indexo.dev

toio.com

.com crawl

First seen 2026-05-15 · Last seen 2026-05-20 · ok HTTP/1.1 200 6057 ms crawled 2026-05-20

IT · 89.46.110.5 · AS31034 Aruba S.p.A.

Reputation 89/100 weak security headers dmarc monitor-only

Classifying

HTML metadata

Title
Trendy Fashion for Men, Women & Kids | TOIO Online Shop
Description
Explore the latest in men's, women's, and kids' fashion at TOIO. Shop stylish clothing and accessories for the whole family with exclusive offers.
Language
it-IT
Generator
All in One SEO (AIOSEO) 4.9.7.2
Canonical
https://www.toio.com/
Feeds

Open Graph

url
https://www.toio.com/
title
Trendy Fashion for Men, Women & Kids | TOIO Online Shop
locale
it_IT
site name
TOIO - ADRENALINE ADDICTED
description
Explore the latest in men's, women's, and kids' fashion at TOIO. Shop stylish clothing and accessories for the whole family with exclusive offers.

Technology

Server
aruba-proxy
CMS
WordPress 4.9.7.2 outdated (current 6.8)
jQuery
3.7.1
Analytics
  • Google Tag Manager
Fonts
  • Google Fonts

Third-party hosts loaded (4)

  • stats.wp.com×2
  • www.googletagmanager.com×2
  • fonts.googleapis.com×1
  • gmpg.org×1

Contact

Email
Phone

Registration

Registrar
Tucows Domains Inc.
Created
2004-06-09
Expires
2026-06-09 19 days left
Updated
2025-06-02
Name servers
  • dns.technorail.com
  • dns2.technorail.com
  • dns3.arubadns.net
  • dns4.arubadns.cz

DNS records live

NS
  • dns.technorail.com
  • dns2.technorail.com
  • dns3.arubadns.net
  • dns4.arubadns.cz
MX
  • 10 mx.toio.com

Email authentication partial

SPF
v=spf1 include:_spf.aruba.it ~all
softfail (~all)
DMARC
v=DMARC1; p=none; adkim=r; aspf=r;
policy: none (monitoring only)
DKIM
no key found at common selectors

Certificate (current)

Actalis Domain Validation Server CA G3
from 2026-03-10 to 2027-04-10
Expires in 324 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 35/100 Checked live page: https://www.toio.com/

present
  • permissions-policy
findings
  • missing HSTS
  • missing Content Security Policy
  • missing frame protection
  • missing content type protection
  • missing Referrer Policy
Header values
permissions-policy
private-state-token-redemption=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com"), private-state-token-issuance=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com")

Links to (2)

Linked from (1)