions
locale: en_US
site name: Commercial Roofing System
description: Discover Duro-Last®, the leader in commercial roofing solutions. Our high-quality, customizable roofing systems are built to withstand the toughest conditions, providing superior durability, energy efficiency and long-term protection for commercial buildings
updated time: 2026-04-15T09:28:39-04:00

Technology

Server: Apache
CMS: WordPress

Analytics

Google Tag Manager

Fonts

Adobe Fonts

Third-party hosts loaded (7)

www.googletagmanager.com×3
cdn.elementor.com×2
cdn.callrail.com×1
dc.ads.linkedin.com×1
gmpg.org×1
use.typekit.net×1
www.facebook.com×1

Social

Contact

Phone

888.301.7712

Registration

Registrar

CSC Corporate Domains, Inc.

Created

1996-12-19

Expires

2026-12-18 212 days left

Updated

2025-05-05

Name servers

ns-1021.awsdns-63.net
ns-1386.awsdns-45.org
ns-1891.awsdns-44.co.uk
ns-37.awsdns-04.com

DNS records live

NS

ns-1021.awsdns-63.net
ns-1386.awsdns-45.org
ns-1891.awsdns-44.co.uk
ns-37.awsdns-04.com

MX

1 aspmx.l.google.com
10 aspmx2.googlemail.com
10 aspmx3.googlemail.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

Show 9 TXT records

d365mktkey=5RQd1OzMx8yOl0KJSH2UiUfv55oMf0zYufFYXiYCxlIx
d365mktkey=SMM8Ime9mzQYHkHxEc4OUqcnAYghgYiuUqVWW4Z4vrwx
duo_sso_verification=9bjidq9Yl4QujdBaDFAqQ268YBPab4j8WmJl5gwyumoRSfahYImy5P6XYGHwUMgK
google-gws-recovery-domain-verification=45360324
google-site-verification=BUl9gAmJ-_qmNnU1RyZ6_VfMcL6rZPqenqfSgjAlZ60
google-site-verification=HLDHS4Mu4FJ4-tAYUfzR7GK7bN0KNpoNl9B9aw_gFMc
j2tt9345lt33qdrbm4q8p9abfn
knowbe4-site-verification=d0cbf0c02eeaf7c5e79620706b39e132
nphe3sqpg79t2d8lf2oc7cp4mg

Email authentication partial

SPF

v=spf1 +a +mx +ip4:67.38.62.44 +include:spf.mtasv.net +include:_spf.google.com ~all

softfail (~all)

DMARC

v=DMARC1; p=none; pct=100; rua=mailto:tqdmxooi@ag.us.dmarcian.com,ruf=mailto:tqdmxooi@fr.us.dmarcian.com,mailto:re+oydr4osfkar@dmarc.postmarkapp.com; sp=none; aspf=r;

policy: none (monitoring only) · sp=none

DKIM

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5kwTdss9ou70xb9c1/CReRNU+MHXAG8tzu/Z9Mklf0oIialbKciVROqCP7HJQscaCwMnljp2J2aEs…

selectors probed

Certificate (current)

Amazon RSA 2048 M04

from 2026-02-08 to 2027-03-10

Expires in 294 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://duro-last.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=(), camera=(), microphone=(), payment=(), fullscreen=(self), clipboard-read=(self), clipboard-write=(self)
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' https://translate.googleapis.com https://translate.google.com https://translate-pa.googleapis.com https://www.youtube.com https://cdnjs.cloudflare.com https://maps.googleapis.com https://www.googletagmanager.com https://www.google-analytics.com https://stats.g.doubleclick.net https://cdn.callrail.com https://www.google.com https://gstatic.com https://*.gstatic.com https://cdn.elementor.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' https://use.typekit.net https://fonts.googleapis.com https://p.typekit.net https://fonts.gstatic.com https://www.gstatic.com 'unsafe-inline'; img-src 'self' data: https://*.gstatic.com https://www.googletagmanager.com; font-src 'self' data: https://fonts.gstatic.com https://use.typekit.net; connect-src 'self' https://*.googleapis.com https://analytics.google.com https://www.google-analytics.com https://www.googletagmanager.com https://stats.g.doubleclick.net https://gstatic.com https://*.gstatic.com; frame-src 'sel
strict-transport-security: max-age=31536000; includeSubDomains