herschel.com

.com crawl

First seen 2026-04-21 · Last seen 2026-05-15 · ok HTTP/1.1 200 2088 ms crawled 2026-05-15

US · 13.33.235.35 · AS16509 Amazon.com, Inc.

Reputation 89/100 weak security headers dmarc monitor-only

Classifying

HTML metadata

Title

Herschel Supply Co. USA | Backpacks, Totes & Accessories

Description

Herschel Supply Co. is a design-driven manufacturer of the finest quality backpacks, bags, travel goods and accessories. Free Shipping and 24/7 Customer Service in NA, EU, UK.

Language

en-US

Canonical

https://herschel.com

Translations

de-de
en-at
en-be
en-bg
en-ca
en-cy
en-cz
en-de
en-dk
en-ee
en-fi
en-fr
en-gb
en-gr
en-hr
en-hu
en-ie
en-it
en-lt
en-lu
en-lv
en-mt
en-mx
en-nl
en-pl
en-pt
en-ro
en-se
en-si
en-sk
en-us
fr-ca
fr-fr

Open Graph

title: Herschel Supply Co. USA | Backpacks, Totes & Accessories
locale: en_US
site name: Herschel Supply Co.

Technology

CDN: Amazon CloudFront
Server: Apache

Analytics

Google Tag Manager

Third-party hosts loaded (13)

herschel.eu×23
config.gorgias.chat×1
dev.visualwebsiteoptimizer.com×1
en.herschelsupply.de×1
en.herschelsupply.fr×1
fr.herschel.ca×1
herschel.ca×1
herschel.it×1
herschelsupply.de×1
herschelsupply.fr×1
herschelsupplyco.co.uk×1
static.klaviyo.com×1
www.googletagmanager.com×1

Social

Contact

Phone

1-888-997-5597

Registration

Registrar

Amazon Registrar, Inc.

Created

1998-10-15

Expires

2026-10-14 147 days left

Updated

2026-05-13

Name servers

ns-1493.awsdns-58.org
ns-1616.awsdns-10.co.uk
ns-475.awsdns-59.com
ns-743.awsdns-28.net

DNS records live

NS

ns-1493.awsdns-58.org
ns-1616.awsdns-10.co.uk
ns-475.awsdns-59.com
ns-743.awsdns-28.net

MX

10 aspmx.l.google.com
20 alt1.aspmx.l.google.com
30 alt2.aspmx.l.google.com
40 aspmx2.googlemail.com
50 aspmx3.googlemail.com

TXT

Show 18 TXT records

apple-domain-verification=6NpiYH8drUqjV81P
atlassian-domain-verification=lRj0TRWBPnvDdVmh55k30aasn/mP0XJSlazLCXG7w1xuanQ9U488YPSMF1cD9zkf
klaviyo-site-verification=Sc2DxK
klaviyo-site-verification=XAitbR
google-site-verification=G04BYKg6vDhnWWW8baKwSg9rtbFjylL4DuOwmyjcXhg
klaviyo-site-verification=Y58Zar
slack-domain-verification=gLj9d8xj1Y9MjGFTcCNPcvVBg9NCQHwMUkC0XiP1
google-site-verification=ojOhYR0Q_44YwYC_Ge2yutu874YZ1HEATt7-g7sF8sc
klaviyo-site-verification=SKJrKB
klaviyo-site-verification=QSUxVb
sophos-domain-verification=0e9c796908c9f393ea96b5485c86b21dc43ca102a1bdbbc5d146f9cce7ab3e60
facebook-domain-verification=e8kyruvgq7u7oiya8t8z0j1q2r15aj
klaviyo-site-verification=Rrzvtj
shopify-verification-code=Ue5RD8tsN3pPFqgjhh92t9gqXb6H2s
klaviyo-site-verification=UJBk3A
anthropic-domain-verification-h2pcxm=P6aRS92K63muZDwUBcFcF2WlJ
google-site-verification=Y7K8v5Ev0ePMM1HuMQx5zU3JcV5J5GXgG20mWsH99Ps
klaviyo-site-verification=TSjVC6

Email authentication partial

SPF

v=spf1 ip4:52.39.191.6 ip4:40.117.231.107 include:mg-spf.greenhouse.io include:_spf.google.com include:docebosaas.com include:servers.mcsv.net include:shops.shopify.com include:spf.protection.outlook.com include:_spf.salesforce.com ~all

softfail (~all)

DMARC

v=DMARC1; p=none; rua=mailto:dmarc@herschel.com

policy: none (monitoring only)

DKIM

Show 4 DKIM selectors

google: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCfvRzRDs4trXEzVJZOfnIB/XDQRbJyPzVxp3Z81ZZ7B7Mk5V1sSYwm5JQSvsnDcicJ0kXaJcGsWXW1BGOrEq…
k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxnwZc4IneYo8cRg6PRR6pl4wxaqDxBVPRtJIMhHv29VTpmPUIMHKmwlShalUouq4ygcxNt90z3hfkUdmS…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDgq4WY8wH4aXqOltolkyjnUGMTJ1T6k9YscUFOesyEs68aiMRz0Kg594jiqfi6p2MVD8bbVyPEEGypzvdCcF2dX1…

selectors probed

Certificate (current)

Amazon RSA 2048 M04

from 2026-04-28 to 2026-11-12

Expires in 176 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 40/100 Checked live page: https://herschel.com/

present

x-frame-options

findings

missing HSTS
missing Content Security Policy
missing content type protection
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: DENY