stockfit.io

.io crawl

First seen 2026-04-29 · Last seen 2026-04-30 · ok HTTP/1.1 200 4601 ms crawled 2026-05-07

US · 216.198.79.1 · AS16509 Amazon.com, Inc.

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title: StockFit - SEC Financial Data & Investment Analysis Tool
Description: Analyze SEC financial data for long-term investing. Compare companies, run DCF valuations, explore 20+ years of XBRL facts, and track sector-specific metrics.
Language: en
Canonical: https://stockfit.io

Open Graph

url: https://stockfit.io
title: StockFit - SEC Financial Data & Investment Analysis Tool
locale: en_US
site name: StockFit
description: Analyze SEC financial data for long-term investing. Compare companies, explore XBRL facts, and track sector metrics. Free investment research powered by EDGAR.

Technology

CDN: Vercel
CMS: Next.js

Analytics

Google Tag Manager

Third-party hosts loaded (1)

www.googletagmanager.com×1

Contact

Email

DNS records live

NS

ns-1063.awsdns-04.org
ns-1875.awsdns-42.co.uk
ns-416.awsdns-52.com
ns-949.awsdns-54.net

MX

Show 6 MX records

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
15 2bi2kbbfms27xj7x73tc4jjq477ianw2czmmz2ui6uenxrnf7ita.mx-verification.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

Verified for

Google

Email authentication partial

SPF

not published

DMARC

v=DMARC1; p=none;

policy: none (monitoring only)

DKIM

k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

R13

from 2026-04-17 to 2026-07-16

Expires in 56 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://www.stockfit.io/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: DENY
x-content-type-options: nosniff
content-security-policy: frame-ancestors 'none'
strict-transport-security: max-age=31536000; includeSubDomains