indexo.dev

herizon.io

.io crawl

First seen 2026-04-19 · Last seen 2026-05-13 · ok HTTP/1.1 200 647 ms crawled 2026-05-13

US · 104.21.54.168 · AS13335 Cloudflare, Inc.

Reputation 100/100

sector nonprofit type homepage

HTML metadata

Title
Herizon - Get employed.
Description
The employability platform. Free courses, AI career tools, and direct employer matching helping international professionals get employed now and stay employable in the future.
Language
en

Open Graph

title
Herizon - Get employed.
description
The employability platform. Free courses, AI career tools, and direct employer matching helping international professionals get employed now and stay employable in the future.

Technology

CDN
Cloudflare
CMS
Next.js

Third-party hosts loaded (1)

  • glyphex.io×1

Social

DNS records live

NS
  • brit.ns.cloudflare.com
  • cosmin.ns.cloudflare.com
MX
  • 1 aspmx.l.google.com
  • 10 alt3.aspmx.l.google.com
  • 10 alt4.aspmx.l.google.com
  • 5 alt1.aspmx.l.google.com
  • 5 alt2.aspmx.l.google.com
Verified for
  • Brevo
  • Google

Email authentication strong

SPF
v=spf1 include:_spf.google.com ~all
softfail (~all)
DMARC
v=DMARC1; p=reject; pct=100; rua=mailto:f13r0blt@ag.eu.dmarcian.com,mailto:dmarc@herizon.io
policy: reject (enforced)
DKIM
  • default: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6S1YY3Fem0vVcfw0l0cAbnfiYy4XFZk/2InvB+UgGMBDR6Dvw3+D3VpnPeo5vOBGE8v382HXs9jun…
  • mail: k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z…
selectors probed

Certificate (current)

WE1
from 2026-05-05 to 2026-08-03
Expires in 75 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://herizon.io/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
findings
  • CSP allows unsafe inline scripts/styles
  • missing Permissions Policy
Header values
referrer-policy
origin-when-cross-origin
x-frame-options
SAMEORIGIN
x-content-type-options
nosniff
content-security-policy
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://glyphex.io;
strict-transport-security
max-age=63072000; includeSubDomains; preload

Links to (8)

Linked from (2)