indexo.dev

cotypist.app

.app crawl

First seen 2026-04-20 · Last seen 2026-05-18 · ok HTTP/1.1 200 811 ms crawled 2026-05-13

DE · 162.55.254.212 · AS24940 Hetzner Online GmbH

Reputation 100/100

Classifying

HTML metadata

Title
Cotypist – AI Autocomplete for Mac | Type Faster, Write Better
Description
Cotypist: AI autocomplete for Mac. Type as fast as you think in any app. Save hours, reduce errors, and boost your productivity.
Language
en
Canonical
https://cotypist.app/

Open Graph

url
https://cotypist.app/
title
Cotypist – AI Autocomplete for Mac | Type Faster, Write Better
description
Cotypist: AI autocomplete for Mac. Type as fast as you think in any app. Save hours, reduce errors, and boost your productivity.

Technology

Server
Apache
CMS
Gatsby
Analytics
  • Fathom

Third-party hosts loaded (1)

  • cdn.usefathom.com×1

Social

DNS records live

NS
  • ns.second-ns.com
  • ns1.your-server.de
  • ns3.second-ns.de
MX
  • 10 www615.your-server.de
TXT
  • mailcoach-verification=8b6fa320-15c2-43d3-bda4-a7d2507d0d89
Verified for
  • Brevo
  • Google

Email authentication strong

SPF
v=spf1 mx ip6:2a01:4f8:c2c:6580::1 ip6:2a01:4f8:c2c:6580::2 ip4:116.203.152.44 include:forumd.net include:sendgrid.net include:pm-bounces.timingapp.com ~all
softfail (~all)
DMARC
v=DMARC1; p=quarantine; rua=mailto:re+ojhqgsg0dxl@dmarc.postmarkapp.com; sp=quarantine; aspf=r; adkim=r
policy: quarantine · sp=quarantine
DKIM
  • mail: k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z…
selectors probed

Certificate (current)

Encryption Everywhere DV TLS CA - G2
from 2025-07-08 to 2026-07-08
Expires in 48 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 50/100 Checked live page: https://cotypist.app/

present
  • content-security-policy
  • x-frame-options
findings
  • missing HSTS
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing content type protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
x-frame-options
SAMEORIGIN
content-security-policy
script-src 'self' 'unsafe-inline' cdn.usefathom.com timingapp.com cdnjs.cloudflare.com 1.replies.io eu-assets.i.posthog.com *.paddle.com; connect-src 'self' *.cotypist.app timingapp.com cdn.usefathom.com eu.i.posthog.com *.paddle.com; frame-src 'self' *.paddle.com

Links to (2)

Linked from (2)