longconstructionny.com

.com crawl

First seen 2026-04-14 · Last seen 2026-05-17 · ok HTTP/1.1 200 1203 ms crawled 2026-05-09

US · 103.133.1.1 · AS209242 Cloudflare London, LLC

Reputation 94/100 dmarc monitor-only

sector home type homepage

HTML metadata

Title: Long Construction | Roofing & Siding Services Rochester, NY
Description: Choose Long Construction, Rochester's leading family-owned roofing & siding contractor. We offer both residential and commercial roofing services.
Language: en
Canonical: https://longconstructionny.com/

Open Graph

url: https://longconstructionny.com
title: Long Construction | Roofing & Siding Services Rochester, NY
description: Choose Long Construction, Rochester's leading family-owned roofing & siding contractor. We offer both residential and commercial roofing services.
updated time: 2026-04-24T15:43:32.000000Z

Technology

CDN: Cloudflare

Analytics

Google Tag Manager

Third-party hosts loaded (6)

media.cmsmax.cloud×55
apis.owenscorning.com×1
cdn.n1ed.com×1
fastimage.cmsmax.app×1
static.elfsight.com×1
www.googletagmanager.com×1

Social

Contact

Phone

585-433-5664

Address

2075 Dewey Ave, 14615, Rochester, New York, US

Registration

Registrar

Porkbun LLC

Created

2018-04-04

Expires

2027-04-04 320 days left

Updated

2026-04-03

Name servers

curitiba.ns.porkbun.com
fortaleza.ns.porkbun.com
maceio.ns.porkbun.com
salvador.ns.porkbun.com

DNS records live

NS

curitiba.ns.porkbun.com
fortaleza.ns.porkbun.com
maceio.ns.porkbun.com
salvador.ns.porkbun.com

MX

1 smtp.google.com

TXT

google-site-verification=Vo6g8CAVsXyBxV3aQja8NfMmYKeeceX_ibJm51S5enw

Email authentication partial

SPF: v=spf1 include:_spf.google.com ~all
softfail (~all)
DMARC: v=DMARC1; p=none;
policy: none (monitoring only)
DKIM: no key found at common selectors

Certificate (current)

WE1

from 2026-04-18 to 2026-07-17

Expires in 60 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://longconstructionny.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin, strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: camera=(self), microphone=(self), usb=(), accelerometer=(), gyroscope=(), magnetometer=(), geolocation=*, payment=(self), fullscreen=*, picture-in-picture=*, autoplay=*
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src * data: blob: wss: ws:; child-src * data: blob:; frame-src 'self' https:; media-src 'self' blob: https:; worker-src * data: blob:; manifest-src *; object-src 'none'; base-uri 'self'; form-action 'self' https:; frame-ancestors 'self'; upgrade-insecure-requests
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy: same-origin-allow-popups