indexo.dev

pcymca.net

.net crawl

First seen 2026-04-22 · Last seen 2026-05-16 · ok HTTP/1.1 200 4552 ms crawled 2026-05-16

US · 104.21.94.118 · AS13335 Cloudflare, Inc.

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title
YMCA of Easley, Pickens and Powdersville – Building Better Communities
Language
en-US
Generator
Elementor 4.0.5; settings: css_print_method-external, google_font-enabled, font_display-auto
Canonical
https://www.pcymca.net/

Technology

CDN
Cloudflare
CMS
WordPress
Analytics
  • Cloudflare Insights
  • Google Tag Manager
Fonts
  • Google Fonts
Third-party hosts loaded (9)
  • s3.amazonaws.com×10
  • cdnjs.cloudflare.com×6
  • reclique-core-pickens.s3.amazonaws.com×6
  • cdn.jsdelivr.net×3
  • ajax.googleapis.com×2
  • fonts.googleapis.com×2
  • www.googletagmanager.com×2
  • recliquecore.s3.amazonaws.com×1
  • static.cloudflareinsights.com×1

Social

Contact

Phone
Address
st event = new Event('cartExpired'); window.dispatchEvent(event); } } }, 1000

Registration

Registrar
GoDaddy.com, LLC
Created
2004-02-13
Expires
2027-02-13 269 days left
Updated
2026-02-14
Name servers
  • faye.ns.cloudflare.com
  • sean.ns.cloudflare.com

DNS records live

NS
  • faye.ns.cloudflare.com
  • sean.ns.cloudflare.com
MX
Show 7 MX records
  • 10 aspmx.l.google.com
  • 20 alt1.aspmx.l.google.com
  • 20 alt2.aspmx.l.google.com
  • 30 aspmx2.googlemail.com
  • 30 aspmx3.googlemail.com
  • 30 aspmx4.googlemail.com
  • 30 aspmx5.googlemail.com
TXT
  • canva-site-verification=-3G8uOlA83kJtaFYrlxIgQ

Email authentication partial

SPF
v=spf1 mx include:_spf.google.com -all
strict (-all)
DMARC
v=DMARC1; p=none;
policy: none (monitoring only)
DKIM
no key found at common selectors

Certificate (current)

WE1
from 2026-04-29 to 2026-07-29
Expires in 70 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 65/100 Checked live page: https://www.pcymca.net/

present
  • strict-transport-security
  • content-security-policy
  • x-content-type-options
findings
  • short HSTS max-age
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing frame protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
x-content-type-options
nosniff
content-security-policy
script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.recliquecore.com ajax.googleapis.com api.heartlandportico.com api2.heartlandportico.com app.pendo.io applepay.cdn-apple.com *.services.gainspro.com *.staging-services.gainspro.com cdn.jsdelivr.net cdn.pendo.io cdn.sugarwod.com cdn.talkjs.com cdnjs.cloudflare.com code.jquery.com code.upscope.io connect.facebook.net core.spreedly.com data.pendo.io googleads.g.doubleclick.net groupexpro.com hps.github.io www.groupexpro.com js.intercomcdn.com js.stripe.com js.upscope.io kit.fontawesome.com maps.googleapis.com maps.gstatic.com pendo-static-5363969413742592.storage.googleapis.com recliquecore.s3.amazonaws.com secure.nmi.com static.cloudflareinsights.com static.filestackapi.com translate.google.com translate.googleapis.com translate-pa.googleapis.com unpkg.com widget.intercom.io www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com www.gstatic.com www.youtube.com *.wufoo.com static.ctctcdn.com/js/signu
strict-transport-security
max-age=2592000; includeSubDomains

Links to (5)

Linked from (1)