hbhr.io

.io crawl

First seen 2026-05-08 · Last seen 2026-05-08 · ok HTTP/1.1 200 3288 ms crawled 2026-05-15

GB · 13.42.118.28 · AS16509 Amazon.com, Inc.

Reputation 100/100

Classifying

HTML metadata

Title: Homepage - HBHR
Language: en-US
Canonical: https://hbhr.io/

Open Graph

url: https://hbhr.io/
title: Homepage - HBHR
locale: en_US
site name: HBHR
description: Explore the platform Everything you need to manage your workforce, from hire to pay and everything in between, in one connected platform. Compliant and certified HBHR in action Explore real examples of organisations transforming their HR and Payroll, reducing costs, improving compliance and freeing up valuable time.

Technology

Server: nginx
CMS: WordPress

Fonts

Google Fonts

Third-party hosts loaded (8)

unpkg.com×4
fonts.googleapis.com×3
px.ads.linkedin.com×2
cdn-cookieyes.com×1
cdnjs.cloudflare.com×1
fonts.gstatic.com×1
gmpg.org×1
j.6sc.co×1

Social

Contact

Address: HealthBoxHR Ltd, 2nd Floor, 2 Queens Square, Ascot Business Park, Lyndhurst Road, Ascot, Berkshire, SL5 9FE

DNS records live

NS

ns-1312.awsdns-36.org
ns-1565.awsdns-03.co.uk
ns-216.awsdns-27.com
ns-592.awsdns-10.net

MX

0 hbhr-io.mail.protection.outlook.com

Email authentication strong

SPF

v=spf1 include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:admin@hbhr.io; adkim=r; aspf=r;

policy: quarantine

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv46n8p7T/InYYjZxlol1RjJFFX42Csa4N1PruY12i6vvFdPjiuD9DTut6KsnhCegUJpiKJmntZFpzu…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIWxMTy41S2mujWbhk+4EwmcRul46KZBxO6+6eGVV38K8s+bmb8b1NGp0xR/4BUIjK6+EnTYb45lgf…

selectors probed

Certificate (current)

Amazon RSA 2048 M04

from 2026-04-22 to 2026-11-06

Expires in 169 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://hbhr.io/

present

strict-transport-security
x-frame-options
x-content-type-options
permissions-policy

findings

missing Content Security Policy
missing Referrer Policy

Header values

x-frame-options: SAMEORIGIN
permissions-policy: geolocation=(self), microphone=(), camera=(), payment=()
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains