indexo.dev

performancemachine.com

.com crawl

First seen 2026-04-15 · Last seen 2026-05-13 · ok HTTP/1.1 200 5280 ms crawled 2026-05-10

US · 34.213.218.175 · AS16509 Amazon.com, Inc.

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title
Performance Machine | Motorcycle Custom Wheels, Brakes and Accessories
Language
en-us

Technology

Server
Microsoft-IIS
Analytics
  • Google Tag Manager
Social widgets
  • YouTube Embed

Third-party hosts loaded (6)

  • stackpath.bootstrapcdn.com×3
  • cdn.jsdelivr.net×2
  • code.jquery.com×1
  • www.facebook.com×1
  • www.googletagmanager.com×1
  • www.youtube.com×1

Social

Contact

Email
Phone

Registration

Registrar
Network Solutions, LLC
Created
1999-08-05
Expires
2029-08-05 1174 days left
Updated
2024-06-06
Name servers
  • ns85.worldnic.com
  • ns86.worldnic.com

DNS records live

NS
  • ns85.worldnic.com
  • ns86.worldnic.com
MX
  • 10 d77448a.ess.barracudanetworks.com
  • 20 d77448b.ess.barracudanetworks.com
TXT
  • MS=ms68756696

Email authentication partial

SPF
v=spf1 mx ip4:23.21.109.197 ip4:23.21.109.212 ip4:147.160.167.0/26 ip4:64.235.144.0/20 ip4:74.63.132.192/26 ip4:216.58.172.128/26 include:spf.ess.barracudanetworks.com include:spf.protection.outlook.com ~all
softfail (~all)
DMARC
v=DMARC1; p=none; rua=mailto:62b2480698923@ag.dmarcly.com; ruf=mailto:62b2480698923@fo.dmarcly.com; sp=none;
policy: none (monitoring only) · sp=none
DKIM
  • selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDIflYnqj09SvPpThlJjH8ea8SdkLNX1ldMF8U0qI5hLOO+vYXFzu20VdJrOC98/sAiMhmCQt4tzk8ekrmio0…
  • selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3ZV5zq5t1gwmJ3HHMk+jXvp+Kd2aqeZviVjavU3FsX4PmvjvtYx7DHDoZbegcXGoXb3VwdL1mWQKm…
selectors probed

Certificate (current)

R12
from 2026-03-18 to 2026-06-16
Expires in 28 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.performancemachine.com/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing Permissions Policy
Header values
referrer-policy
strict-origin
x-frame-options
SAMEORIGIN
x-content-type-options
nosniff
content-security-policy
default-src 'self' 'unsafe-inline' 'unsafe-eval' ; img-src 'self' data: *.facebook.com *.googleapis.com *.icontact.com *.gstatic.com *.googletagmanager.com digitalthrottle.ss-gtm.com *.google-analytics.com *.doubleclick.net *.google.com *.googleadservices.com *.facebook.com *.facebook.net *.bing.com adnxs.com *.clickcease.com ; style-src 'self' 'unsafe-inline' *.bootstrapcdn.com *.googleapis.com *.icontact.com *.jsdelivr.net *.gstatic.com *.googletagmanager.com digitalthrottle.ss-gtm.com *.google-analytics.com *.doubleclick.net *.
strict-transport-security
max-age=31536000

Links to (6)

Linked from (2)