indexo.dev

theendlesscoconut.com

.com crawl

First seen 2026-06-06 · Last seen 2026-06-10 · ok HTTP/1.1 200 10084 ms crawled 2026-06-06

US · 129.121.65.114 · AS31898 Oracle Corporation

Reputation 66/100 weak security headers multiple spf records spf without fallback dmarc monitor-only

sector other type homepage

HTML metadata

Title
Design Studio - The Endless Coconut
Description
Design for the Senses. Providing creative relief for founders across Wellness, Food, and Lifestyle industries.
Language
en-AU
Generator
WordPress 6.9.4
Canonical
https://theendlesscoconut.com/
Feeds

Open Graph

url
https://theendlesscoconut.com/
title
Design Studio - The Endless Coconut
locale
en_US
site name
The Endless Coconut
description
Design for the Senses. Providing creative relief for founders across Wellness, Food, and Lifestyle industries.

Technology

Server
Apache
CMS
WordPress 6.9.4
jQuery
3.7.1
Fonts
  • Google Fonts
Third-party hosts loaded (7)
  • sp-ao.shortpixel.ai×11
  • fonts.googleapis.com×6
  • ads.gsw.mybluehost.me×4
  • gmpg.org×1
  • stats.wp.com×1
  • v0.wordpress.com×1
  • www.facebook.com×1

Social

Registration

Registrar
Promo People, Inc.
Created
2018-11-20
Expires
2026-11-20 162 days left
Updated
2026-01-26
Name servers
  • ns1.bluehost.com
  • ns2.bluehost.com

DNS records live

NS
  • ns1.bluehost.com
  • ns2.bluehost.com
MX
  • 0 mail.theendlesscoconut.com
TXT
  • include:sender.zoho-books.com.au
Verified for
  • Google
  • Meta

Email authentication weak

SPF
v=spf1 include:sender.zoho-books.com.au
missing all · multiple SPF records
DMARC
v=DMARC1; p=none
policy: none (monitoring only)
DKIM
  • default: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7gE+iuQ1wqqoou9pml8d8Hc+nap8wFokCzBpq+Y0/EwD/1ccH1EX/IEPTSmEgmVadvygCpoVfAC8Pc…
selectors probed

Certificate (current)

R12
from 2026-04-24 to 2026-07-23
Expires in 43 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 35/100 Checked live page: https://theendlesscoconut.com/

present
  • permissions-policy
findings
  • missing HSTS
  • missing Content Security Policy
  • missing frame protection
  • missing content type protection
  • missing Referrer Policy
Header values
permissions-policy
private-state-token-redemption=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com"), private-state-token-issuance=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com")

Links to (50)

Linked from (50)

Use this data via API

Everything on this page for theendlesscoconut.com is available as JSON from the indexo.dev REST & MCP API.

curl "https://indexo.dev/api/v1/domains/theendlesscoconut.com" \
  -H "X-API-Key: idx_..."

Read the docs & get a free key →