pointpay.io

HTML metadata

Title

PointPay – Cryptocurrency Exchange for Buying and Selling Digital Coins for Bitcoin, Ethereum & Altcoins

Description

A cryptocurrency exchange allows users to conveniently buy, sell, and trade a wide variety of digital coins and tokens. It enables you to create an account quickly and easily so you can purchase digital currencies like Bitcoin, Ethereum, and popular altcoins.

Language

en

Canonical

https://exchange.pointpay.io/

Translations

ar
bn
de
en
es
fa
fl
fr
hi
id
it
ja
ko
ni
pl
pt
ru
sr
th
tr
uk
vi
zh

Open Graph

url: https://exchange.pointpay.io/
title: PointPay – Cryptocurrency Exchange for Buying and Selling Digital Coins for Bitcoin, Ethereum & Altcoins
locale: en
site name: PointPay
description: A cryptocurrency exchange allows users to conveniently buy, sell, and trade a wide variety of digital coins and tokens. It enables you to create an account quickly and easily so you can purchase digital currencies like Bitcoin, Ethereum, and popular altcoins.

Technology

CDN: Cloudflare
CMS: Nuxt

Analytics

Cloudflare Insights

Fonts

Google Fonts

Third-party hosts loaded (6)

back-0.pointech.cloud×37
fonts.googleapis.com×2
fonts.gstatic.com×2
accounts.google.com×1
appleid.cdn-apple.com×1
static.cloudflareinsights.com×1

Social

Contact

Email

DNS records live

NS

boyd.ns.cloudflare.com
rose.ns.cloudflare.com

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
30 pointpay-io.mail.protection.outlook.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

Show 7 TXT records

MS=ms85312846
Sendinblue-code:a1d1ad529bae3dd7323432c65e2c9144
google-site-verification=-QGhk2QPh5h_qR8GPRCWmgtaPngLVNSdhig2kYsi7DQ
google-site-verification=3M3_xIxjYzunQf0yLJFtUBijWQlxhYVYFN9JapOnpTA
google-site-verification=4mwlHhDd0rBfviqJek-0bZGzNKPmnmHZIlS18FaUmHA
google-site-verification=6sBbnlZAiG5OPOQ_N6ns7C-fjK5XvKyDZlWypcAtbSY
MS=ms33295429

Email authentication strong

SPF

v=spf1 include:mxsspf.sendpulse.com include:spf.mandrillapp.com include:mailgun.org include:_spf.google.com include:155658a7b.spf2.netcorecloud.net -all

strict (-all)

DMARC

v=DMARC1; p=reject; rua=mailto:postmaster@pointpay.io; adkim=r; aspf=r

policy: reject (enforced)

DKIM

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvfOVUGbfI7nswZGHdTvkGstEkdNbiuliBGiHXhrN/YfpXSTFenkGdCFHjH5x0COAErmxaEq9oV6Yg…
mail: k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z…

selectors probed

Certificate (current)

E7

from 2026-05-02 to 2026-07-31

Expires in 74 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://exchange.pointpay.io/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
weak frame protection

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: ALLOWALL
permissions-policy: geolocation=(*),midi=(*),sync-xhr=(*),microphone=(*),camera=(*),fullscreen=(self),payment=(*)
x-content-type-options: nosniff
content-security-policy: default-src * data: mediastream: blob: filesystem: about: ws: wss: 'unsafe-eval' 'wasm-unsafe-eval' 'unsafe-inline'
strict-transport-security: max-age=31536000; includeSubDomains; preload;

Links to (23)

Linked from (1)

turbotoken.io×2