indexo.dev

getpunchd.com

.com crawl

First seen 2026-04-16 · Last seen 2026-05-08 · ok HTTP/1.1 200 1234 ms crawled 2026-05-11

US · 142.251.38.78 · AS15169 Google LLC

Reputation 95/100 weak security headers

Classifying

HTML metadata

Title
Punchd is Closed for Business

Technology

Server
sffe
Fonts
  • Google Fonts

Third-party hosts loaded (1)

  • fonts.googleapis.com×2

Registration

Registrar
MarkMonitor Inc.
Created
2010-02-19
Expires
2027-02-19 276 days left
Updated
2026-01-18
Name servers
  • ns1.google.com
  • ns2.google.com
  • ns3.google.com
  • ns4.google.com

DNS records live

NS
  • ns1.google.com
  • ns2.google.com
  • ns3.google.com
  • ns4.google.com
MX
  • 0 smtp.google.com

Email authentication strong

SPF
v=spf1 include:_spf.google.com ~all
softfail (~all)
DMARC
v=DMARC1; p=reject; rua=mailto:mailauth-reports@google.com
policy: reject (enforced)
DKIM
no key found at common selectors

Certificate (current)

WR2
from 2026-04-20 to 2026-07-13
Expires in 55 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 40/100 Checked live page: https://getpunchd.com/

present
  • content-security-policy-report-only
  • x-content-type-options
  • cross-origin-resource-policy
findings
  • missing HSTS
  • missing Content Security Policy
  • missing frame protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
x-content-type-options
nosniff
cross-origin-resource-policy
cross-origin
content-security-policy-report-only
script-src 'nonce-e6AjIxv9q9ixz7CeTIO6Yg' 'report-sample' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' http: https:; object-src 'none'; report-uri https://csp.withgoogle.com/csp/static-on-bigtable; base-uri 'none'

Linked from (1)