ironvalleysupply.com

.com crawl

First seen 2026-04-11 · Last seen 2026-05-20 · ok HTTP/1.1 200 5899 ms crawled 2026-05-19

US · 52.3.163.37 · AS14618 Amazon.com, Inc.

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Language: en-us

Technology

CDN: Cloudflare

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (4)

fonts.googleapis.com×3
d1fjwr3s755cco.cloudfront.net×2
www.googletagmanager.com×2
fonts.gstatic.com×1

Registration

Registrar

GoDaddy.com, LLC

Created

2021-01-21

Expires

2028-01-21 610 days left

Updated

2026-01-22

Name servers

ns23.domaincontrol.com
ns24.domaincontrol.com

DNS records live

NS

ns23.domaincontrol.com
ns24.domaincontrol.com

MX

0 ironvalleysupply-com.mail.protection.outlook.com

TXT

infor-cloudsuite-domain-verification=6JFZTKPQVCYGV6ATVRLBY6M6KGUTNGCTQKMTTPNAHG4TZYJ9QB386YARZ6CZ58AF

Verified for

Microsoft 365

Email authentication partial

SPF

v=spf1 include:spf.protection.outlook.com include:sendgrid.net ip4:192.254.115.42 -all

strict (-all)

DMARC

v=DMARC1; p=none;

policy: none (monitoring only)

DKIM

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyf2oeH+RY4b2rlm12fZbNoMF9HcI/4ESMALCgH/bocgnNp/5mtw3JZ/2hrnqfSuCtVRScO3D+syBdj…
selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3tY0/DCJflN1KmU0ycrhKvaq48jSLadR7pAya82LnyEbpaHE/EQOO3UyPM54SSROpCUWgBorzJVRW8…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

R12

from 2026-03-21 to 2026-06-19

Expires in 30 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.ironvalleysupply.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self' https: data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:;
strict-transport-security: max-age=31536000; includeSubDomains