indexo.dev

heo.com

.com crawl

First seen 2026-04-13 · Last seen 2026-05-06 · ok HTTP/1.1 200 1545 ms crawled 2026-05-07

DE · 162.55.163.50 · AS24940 Hetzner Online GmbH

Reputation 89/100 weak security headers dmarc monitor-only

Classifying

HTML metadata

Title
heo.com: Großhandel für Figuren, Spielwaren, Merchandising-Artikeln, Modellen, Textilien, Statuen, Spielen, Nachbildungen, Repliken & mehr
Description
Entdecken, shoppen und einkaufen bei heo.com: Günstige Preise für Figuren, Spielwaren, Merchandising-Artikeln, Modellen, Textilien, Statuen, Spielen, Nachbildungen, Repliken & mehr

Technology

Third-party hosts loaded (1)

  • www.youtube.com×1

Social

Registration

Registrar
EuroDNS S.A.
Created
1998-09-10
Expires
2026-09-09 113 days left
Updated
2025-09-03
Name servers
  • ns1.eurodns.com
  • ns2.eurodns.com
  • ns3.eurodns.com
  • ns4.eurodns.com

DNS records live

NS
  • ns1.eurodns.com
  • ns2.eurodns.com
  • ns3.eurodns.com
  • ns4.eurodns.com
MX
  • 10 heo-com.mail.protection.outlook.com
TXT
Show 11 TXT records
  • include:144263837.spf04.hubspotemail.net
  • brevo-code:1181fcdaf7f893922a97eda77d297002
  • brevo-code:40d2f7b96c6c8d2a718d23082192de49
  • sophos-domain-verification=7b9cfb455922e780c116e36c109d1cc99704a992
  • atlassian-domain-verification=QF3FM8HayyOI7BDawyP6ElqPr5Hwf1mYdZYyFEoNVmBRqJtID2XqbBFV9VmrNeUM
  • apple-domain-verification=ID79xi1yiFV2ElJL
  • Sendinblue-code:1181fcdaf7f893922a97eda77d297002
  • google-site-verification=MF3udZJBzbr4UcpxcoG3lxGkPvj8l6ZEey-DSScOvlE
  • have-i-been-pwned-verification=f1c14ac862aac7a347a8f50d4f13c950
  • sendinblue-code:8807c91d32e3acefa9ed6cab5ac9d9f7
  • miro-verification=54e3bd1fee85c2b604cccc7981f0981cab767e11

Email authentication strong

SPF
v=spf1 ip4:109.228.58.82 ip4:46.165.172.154 ip4:212.185.62.195 include:spf.protection.outlook.com include:csa.wwwserver.net include:144263837.spf04.hubspotemail.net include:spf.sendinblue.com ~all
softfail (~all)
DMARC
v=DMARC1; p=none; rua=mailto:rua@dmarc.brevo.com
policy: none (monitoring only)
DKIM
  • default: v=DKIM1; k=rsa; s=email; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCYpQjQ4Kpn7UHHpGGDelFzz03MN+vlAXNl1t9WYlCpIUJm6v41hT/52ut8Cn30Osyf4iykID/3R…
  • selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC2C6mXToXwkCO0b8aJk0Lda6tN3CjLMCtDeT34as5Jta9xJp83KnNxK08kG2NgDsK7FUC0a3BjpBbwqgH5Dq…
  • mail: k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z…
selectors probed

Certificate (current)

R12
from 2026-04-28 to 2026-07-27
Expires in 69 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://www.heo.com/de/en

findings
  • missing HSTS
  • missing Content Security Policy
  • missing frame protection
  • missing content type protection
  • missing Referrer Policy
  • missing Permissions Policy

Links to (2)

Linked from (2)