quick-fit-ducting.com

.com crawl

First seen 2026-06-01 · Last seen 2026-06-02 · ok HTTP/1.1 200 2054 ms crawled 2026-06-02

US · 104.21.94.173 · AS13335 Cloudflare, Inc.

Reputation 89/100 weak security headers dmarc monitor-only

Classifying

HTML metadata

Title: Buy Nordfab Ducting, Nordfab Ductwork | Quick Fit Ducting
Description: Application Associates is an authorized Nordfab distributor offering a full line of ducting pipes, adapters & blast gates. Free quotes. Free system design.
Language: en

Technology

CDN: Cloudflare
CMS: Gatsby
Stack: PHP

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (3)

fonts.googleapis.com×3
fonts.gstatic.com×1
www.googletagmanager.com×1

Contact

Phone

Registration

Registrar

GoDaddy.com, LLC

Created

2014-12-19

Expires

2027-12-19 563 days left

Updated

2025-12-20

Name servers

dalary.ns.cloudflare.com
zahir.ns.cloudflare.com

DNS records live

NS

dalary.ns.cloudflare.com
zahir.ns.cloudflare.com

MX

0 quickfitducting-com01cc.mail.protection.outlook.com

TXT

klaviyo-site-verification=SrFm86

Email authentication partial

SPF: v=spf1 include:spf.protection.outlook.com -all
strict (-all)
DMARC: v=DMARC1; p=none; rua=mailto:web@smartsites.com;
policy: none (monitoring only)
DKIM: no key found at common selectors

Certificate (current)

WE1

from 2026-04-05 to 2026-07-04

Expires in 31 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 45/100 Checked live page: https://www.quick-fit-ducting.com/

present

content-security-policy-report-only
x-frame-options
x-content-type-options

findings

missing HSTS
missing Content Security Policy
weak frame protection
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN, SAMEORIGIN
x-content-type-options: nosniff
content-security-policy-report-only: font-src *.fontawesome.com maxcdn.bootstrapcdn.com *.gstatic.com static.klaviyo.com *.yotpo.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets