indexo.dev

merch.ai

.ai crawl

First seen 2026-05-12 · Last seen 2026-05-18 · ok HTTP/1.1 200 755 ms crawled 2026-05-18

US · 104.236.72.36 · AS14061 DigitalOcean, LLC

Reputation 95/100 weak security headers

Classifying

HTML metadata

Title
Merch.ai — AI Powered Tools for the Promo Industry
Description
Merch.ai is the fastest way for promotional product distributors and suppliers to create custom lookbooks and presentations. 30-day FREE trial.
Language
en-US
Generator
WordPress 6.9.4
Canonical
https://merch.ai/
Feeds

Open Graph

url
https://merch.ai/
title
Merch.ai – AI Powered Tools for the Promotional Products Industry
locale
en_US
site name
Merch.ai
description
Merch.ai is the fastest way for promotional product distributors and suppliers to create fully-branded PDF Lookbooks and Custom Presentations.

Technology

Server
nginx
CMS
WordPress
Analytics
  • Google Tag Manager
Fonts
  • Google Fonts
Third-party hosts loaded (10)
  • cdn.jsdelivr.net×3
  • assets.codepen.io×2
  • fonts.googleapis.com×2
  • cdnjs.cloudflare.com×1
  • code.jquery.com×1
  • fonts.gstatic.com×1
  • gmpg.org×1
  • js.hs-scripts.com×1
  • js.hsforms.net×1
  • www.googletagmanager.com×1

Social

Registration

Registrar
GoDaddy.com, LLC
Created
2017-12-15
Expires
2027-03-20 304 days left
Updated
2025-04-02
Name servers
  • gail.ns.cloudflare.com
  • curt.ns.cloudflare.com

DNS records live

NS
  • curt.ns.cloudflare.com
  • gail.ns.cloudflare.com
MX
  • 1 smtp.google.com
TXT
  • rippling-domain-verification=24b740cb6726d701
  • google-site-verification=BB-lIND4xDFre-8tWRWL5B26fL1A01pHZA5BgeIdNAE
  • knowbe4-site-verification=d0d0afd31398456ff28c9623567d65a3

Email authentication strong

SPF
v=spf1 include:mailgun.org include:46524263.spf02.hubspotemail.net include:_spf.google.com ~all
softfail (~all)
DMARC
v=DMARC1; p=quarantine; pct=60; rua=mailto:dmarc@merch.ai
policy: quarantine · pct=60
DKIM
  • google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdX+aD1YalYOEHLEdPpYa9JV2moC2Y947qAZnTihFkMsdfEdkn1s4NTdmg8QDZfDL0K23Kzl2iWnE8…
  • s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqarxsdjomyw/FYa1HIJM9EpofX+okixaVPsbkve90Rt5EMneLSNIjgWcJearE1kd8D6IbDv5H0k4zkZ4SE…
  • s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6CoVEFp59fy2irNhHwjAkLorM+nfGgkt1lf7i5rKhEwRBt7bNY/vZnPrjbQ46Fkt3V3T9rreXChHGU0lFl…
selectors probed

Certificate (current)

E7
from 2026-04-11 to 2026-07-10
Expires in 52 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://merch.ai/

findings
  • missing HSTS
  • missing Content Security Policy
  • missing frame protection
  • missing content type protection
  • missing Referrer Policy
  • missing Permissions Policy

Links to (2)

Linked from (1)