indexo.dev

heartland-initiative.org

.org crawl

First seen 2026-05-31 · Last seen 2026-05-31 · ok HTTP/1.1 200 496 ms crawled 2026-06-01

US · 141.193.213.10 · AS209242 Cloudflare London, LLC

Reputation 87/100 weak security headers no dmarc policy

Classifying

HTML metadata

Title
Home - Heartland Initiative
Language
en-US
Generator
Elementor 4.1.1; features: e_font_icon_svg, additional_custom_breakpoints; settings: css_print_method-external, google_font-enabled, font_display-swap
Canonical
https://heartland-initiative.org/
Feeds

Open Graph

url
https://heartland-initiative.org/
title
Home - Heartland Initiative
locale
en_US
site name
Heartland Initiative
description
Heartland Initiative Advancing Human Rights in Investment Read the Latest WHO WE ARE Heartland Initiative is dedicated to transforming how investors advance human rights in an increasingly turbulent world. We drive systemic change through peer learning and collaboration among investors, civil society organizations, and policymakers. Heartland is a nonprofit investor advisory headquartered in the United […]

Technology

CDN
Cloudflare
CMS
WordPress
jQuery
3.7.1
Analytics
  • Google Tag Manager
Fonts
  • Google Fonts

Third-party hosts loaded (4)

  • fonts.googleapis.com×7
  • fonts.gstatic.com×1
  • gmpg.org×1
  • www.googletagmanager.com×1

Social

DNS records live

NS
  • connie.ns.cloudflare.com
  • david.ns.cloudflare.com
MX
  • 1 aspmx.l.google.com
  • 5 alt1.aspmx.l.google.com
Verified for
  • Google

Email authentication weak

SPF
not published
DMARC
not published
DKIM
no key found at common selectors

Certificate (current)

E7
from 2026-04-18 to 2026-07-17
Expires in 44 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 40/100 Checked live page: https://heartland-initiative.org/

present
  • referrer-policy
  • permissions-policy
findings
  • missing HSTS
  • missing Content Security Policy
  • missing frame protection
  • missing content type protection
Header values
referrer-policy
strict-origin-when-cross-origin
permissions-policy
private-state-token-redemption=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com"), private-state-token-issuance=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com")

Links to (2)

Linked from (1)