heybear.com

.com crawl

First seen 2026-04-23 · Last seen 2026-05-17 · ok HTTP/1.1 200 13500 ms crawled 2026-05-17

CA · 23.227.38.65 · AS13335 Cloudflare, Inc.

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title: Hey Bear: Awareness For Safe & Responsible Coexistence In Bear Country
Description: Hey Bear is a social impact brand that promotes safe and responsible human and bear coexistence, while actively giving back to support bears in their natural habitat. Shop Hey Bear quality outdoor gear that inspire stewardship of bears and their habitat.
Language: en
Canonical: https://www.heybear.com/

Open Graph

url: https://www.heybear.com/
title: Hey Bear: Awareness For Safe & Responsible Coexistence In Bear Country
site name: Hey Bear
description: Hey Bear is a social impact brand that promotes safe and responsible human and bear coexistence, while actively giving back to support bears in their natural habitat. Shop Hey Bear quality outdoor gear that inspire stewardship of bears and their habitat.

Technology

CDN: Cloudflare
CMS: Shopify

Third-party hosts loaded (8)

cdn.shopify.com×4
monorail-edge.shopifysvc.com×2
shop.app×2
api.judge.me×1
cdn.judge.me×1
cdn1.judge.me×1
fonts.shopifycdn.com×1
static.klaviyo.com×1

Social

Registration

Registrar

Tucows Domains Inc.

Created

2011-10-16

Expires

2026-10-16 149 days left

Updated

2025-10-15

Name servers

ns1.hover.com
ns2.hover.com

DNS records live

NS

ns1.hover.com
ns2.hover.com

MX

10 mx.hover.com.cust.hostedemail.com

TXT

klaviyo-site-verification=public_API_key

Email authentication partial

SPF: v=spf1 include:_spf.hostedemail.com include:hover.com include:mandrillapp.com include:_spf.createsend.com ~all
softfail (~all)
DMARC: v=DMARC1; p=none; rua=mailto:dmarc-reports@heybear.com
policy: none (monitoring only)
DKIM: no key found at common selectors

Certificate (current)

from 2026-04-09 to 2026-07-08

Expires in 49 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.heybear.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

short HSTS max-age
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: DENY
x-content-type-options: nosniff
content-security-policy: block-all-mixed-content; frame-ancestors 'none'; upgrade-insecure-requests;
strict-transport-security: max-age=7889238