indexo.dev

aloha.com

.com crawl

First seen 2026-04-14 · Last seen 2026-05-08 · ok HTTP/1.1 200 1258 ms crawled 2026-05-08

CA · 23.227.38.32 · AS13335 Cloudflare, Inc.

Reputation 100/100

Classifying

HTML metadata

Title
Welcome to ALOHA. The Better Plant-Based Protein Brand.
Description
Meet ALOHA's mouthwateringly delicious Plant-Based Protein Bars, Shakes, and Powders. USDA Organic, Non-GMO Project Verified, Made with real ingredients by a Certified B Corp. Click to get our best deals and make the switch to ALOHA today!
Language
en
Canonical
https://aloha.com/
Translations
  • en
  • en-ca

Open Graph

url
https://aloha.com/
title
Welcome to ALOHA. The Better Plant-Based Protein Brand.
site name
ALOHA
description
Meet ALOHA's mouthwateringly delicious Plant-Based Protein Bars, Shakes, and Powders. USDA Organic, Non-GMO Project Verified, Made with real ingredients by a Certified B Corp. Click to get our best deals and make the switch to ALOHA today!

Technology

CDN
Cloudflare
Analytics
  • Google Tag Manager
  • Microsoft Clarity
Ads
  • Amazon Ads
  • Meta Pixel
  • TikTok Pixel
Fonts
  • Google Fonts
Third-party hosts loaded (24)
  • cdn.shopify.com×7
  • www.googletagmanager.com×4
  • api.config-security.com×2
  • conf.config-security.com×2
  • shop.app×2
  • static.klaviyo.com×2
  • acsbapp.com×1
  • analytics.tiktok.com×1
  • backend.alia-prod.com×1
  • cdn.rebuyengine.com×1
  • cdn.savedby.io×1
  • cdn.shopifycdn.net×1
  • cdn.skio.com×1
  • connect.facebook.net×1
  • d3hw6dc1ow8pp2.cloudfront.net×1
  • fonts.googleapis.com×1
  • fonts.gstatic.com×1
  • monorail-edge.shopifysvc.com×1
  • pixel.quantserve.com×1
  • rapid-cdn.yottaa.com×1
  • s.amazon-adsystem.com×1
  • scripts.clarity.ms×1
  • trackifyx.redretarget.com×1
  • triplewhale-pixel.web.app×1

Social

Registration

Registrar
Tucows Domains Inc.
Created
1998-05-06
Expires
2031-02-19 1736 days left
Updated
2024-01-30
Name servers
  • ns-1107.awsdns-10.org
  • ns-1938.awsdns-50.co.uk
  • ns-283.awsdns-35.com
  • ns-752.awsdns-30.net

DNS records live

NS
  • ns-1107.awsdns-10.org
  • ns-1938.awsdns-50.co.uk
  • ns-283.awsdns-35.com
  • ns-752.awsdns-30.net
MX
  • 0 aloha-com.mail.protection.outlook.com
TXT
Show 10 TXT records
  • klaviyo-site-verification=Vktb4j
  • tkf9dr0fdc0hv75anrglr9k1up
  • MS=E5154F05A60BBE6DF7A0A031621DF507E11598D7
  • MS=ms90342147
  • facebook-domain-verification=d39b34c5ud4hrrdww1o85l9wnkd1j8
  • google-site-verification=74mIvFK3n40rnr0yJh8vfVFaz6fE67PRSQzY_qJSN2M
  • google-site-verification=QVReR1r-kNso10qtAXO6OBNtj4y_EszfUquZlylmtPk
  • google-site-verification=gQWSScNe6NXXeCHTz3sFEvv1ark_VHjUYm3FLS9QTSc
  • klaviyo-site-verification=QRbiNA
  • klaviyo-site-verification=VjYA9A

Email authentication strong

SPF
v=spf1 include:spf.mtasv.net include:mailgun.org include:mail.zendesk.com include:servers.mcsv.net include:spf.protection.outlook.com ~all
softfail (~all)
DMARC
v=DMARC1; p=reject; rua=mailto:dmarc@aloha.com,mailto:dmarc_agg@dmarc.everest.email;
policy: reject (enforced)
DKIM
Show 5 DKIM selectors
  • google: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC6BOoQcz7SHEXqTsUzff61fG8NqTznYDmwMuy/rkUARGkwfm743Jln1dlTErBtfjwz1pbZd2rAlvJtM29AAy…
  • selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33wyxNJ4u8gpoOLISSxpdXF5kTWIEW0beNrWZXCoGHeHiY4v/pptKChQmnMP7aFA5vWMNSyrFONsdm…
  • k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…
  • s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHuY4miVm9USAibigC84ZSUEb5boDe4yZmEEz6i2Uvh8ElV/MZ7ncRDz/wQUMeLPEHST7KCCktdVFLor3r…
  • s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDsL7xBsXjpIl5zxL6O+C7uCAq9V619uYdj0JPN4HEn364n6kOuRZ/wA4fiMHplyvpimm1b3b12Z2m2/EiHcww+6C…
selectors probed

Certificate (current)

E7
from 2026-03-31 to 2026-06-29
Expires in 40 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://aloha.com/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
findings
  • short HSTS max-age
  • missing Referrer Policy
  • missing Permissions Policy
Header values
x-frame-options
DENY
x-content-type-options
nosniff
content-security-policy
block-all-mixed-content; frame-ancestors 'none'; upgrade-insecure-requests;
strict-transport-security
max-age=7889238

Links to (7)

Linked from (1)