indexo.dev

herbivorebotanicals.com

.com crawl

First seen 2026-04-11 · Last seen 2026-05-18 · ok HTTP/1.1 200 2482 ms crawled 2026-05-18

CA · 23.227.38.32 · AS13335 Cloudflare, Inc.

Reputation 100/100

Classifying

HTML metadata

Title
Plant-Powered, Clinically-Effective Skincare – Herbivore Botanicals
Description
Welcome to Herbivore Botanicals, where the potency of botanical actives drive our clinically proven skincare formulas to heal, protect, and nourish your skin, mind, and body—naturally.
Language
en
Canonical
https://www.herbivorebotanicals.com/

Open Graph

url
https://www.herbivorebotanicals.com/
title
Plant-Powered, Clinically-Effective Skincare
site name
Herbivore Botanicals
description
Welcome to Herbivore Botanicals, where the potency of botanical actives drive our clinically proven skincare formulas to heal, protect, and nourish your skin, mind, and body—naturally.

Technology

CDN
Cloudflare
CMS
Shopify

Third-party hosts loaded (6)

  • shop.app×2
  • cdn-static.okendo.io×1
  • monorail-edge.shopifysvc.com×1
  • onsite.joinground.com×1
  • static.klaviyo.com×1
  • static.rechargecdn.com×1

Social

Registration

Registrar
Tucows Domains Inc.
Created
2011-12-18
Expires
2026-12-18 211 days left
Updated
2026-03-13
Name servers
  • ns1.inmotionhosting.com
  • ns2.inmotionhosting.com

DNS records live

NS
  • ns.inmotionhosting.com
  • ns2.inmotionhosting.com
MX
  • 1 smtp.google.com
TXT
  • amazon-business-verification=67cfb6688297e3b7ef1961ca56a6555b35ff6c61a10b4fab9df48a5da34aa9ef
  • klaviyo-site-verification=QtKqLz
Verified for
  • Atlassian
  • GlobalSign
  • Google
  • Meta
  • Microsoft 365
  • Shopify
  • Slack

Email authentication strong

SPF
v=spf1 +include:_spf.google.com +include:mail.zendesk.com +include:shops.shopify.com +include:rp.oracleemaildelivery.com +include:ap.rp.oracleemaildelivery.com ~all
softfail (~all)
DMARC
v=DMARC1; p=reject; rua=mailto:bwzw8j20@ag.dmarcian.com; pct=100;
policy: reject (enforced)
DKIM
  • default: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36+iuaubtarPdoalkKzqXQeyum8/cMRrn+nSStdbQDGvTxeEEcUvFRq8pwf7olYXEK9qoxvASx0bop…
  • google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtARA4AI5kQddm6Q6RZ3OZTLrdwIb8uBwIo2ThUGERE/T3KsGi5w5j7lXKnTsprDgmr4Q/787Mp28e…
  • smtpapi: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPtW5iwpXVPiH5FzJ7Nrl8USzuY9zqqzjE0D1r04xDN6qwziDnmgcFNNfMewVKN2D1O+2J9N14hRprzByFwfQW76…
selectors probed

Certificate (current)

E8
from 2026-03-28 to 2026-06-26
Expires in 37 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://www.herbivorebotanicals.com/

present
  • strict-transport-security
  • content-security-policy
  • x-content-type-options
findings
  • short HSTS max-age
  • CSP uses wildcard sources
  • missing frame protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
x-content-type-options
nosniff
content-security-policy
block-all-mixed-content; frame-ancestors *; upgrade-insecure-requests;
strict-transport-security
max-age=7889238

Links to (4)

Linked from (2)