gftinc.com

HTML metadata

Title

Ingenuity That Shapes Lives - GFT

Description

GFT is an AEC firm shaping the Infrastructure of Life: water, power, transportation, and buildings. Our team of 5,000+ experts design, construct, and engineer resilient, creative solutions that uplift communities across North America and beyond.

Language

en-US

Generator

Redux 4.4.17

Canonical

https://www.gftinc.com/

Feeds

GFT » Feed RSS

Open Graph

url: https://www.gftinc.com/
title: Ingenuity That Shapes Lives
locale: en_US
site name: GFT
description: GFT is an AEC firm shaping the Infrastructure of Life: water, power, transportation, and buildings. Our team of 5,000+ experts design, construct, and engineer resilient, creative solutions that uplift communities across North America and beyond.

Technology

Server: nginx
CMS: WordPress

Analytics

Google Tag Manager

Fonts

Adobe Fonts
Font Awesome

Third-party hosts loaded (4)

use.fontawesome.com×4
use.typekit.net×2
cdn.userway.org×1
www.googletagmanager.com×1

Social

Registration

Registrar

Network Solutions, LLC

Created

2016-02-03

Expires

2027-02-03 260 days left

Updated

2025-03-27

Name servers

ns1-09.azure-dns.com
ns2-09.azure-dns.net
ns3-09.azure-dns.org
ns4-09.azure-dns.info

DNS records live

NS

ns1-09.azure-dns.com
ns2-09.azure-dns.net
ns3-09.azure-dns.org
ns4-09.azure-dns.info

MX

10 usb-smtp-inbound-1.mimecast.com
10 usb-smtp-inbound-2.mimecast.com

TXT

Show 16 TXT records

_916camjzh15s33nkdtq86wyunjyg1ld
8addc94173242ef264999befd0e5216c56a75dc057cf45265c
adobe-idp-site-verification=c0e3f6f279979d30f45825854ae24dc0dd802a67a283c6794ec5209509ac1770
amazon-business-verification=db0ff1826a3afcb5ace09b3adc6ef9744b59dbc8fdbd7f7aafb2f127dc331e30
openai-domain-verification=dv-gfvKmAEMogL6L9ADDgns0Ygj
knowbe4-site-verification=5ec2e0066fb490bc7782eb8f521a1357
apple-domain-verification=fiI50lj0BBMeWB1E
autodesk-domain-verification=IbU3VCn0qV8k4cLg9rTC
cisco-ci-domain-verification=695b23a9a695b2031868464a92037d23e5fed45fd46b4b0bfde639c8edd2294a
_coge4o9arum7y4y55j1dss6i2xuze1s
autodesk-domain-verification=uqzqWWPz2K6ltWNCDgXJ
autodesk-domain-verification=N_AZZGLvQr-AqYambjA5
bluebeam-verification=nl3dbdhtdceagz63ijr3usgw1y6jvs
miro-verification=6790e665691d6b18809c625dfb45b92bc5a3708e
nearmap-domain-verification=b7fdaec90861aad269827e0e2637e444b2b7d10d7cd09b64ee7f3a17233e712b
0ed1fe018a6643d2fa56314b9ca1451cf785edad15

Email authentication strong

SPF

v=spf1 include:spf.protection.outlook.com include:usb._netblocks.mimecast.com ip4:4.14.50.222 ip4:35.80.141.6 ip4:44.229.121.55 ip4:148.59.100.16/28 include:servers.mcsv.net include:spf.smtp2go.com include:6d1cef.workshop-spf.net -all

strict (-all)

DMARC

v=DMARC1; p=none;

policy: none (monitoring only)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjg7m5hWP+AD6TZFTETs0J0D7wrhhEU1WTJfMwrOA3+C9JrJrnCx7SwmnP2lC9G0AxnSQgD5CHT6mV…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

R13

from 2026-04-16 to 2026-07-15

Expires in 57 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.gftinc.com/

present

strict-transport-security
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

missing Content Security Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: battery=(), camera=(), cross-origin-isolated=(), display-capture=(), document-domain=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), fullscreen=(), geolocation=(), gyroscope=(), interest-cohort=(), layout-animations=(), legacy-image-formats=(), magnetometer=(), microphone=(), midi=(), navigation-override=(), oversized-images=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-script=(), usb=(), vertical-scroll=(), web-share=(), wake-lock=(), xr-spatial-tracking=()
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload