indexo.dev

hed.co

.co crawl

First seen 2026-04-23 · Last seen 2026-05-14 · ok HTTP/1.1 200 8009 ms crawled 2026-05-17

US · 104.19.154.92 · AS13335 Cloudflare, Inc.

Reputation 89/100 weak security headers dmarc monitor-only

sector b2b services type homepage

HTML metadata

Title
HED - Architecture Engineering Sustainable Design Firm
Description
Because great design is more than what we do. It’s who we are.
Language
en-US
Canonical
https://hed.co/
Feeds

Open Graph

url
https://hed.co/
title
HED
locale
en_US
site name
HED
description
Because great design is more than what we do. It’s who we are.

Technology

CDN
Cloudflare
CMS
WordPress
Analytics
  • Google Tag Manager
Fonts
  • Adobe Fonts
Social widgets
  • Vimeo Embed

Third-party hosts loaded (5)

  • player.vimeo.com×2
  • gmpg.org×1
  • s3.amazonaws.com×1
  • use.typekit.net×1
  • www.googletagmanager.com×1

Social

DNS records live

NS
  • ns29.domaincontrol.com
  • ns30.domaincontrol.com
MX
  • 0 hed-co.mail.protection.outlook.com
TXT
  • 3JOJed60yV.ffverify.fireflies.ai-request-verification=2025-03-10T14:40:33.483Z
  • rhino_accounts=0a378fdca4c42552693789444c9aed7e
Verified for
  • Cursor
  • DocuSign
  • Google
  • Microsoft 365
  • Miro
  • OpenAI
  • Zoom

Email authentication partial

SPF
v=spf1 ip4:32.143.150.170 ip4:12.125.245.178 ip4:76.80.138.170 ip4:4.39.197.98 ip4:207.180.140.98 ip4:4.7.27.130 ip4:4.16.200.170 ip4:216.207.129.58 ip4:70.183.89.102 ip4:131.239.39.242 ip4:209.214.169.66 ip4:12.191.131.218 ip4:12.208.145.98 ip4:170.55.119.58 ip4:70.125.235.98 ip4:204.148.58.250 ip4:209.242.162.138 ip4:38.88.221.138 ip4:38.104.34.202 ip4:63.86.215.34 ip4:38.88.202.174 ip4:64.61.60.42 ip4:4.53.73.130 ip4:152.179.192.170 ip4:4.53.129.58 ip4:71.40.118.146 ip4:12.69.24.74 ip4:38.142.79.2 include:spf.protection.outlook.com include:mail.zendesk.com include:amazonses.com include:spf.us.signature365.net -all
strict (-all)
DMARC
v=DMARC1; p=none;
policy: none (monitoring only)
DKIM
  • selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfsXLxl+AN9cOyOvRjoctkIoLhKBryA6Rt4t1PEobkT/CLRsu5IkaqZFOizVfw1rGgNwfyi9haYYsC…
  • selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPLCg+ozP1TfDVrferU9J2LjyG4qKC0BeuzFR8ndp++vhjW3g64e374i33INdz+J71s0bpcusHfVRs…
selectors probed

Certificate (current)

WE1
from 2026-04-07 to 2026-07-06
Expires in 46 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 35/100 Checked live page: https://hed.co/

present
  • permissions-policy
findings
  • missing HSTS
  • missing Content Security Policy
  • missing frame protection
  • missing content type protection
  • missing Referrer Policy
Header values
permissions-policy
private-state-token-redemption=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com"), private-state-token-issuance=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com")

Links to (4)

Linked from (1)