indexo.dev

braincotton.com

.com crawl

First seen 2026-05-01 · Last seen 2026-05-08 · ok HTTP/1.1 200 1230 ms crawled 2026-05-08

US · 162.214.80.27 · AS31898 Oracle Corporation

Reputation 89/100 weak security headers dmarc monitor-only

sector other type landing page

HTML metadata

Title
Home |
Language
en-US
Generator
WordPress 6.9.4
Canonical
https://braincotton.com/
Feeds

Open Graph

url
https://braincotton.com/
title
Home |
locale
en_US
description
Space Max Black Space Max Black د.ك11 Select options This product has multiple variants. The options may be chosen on […]

Technology

Server
Apache
CMS
WordPress
Analytics
  • Google Tag Manager
Fonts
  • Font Awesome

Third-party hosts loaded (4)

  • use.fontawesome.com×3
  • www.googletagmanager.com×2
  • gmpg.org×1
  • www.google.com×1

Registration

Registrar
Bluehost Inc.
Created
2018-06-03
Expires
2026-06-03 15 days left
Updated
2025-06-24
Name servers
  • ns1.bluehost.in
  • ns2.bluehost.in

DNS records live

NS
  • ns1.bluehost.in
  • ns2.bluehost.in
MX
  • 0 mail.braincotton.com

Email authentication partial

SPF
v=spf1 a mx include:websitewelcome.com nclude:_spf.google.com ~all
softfail (~all)
DMARC
v=DMARC1; p=none; pct=50;
policy: none (monitoring only) · pct=50
DKIM
  • default: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMbZJi5mBKTrPZoGuhAj+J6b5MYpTqT9ldI2/Y6Xph/j5wgbyFxscXxxtaI8zK7PvhiHCkyEsgLHew…
  • google: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCxaORQ9fTLsYgBxFbbQdEZGOFz8RCNH77YdCrX9l+dypaKFc9lWcO3+jHr0B73HrmoYibzNvj8BusgiamPwD…
selectors probed

Certificate (current)

R12
from 2026-04-14 to 2026-07-13
Expires in 56 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 45/100 Checked live page: https://braincotton.com/

present
  • content-security-policy
findings
  • missing HSTS
  • CSP allows unsafe inline scripts/styles
  • missing frame protection
  • missing content type protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
content-security-policy
default-src 'self'; script-src 'self' https://braincotton.com https://www.braincotton.com https://s.w.org https://stats.wp.com https://www.googletagmanager.com https://tagmanager.google.com https://www.google-analytics.com https://ssl.google-analytics.com https://region1.google-analytics.com https://analytics.google.com https://www.google.com https://www.gstatic.com https://ssl.gstatic.com https://www.recaptcha.net https://recaptcha.net https://challenges.cloudflare.com https://js.stripe.com https://www.paypal.com https://sandbox.paypal.com https://www.sandbox.paypal.com https://maps.googleapis.com https://maps.gstatic.com https://www.youtube.com https://youtube.com https://www.youtube-nocookie.com https://youtube-nocookie.com https://s.ytimg.com https://i.ytimg.com https://player.vimeo.com https://f.vimeocdn.com https://i.vimeocdn.com https://fonts.googleapis.com https://fonts.gstatic.com https://cdn.jsdelivr.net 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline' https://

Linked from (50)