exercise.com

HTML metadata

Title: Fitness Business Software to Grow Revenue 🚀 | Exercise.com
Description: Why use the same software as your hairdresser? Exercise.com is the all-in-one platform built to run and grow fitness businesses. Book a demo.
Language: en
Generator: All in One SEO Pro (AIOSEO) 4.7.9
Canonical: https://www.exercise.com/

Open Graph

url: https://www.exercise.com/
title: Fitness Business Software to Grow Revenue 🚀 | Exercise.com
locale: en_US
site name: Exercise.com | Software to grow your fitness business
description: Why use the same software as your hairdresser? Exercise.com is the all-in-one platform built to run and grow fitness businesses. Book a demo.

Technology

CDN: Cloudflare
CMS: WordPress

Analytics

Cloudflare Insights
Google Tag Manager
Hotjar

Ads

Meta Pixel

Third-party hosts loaded (11)

global.ketchcdn.com×2
cdn.convertbox.com×1
cdn.livechatinc.com×1
connect.facebook.net×1
img.youtube.com×1
js.chilipiper.com×1
js.hs-scripts.com×1
js.hsforms.net×1
script.hotjar.com×1
static.cloudflareinsights.com×1
www.googletagmanager.com×1

Social

Registration

Registrar

GoDaddy.com, LLC

Created

1995-02-24

Expires

2026-07-02 43 days left

Updated

2025-12-04

Name servers

angela.ns.cloudflare.com
vin.ns.cloudflare.com

DNS records live

NS

angela.ns.cloudflare.com
vin.ns.cloudflare.com

MX

0 exercise-com.mail.protection.outlook.com

TXT

Show 13 TXT records

google-site-verification=qWnJSNjCY2-bOjFQsbC1miBJBQGEMqdoSgKat5GEHqg
pinterest-site-verification=42c65bee39a60d285cd0eecb73cef096
slack-domain-verification=KXETOBKXKZdLFZVWThFnMdxzHdbfKEJlN18HzkNC
stripe-verification=888d863c7b82c84d26223a15d735f6896cbd069cca6481eee76aa8493e565af1
stripe-verification=db40ada0de7b180b6fe1a31ce8c76c10656b2d14ea4fc9a26dffeea4ce61df76
twilio-domain-verification=fd4bfba92995f01d75c306d07f3946f3
yahoo-verification-key=I0HjKEVBU7jI9UdgFwbKeVXnQol/aYLtQ6fDd8sPIfk=
zoom-domain-verification = afaaeaea-e63b-4a1b-b9ed-2151ca261e2a
MS=ms74252373
MS=ms85251097
amazon-business-verification=feaad6b095b7d9ce0b99def6086a88323bd1d5040bac83607a76a966ae86fea9
apple-domain-verification=6Knb4g5dCyR7gd8b
atlassian-domain-verification=IFM1IL1b39QqV0YYEGJzoIs8xgt3C5pV0zathtFEE8s8odpmt1En00UPbADwciPA

Email authentication strong

SPF

v=spf1 include:spf.protection.outlook.com include:_spf.google.com include:spf.mandrillapp.com include:amazonses.com include:_spf.salesforce.com include:8615875.spf10.hubspotemail.net ~all

softfail (~all)

DMARC

v=DMARC1; p=none; sp=none; rua=mailto:1fb4a7e1@in.mailhardener.com,mailto:70a8fb9161664f2c886259d44065d599@dmarc-reports.cloudflare.net; pct=100; ruf=mailto:1fb4a7e1@in.mailhardener.com

policy: none (monitoring only) · sp=none

DKIM

k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswOk5jrh1/qRPREoSlRsONXrLa9xq+mocpCt/adkDRZIIZMMvuLCrkMzpNQIId+OxYp34Eq2enJ698CwiM…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Etu18tuRa9LEBZROVm563THmK0edBhj1UBzw331tk0Us7PZ408pO1Z4z1+wz+XJ3A2hs+fDxCEN/6ZwXT…

selectors probed

Certificate (current)

WE1

from 2026-04-10 to 2026-07-09

Expires in 51 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://www.exercise.com/

present

strict-transport-security
content-security-policy
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing Referrer Policy
missing Permissions Policy

Header values

x-content-type-options: nosniff
content-security-policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' https://r.stripe.com https://js.stripe.com https://*.js.stripe.com https://connect-js.stripe.com https://www.googletagmanager.com https://*.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://connect.facebook.net https://iframely.net https://*.iframely.net https://iframe.ly https://*.iframe.ly https://cdn.iframe.ly https://maps.googleapis.com https://storage.googleapis.com https://*.storage.googleapis.com https://app.intercom.io https://widget.intercom.io https://js.intercomcdn.com https://*.mux.com https://*.litix.io https://snippet.meticulous.ai https://browser.sentry-cdn.com https://cdn.refersion.com https://www.gstatic.com https://*.gstatic.com https://cdnjs.cloudflare.com https://js.hs-scripts.com https://js.userflow.com https://*.userflow.com https://cdn.jwplayer.com https://js.hs-banner.com https://js.hs-analytics.net https://js
strict-transport-security: max-age=63072000; includeSubDomains; preload, max-age=31536000; includeSubDomains

Links to (6)

Linked from (1)

t3athlete.com×2