knock.app

.app toplist crawl

First seen 2026-04-11 · Last seen 2026-05-18 · ok HTTP/1.1 200 1660 ms crawled 2026-05-18

US · 104.18.8.234 · AS13335 Cloudflare, Inc.

Reputation 100/100

Classifying

HTML metadata

Title: Knock | Customer engagement infrastructure
Description: Knock is customer engagement infrastructure for your product, marketing, and transactional messaging. Activate your data, ship cross-channel messaging, and accelerate growth.
Language: en
Canonical: https://knock.app

Open Graph

url: https://knock.app
title: Knock | Customer engagement infrastructure
site name: Knock
description: Knock is customer engagement infrastructure for your product, marketing, and transactional messaging. Activate your data, ship cross-channel messaging, and accelerate growth.

Technology

CDN: Cloudflare
CMS: Next.js

Social

Contact

Address: 175 Varick St, #413, 10014, New York, NY, US

DNS records live

NS

diana.ns.cloudflare.com
maxim.ns.cloudflare.com

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

Show 5 TXT records

00DHp000002YPLt=1TBPL00000000Pp
MS=ms12443784
OSSRH-81645
google-site-verification=ZTAq-ndKNxkkTud6e83eMvpg2wvttoxHT6kknGwNenU
mongodb-site-verification=1fEA36ereccMoCnklWhDtnSxBQufimmI

Email authentication strong

SPF

v=spf1 include:_spf.google.com ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; rua=mailto:dmarc-reports@knock.app,mailto:32c73ad8ac1542e8b57c2b9188aa6515@dmarc-reports.cloudflare.net; pct=100; adkim=s; aspf=s

policy: reject (enforced)

DKIM

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLqfWsxhrQCwmic9tKD6SsVuNvuhAo0gIU0H35A08e4SaKtizOulaXJ0QKHCapngvutR7988+oHjXU…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

WE1

from 2026-05-14 to 2026-08-12

Expires in 85 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 65/100 Checked live page: https://knock.app/

present

strict-transport-security
content-security-policy
x-content-type-options

findings

short HSTS max-age
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing Referrer Policy
missing Permissions Policy

Header values

x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' https:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' blob: data: https: *.public.blob.vercel-storage.com; media-src 'self' blob: data: https: *.public.blob.vercel-storage.com; font-src 'self' https://fonts.googleapis.com; frame-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; upgrade-insecure-requests;
strict-transport-security: max-age=2592000