loftiscomfort.com

HTML metadata

Title: Loftis Comfort Solutions LLC - HVAC & GAS Arab Alabama
Description: HVAC repair and maintenance in Arab, AL. Loftis Comfort Solutions services all major brands for homes and businesses in Marshall County and beyond.
Language: en-us
Canonical: https://www.loftiscomfort.com

Open Graph

url: https://www.loftiscomfort.com
title: Loftis Comfort Solutions LLC
region: Alabama
locality: Arab
description: Loftis Comfort Solutions LLC is a locally owned HVAC company providing expert heating and cooling services across Alabama. Specializing in residential and commercial repair, installation, and system maintenance, we bring over a decade of hands-on experience to every job. From emergency A/C fixes to smart thermostat upgrades, we deliver fast, honest, and affordable solutions that keep your comfort running year-round. No franchises. No shortcuts. Just reliable service you can trust—done right the first time.
postal-code: 35016
country-name: USA
phone-number: 205-446-9479
street-address: 191 Lillie Ln

Technology

Server: Apache
jQuery: 3.6.0

Fonts

Google Fonts

Third-party hosts loaded (4)

fonts.googleapis.com×2
www.google.com×2
www.prostarplanet.com×2
www.prostarseo.net×1

Social

Contact

Phone

205-446-9479

Address

191 Lillie Ln, 35016, Arab, Alabama, United States

Registration

Registrar

GoDaddy.com, LLC

Created

2024-04-19

Expires

2027-04-19 321 days left

Updated

2026-04-20

Name servers

ns51.domaincontrol.com
ns52.domaincontrol.com

DNS records live

NS

ns51.domaincontrol.com
ns52.domaincontrol.com

MX

0 mail.prostarmail.com

Email authentication strong

SPF

v=spf1 include:smtp2go.com ip4:97.66.208.234 -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:dmarc@loftiscomfort.com

policy: quarantine

DKIM

default: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCridcveIbKdUsZPkdCc7rzFkvq wM22zKM9VVCnJiL17onpWovyW9bCQUtKYafo8YTy3qcjsNx+alN9CziM5…

selectors probed

Certificate (current)

R12

from 2026-04-24 to 2026-07-23

Expires in 52 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 65/100 Checked live page: https://www.loftiscomfort.com/

present

content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

missing HSTS
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://accounts.google.com https://apis.google.com https://www.prostarplanet.com https://prostarplanet.com https://www.prostarseo.net https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.clarity.ms https://clarity.ms https://scripts.clarity.ms https://www.google.com https://www.gstatic.com https://www.recaptcha.net https://cdnjs.cloudflare.com https://maps.googleapis.com https://maps.gstatic.com https://cdn.tiny.cloud https://formoid.net https://*.formoid.net; script-src-elem 'self' 'unsafe-inline' https://accounts.google.com https://apis.google.com https://www.prostarplanet.com https://prostarplanet.com https://www.prostarseo.net https://www.googletagmanager.c