indexo.dev

mypowerpayaccount.com

.com crawl

First seen 2026-05-02 · Last seen 2026-05-02 · ok HTTP/1.1 200 1813 ms crawled 2026-05-08

US · 75.2.90.37 · AS16509 Amazon.com, Inc.

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title
Loading...
Language
en

Technology

Server
server

Registration

Registrar
Amazon Registrar, Inc.
Created
2019-08-29
Expires
2026-08-29 101 days left
Updated
2026-02-02
Name servers
  • ns-1066.awsdns-05.org
  • ns-1544.awsdns-01.co.uk
  • ns-427.awsdns-53.com
  • ns-606.awsdns-11.net

DNS records live

NS
  • ns-1066.awsdns-05.org
  • ns-1544.awsdns-01.co.uk
  • ns-427.awsdns-53.com
  • ns-606.awsdns-11.net
MX
  • 10 inbound-smtp.us-west-2.amazonaws.com

Email authentication weak

SPF
v=spf1 include:amazonses.com -all
strict (-all)
DMARC
not published
DKIM
no key found at common selectors

Certificate (current)

R12
from 2026-04-04 to 2026-07-03
Expires in 45 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://mypowerpayaccount.com/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
findings
  • CSP uses wildcard sources
  • missing Referrer Policy
  • missing Permissions Policy
Header values
x-frame-options
SAMEORIGIN
x-content-type-options
nosniff
content-security-policy
default-src 'none'; frame-src 'self' blob: *.google.com *.cec-infrastructure.com *.constant.ai; script-src 'self' *.mobilizecollections.com code.jquery.com *.amazonaws.com cdnjs.cloudflare.com; style-src 'self' *.mobilizecollections.com maxcdn.bootstrapcdn.com fonts.googleapis.com code.jquery.com; font-src 'self' maxcdn.bootstrapcdn.com fonts.gstatic.com fonts.googleapis.com; img-src 'self' data: blob: *.mobilizecollections.com dev-payix-s3.s3.us-west-2.amazonaws.com s3-us-west-2.amazonaws.com; child-src 'none'; manifest-src 'self' *.mobilizecollections.com; connect-src 'self' *.mobilizecollections.com; upgrade-insecure-requests; report-uri https://payixrepay.report-uri.com/r/t/csp/enforce;
strict-transport-security
max-age=31536000; includeSubDomains, max-age=31536000; includeSubDomains

Linked from (1)