heylight.com

.com crawl

First seen 2026-05-20 · Last seen 2026-05-31 · ok HTTP/1.1 200 1620 ms crawled 2026-05-27

DE · 23.36.163.228 · AS20940 Akamai International B.V.

Reputation 100/100

Classifying

HTML metadata

Title
HeyLight | Buy now, pay later
Description
Shop smart, live bright: discover HeyLight, your new Buy Now, Pay Later solution.
Language
en
Canonical
https://heylight.com/en
Translations
  • en

Open Graph

url
https://heylight.com/en
title
HeyLight | Buy now, pay later
description
Shop smart, live bright: discover HeyLight, your new Buy Now, Pay Later solution.

Technology

CMS
Next.js
Analytics
  • Google Tag Manager
Cookie consent
  • OneTrust

Third-party hosts loaded (3)

  • www.googletagmanager.com×3
  • cdn.cookielaw.org×2
  • images.ctfassets.net×1

Social

Registration

Registrar
Register SPA
Created
2010-02-18
Expires
2028-02-18 627 days left
Updated
2025-12-14
Name servers
  • a1-31.akam.net
  • a13-66.akam.net
  • a20-65.akam.net
  • a26-64.akam.net
  • a28-66.akam.net
  • a3-64.akam.net

DNS records live

NS
  • a1-31.akam.net
  • a13-66.akam.net
  • a20-65.akam.net
  • a26-64.akam.net
  • a28-66.akam.net
  • a3-64.akam.net
MX
  • 10 zmr1.compass.it
  • 10 zmr2.compass.it
TXT
  • zscaler-verification-158990132-11012025-ui5Zt
  • v=DMARC1; p=none; rua=mailto:dmarc@gruppomediobanca.com; fo=1:s:d
Verified for
  • Google
  • Microsoft 365

Email authentication strong

SPF
v=spf1 mx include:musvc.com -all
strict (-all)
DMARC
v=DMARC1; p=reject; fo=1; rua=mailto:dmarc@gruppomediobanca.com,mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com
policy: reject (enforced)
DKIM
  • selector1: v=DKIM1; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCHnZaDHaeSNsVRIktYZt3rf5IBMOcxrEJT3iYM3cc83BWF727s0oOW9IhWp3dlpKyl4bx7DgZMpOsAh99viB…
selectors probed

Certificate (current)

DigiCert Global G3 TLS ECC SHA384 2020 CA1
from 2025-09-23 to 2026-09-23
Expires in 114 days

HTTP security headers

Header hygiene 80/100 Checked live page: https://heylight.com/en

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
findings
  • missing content type protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
x-frame-options
SAMEORIGIN
content-security-policy
frame-ancestors 'self' https://app.contentful.com
strict-transport-security
max-age=31536000; includeSubDomains

Links to (4)

Linked from (3)