formkit.com

.com crawl

First seen 2026-04-14 · Last seen 2026-05-11 · ok HTTP/1.1 200 526 ms crawled 2026-05-08

US · 188.114.96.3 · AS13335 Cloudflare, Inc.

Reputation 95/100 weak security headers

Classifying

HTML metadata

Title: FormKit ⚡️ The form framework for coding agents
Description: FormKit is the form framework for coding agents. Co-located validation, self-structuring data, composable inputs, and a compact single-component API help AI build complex forms in React and Vue without boilerplate or guesswork.
Language: en

Open Graph

title: FormKit ⚡️ The form framework for coding agents
description: FormKit is the form framework for coding agents. Co-located validation, self-structuring data, composable inputs, and a compact single-component API help AI build complex forms in React and Vue without boilerplate or guesswork.

Technology

CDN: Cloudflare
CMS: Nuxt

Third-party hosts loaded (2)

c4dsl0wx0t-dsn.algolia.net×1
cdn.jsdelivr.net×1

Social

Registration

Registrar

Amazon Registrar, Inc.

Created

1999-03-12

Expires

2027-03-12 297 days left

Updated

2026-02-05

Name servers

dan.ns.cloudflare.com
jean.ns.cloudflare.com

DNS records live

NS

dan.ns.cloudflare.com
jean.ns.cloudflare.com

MX

Show 6 MX records

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
15 tzc4hxkg7rzkgcf5fgb4uxouvcn7li3afbdxdqzodp6pvwnlx7tq.mx-verification.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

MS=ms23163068
google-site-verification=S0A71HDZ5f01WJnvOoi-FQ_DWW0X9WLb39wMc4X6ZGM

Email authentication strong

SPF

v=spf1 include:spf.mtasv.net include:_spf.google.com include:servers.mcsv.net ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:dmarc@formkit.com; ruf=mailto:dmarc@formkit.com; pct=100

policy: quarantine

DKIM

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPHB41+zrW89g6g8xBhIezRYXoKvVwHoFJ61joP4XprgClsJgYxZ/F+q3fxsVT80xYB3r2wZS3XHCS…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

WE1

from 2026-04-15 to 2026-07-14

Expires in 56 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 45/100 Checked live page: https://formkit.com/

present

x-content-type-options
referrer-policy

findings

missing HSTS
missing Content Security Policy
missing frame protection
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff