heinemann.com

HTML metadata

Title: Heinemann | Publisher of professional resources and provider of educational services for teachers
Description: Heinemann is a publisher of professional resources and a provider of educational services for teachers and educators from kindergarten through college.
Language: en

Technology

Server: nginx
CMS: Gatsby

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (9)

images.learn.hmhco.com×5
dr76b7foe7jxg.cloudfront.net×4
code.jquery.com×3
cdn.jsdelivr.net×2
fast.wistia.com×2
cdnjs.cloudflare.com×1
fonts.googleapis.com×1
www.google.com×1
www.googletagmanager.com×1

Social

Registration

Registrar

Network Solutions, LLC

Created

1995-12-19

Expires

2026-12-18 213 days left

Updated

2025-12-03

Name servers

ns-1454.awsdns-53.org
ns-1955.awsdns-52.co.uk
ns-464.awsdns-58.com
ns-622.awsdns-13.net

DNS records live

NS

ns-1454.awsdns-53.org
ns-1955.awsdns-52.co.uk
ns-464.awsdns-58.com
ns-622.awsdns-13.net

MX

5 us-smtp-inbound-1.mimecast.com
5 us-smtp-inbound-2.mimecast.com

TXT

Show 24 TXT records

_e5a98dosw0c3jed4wzqllmz49i15bvn
google-site-verification=riCWF2_3vJ2npShIUBX11LS1Og7rMBK6TZFQSexEmgM
globalsign-domain-verification=3ABBF0C91E81A107B41706A4B25438DE
google-site-verification=9xAnKLlO-n0fb9ivg6304GUrAOYJzqF00f9NzD0YqwU
globalsign-domain-verification=fe993b1d81b534d28f3bb753c36d47f9
adobe-idp-site-verification=dcee0a2f77d8062795e70509a65d7f6913450b5485badb2058f23588f060c8b9
ciscocidomainverification=e463a132128c8a88779f78396934545d7743955559d7255ac2d2c095b319a87
openai-domain-verification=dv-oid5xhut56qznGDw4pJGBuNC
atlassian-domain-verification=BNYS2ZxDgYF0MABftk2Zoz5k5a1O4ISi5g0vBS7vRKxvosDsl020tMm88EaCzkFE
_vbhmaedct3der3f3ivb5aareskbw2bq
_globalsign-domain-verification=zC-Q-TSPd3jaty2-p6oEFkASfiOPirw6qIa_e44h0e
globalsign-domain-verification=afe4b8a5f5837fbecf65b050538c6dd8
pendo-domain-verification=XTNTr2wOFCgibtBHdz2r744Ofis
globalsign-domain-verification=DEAF8CE511E463CBCFADBB04C6251A90
MS=ms42916817
google-site-verification=duhYLHDLodrlV1HcLE2GevEBALBRWqlhCPkTVp3CsJk
facebook-domain-verification=m7c1v2owdak2erm6orqo07p6b0101v
smartsheet-site-validation=JeAfvhfG9g4c6tSHXz3UP6DB3dppGW9A
canva-site-verification=EjsHcs_4x1pQcOjmfOjPoQ
docusign=018f11ef-b138-4cfb-b216-281fc1257bee
globalsign-domain-verification=5f56f5c0eaf48af2513b829f9cbe4157
globalsign-domain-verification=5158B0978D60D63056372B46FD41B97A
google-site-verification=y-T5fCrnGirzCAySnqE6nPRt8Y1tKCJnbc9CfuKKjjw
globalsign-domain-verification=4da563e4a9e61a916bca4d817133e15a

Email authentication weak

SPF

v=spf1 a mx ip4:74.205.21.242 ip4:209.235.126.1 ip4:209.235.126.2 ip4:209.235.126.7 ip4:209.235.126.8 ip4:209.235.126.9 ip4:209.235.126.10 ip4:52.200.73.82 ip4:158.151.208.120 ip4:158.151.214.66 include:_netblocks.mimecast.com include:spf.technologyspa.com ptr:clearslide.com include:mailgun.org include:spf.protection.outlook.com include:_spf.google.com include:amazonses.com include:_spf.salesforce.com include:sendgrid.net include:veinteractive.biz include:bulk.decipherinc.com include:researchnowsurveys.com include:m.msgbman.com include:osimsg02.com include:mail.dev.heinemann.com include:mail.int.heinemann.com include:mail.cert.heinemann.com include:mail.prod.heinemann.com include:197281.spf07.hubspotemail.net  include:_netblocks.eloqua.com ~all

softfail (~all) · 22 DNS lookups (RFC limit is 10)

DMARC

not published

DKIM

s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDd4mk7M+n3IGHZUQsYMLz67mMOEIuMvjguSFg/TM6A9wppNsF2GDt2FukpRQymBKqGVJen7BqvrnZ7fu/AkKsggV…
smtpapi: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPtW5iwpXVPiH5FzJ7Nrl8USzuY9zqqzjE0D1r04xDN6qwziDnmgcFNNfMewVKN2D1O+2J9N14hRprzByFwfQW76…

selectors probed

Certificate (current)

GlobalSign Atlas R3 DV TLS CA 2026 Q1

from 2026-03-17 to 2026-06-15

Expires in 27 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://www.heinemann.com/

present

strict-transport-security
content-security-policy

findings

missing frame protection
missing content type protection
missing Referrer Policy
missing Permissions Policy

Header values

content-security-policy: upgrade-insecure-requests;
strict-transport-security: max-age=15768000