punchpass.com

.com crawl

First seen 2026-04-17 · Last seen 2026-05-19 · ok HTTP/1.1 200 1842 ms crawled 2026-05-12

US · 172.66.43.27 · AS13335 Cloudflare, Inc.

Reputation 89/100 weak security headers dmarc monitor-only

sector health type homepage

HTML metadata

Title: Fitness & Yoga Studio Management Software Made Simple | Punchpass
Description: Studio management software for running your fitness, yoga, or dance studio. World class support to help your studio grow. Try it today with a FREE trial!
Language: en
Generator: Astro v6.1.6
Canonical: https://punchpass.com/

Open Graph

url: https://punchpass.com/
title: Fitness & Yoga Studio Management Software Made Simple | Punchpass
site name: Punchpass
description: Studio management software for running your fitness, yoga, or dance studio. World class support to help your studio grow. Try it today with a FREE trial!

Technology

CDN: Cloudflare
CMS: Gatsby

Analytics

Cloudflare Insights
Google Tag Manager

Fonts

Adobe Fonts

Social widgets

YouTube Embed

Third-party hosts loaded (8)

www.youtube.com×4
use.typekit.net×3
brand-assets.capterra.com×2
brand-assets.softwareadvice.com×2
cdn.jsdelivr.net×1
p.typekit.net×1
static.cloudflareinsights.com×1
www.googletagmanager.com×1

Social

Contact

Address: Charlotte, VT, US

Registration

Registrar

Cloudflare, Inc.

Created

2013-07-25

Expires

2031-07-25 1892 days left

Updated

2024-06-04

Name servers

isaac.ns.cloudflare.com
nia.ns.cloudflare.com

DNS records live

NS

isaac.ns.cloudflare.com
nia.ns.cloudflare.com

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

Show 4 TXT records

google-site-verification=KMRMai4fZqHslMSja4FnUAXxRLaq5iQdT2-exnpPX3I
google-site-verification=OanHF0of07bGgoAW5dS_VaN6Z5f9UsB0Pw3NYTDhWCw
verifyzoom=e77ac88c684b43f9ab3696329c60172d
zoom-domain-verification = 59dd2be3-2ebf-4200-97f0-281f86d7e9b0

Email authentication partial

SPF

v=spf1 include:_spf.google.com

no all qualifier

DMARC

v=DMARC1; p=none; sp=none; rua=mailto:0fecb6a2dbc8472dab01f13c9850821c@dmarc-reports.cloudflare.net,mailto:re+408fa70fd083@inbound.dmarcdigests.com; aspf=r; pct=100

policy: none (monitoring only) · sp=none

DKIM

k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAjcUbKx6OD2zFGcGDa/9tJYYY0toNgPIGykKFUO0oESWlPz8+kDXs46XcHmeHCRlqNK/diu8cJQGkEP3g…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCgRdzGdG2DUn2nNuRYEAhzfnOwzEH0krA95lyW4FQyH8ic3PBCVkb9JjRef7M03CHyp3br50XLSk636XJe447G1V…

selectors probed

Certificate (current)

WE1

from 2026-04-03 to 2026-07-02

Expires in 44 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://punchpass.com/

findings

missing HSTS
missing Content Security Policy
missing frame protection
missing content type protection
missing Referrer Policy
missing Permissions Policy