indexo.dev

herbalessencesarabia.com

.com crawl

First seen 2026-04-14 · Last seen 2026-05-08 · ok HTTP/1.1 200 922 ms crawled 2026-05-08

US · 150.171.109.100 · AS8075 Microsoft Corporation

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title
Herbal Essences Arabia – Natural Hair Care Products
Description
Discover nature-inspired hair products by Herbal Essences Arabia. Botanical ingredients address all hair concerns, leaving your locks smelling heavenly..
Language
en-AE
Canonical
https://herbalessencesarabia.com/en/

Open Graph

url
https://herbalessencesarabia.com/en/
title
Herbal Essences Arabia – Natural Hair Care Products
description
Discover nature-inspired hair products by Herbal Essences Arabia. Botanical ingredients address all hair concerns, leaving your locks smelling heavenly..

Technology

CDN
Azure Front Door
CMS
Next.js
Analytics
  • Google Analytics
  • Google Tag Manager
  • Segment
Ads
  • Google Ads (DoubleClick)
  • Meta Pixel
Cookie consent
  • OneTrust
Third-party hosts loaded (21)
  • images.ctfassets.net×2
  • www.google-analytics.com×2
  • www.googletagmanager.com×2
  • 8630754.fls.doubleclick.net×1
  • aa.agkn.com×1
  • adservice.google.com×1
  • api.lytics.io×1
  • c.lytics.io×1
  • cdn.cookielaw.org×1
  • cdn.pricespider.com×1
  • cdn.segment.com×1
  • connect.facebook.net×1
  • d.agkn.com×1
  • insight.adsrvr.org×1
  • js.adsrvr.org×1
  • js.agkn.com×1
  • script.crazyegg.com×1
  • static.agkn.com×1
  • stg.api.bazaarvoice.com×1
  • www.facebook.com×1
  • z.moatads.com×1

Registration

Registrar
CSC Corporate Domains, Inc.
Created
2005-06-28
Expires
2026-06-28 39 days left
Updated
2025-06-24
Name servers
  • ns1-05.azure-dns.com
  • ns2-05.azure-dns.net
  • ns3-05.azure-dns.org
  • ns4-05.azure-dns.info

DNS records live

NS
  • ns1-05.azure-dns.com
  • ns2-05.azure-dns.net
  • ns3-05.azure-dns.org
  • ns4-05.azure-dns.info
MX
  • 10 tempmx.esandc.cocomore.com
TXT
  • google-site-verification=RVWdLJgV6vZ1z8XCfMwep3yQsnrGTV-dVzf7_h9lKIU
  • google-site-verification=5ClzJPrcqmBz36Yy2_cR4Gm96IiApqSf61oZWp5-6As

Email authentication weak

SPF
not published
DMARC
v=DMARC1; p=none; fo=1; ri=3600; rua=mailto:procter-gamble@rua.dmp.cisco.com; ruf=mailto:procter-gamble@ruf.dmp.cisco.com
policy: none (monitoring only)
DKIM
no key found at common selectors

Certificate (current)

Sectigo Public Server Authentication CA OV R36
from 2025-08-03 to 2026-09-03
Expires in 106 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://herbalessencesarabia.com/en/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing Referrer Policy
  • missing Permissions Policy
Header values
x-frame-options
DENY
x-content-type-options
nosniff
content-security-policy
default-src 'self'; media-src https://videos.ctfassets.net; style-src 'self' 'unsafe-inline' *.pricespider.com *; img-src * 'self' data: https: blob: *.pricespider.com; script-src * data: *.pricespider.com blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; frame-src *;
strict-transport-security
max-age=31536000; includeSubdomains

Linked from (2)