indexo.dev

welloft.com

.com crawl

First seen 2026-04-22 · Last seen 2026-05-16 · ok HTTP/1.1 200 6461 ms crawled 2026-05-16

US · 76.223.121.217 · AS16509 Amazon.com, Inc.

Reputation 95/100 weak security headers

Classifying

HTML metadata

Title
Welloft
Description
Welloft is a wellness platform from ESDlife (a joint venture between CK Hutchison and Hewlett-Packard HK SAR). We're dedicated to high-quality healthy living, offering comprehensive health services and experiences to reach your goals at every life stage.

Open Graph

description
Welloft is a wellness platform from ESDlife (a joint venture between CK Hutchison and Hewlett-Packard HK SAR). We're dedicated to high-quality healthy living, offering comprehensive health services and experiences to reach your goals at every life stage.

Technology

CDN
Amazon CloudFront
Server
envoy
CMS
Nuxt
Analytics
  • Google Tag Manager
Fonts
  • Google Fonts

Third-party hosts loaded (4)

  • fonts.googleapis.com×2
  • www.googletagmanager.com×2
  • cdn.jsdelivr.net×1
  • fonts.gstatic.com×1

Registration

Registrar
CSC Corporate Domains, Inc.
Created
2025-03-24
Expires
2027-03-24 309 days left
Updated
2025-11-13
Name servers
  • dns1.cscdns.net
  • dns2.cscdns.net

DNS records live

NS
  • dns1.cscdns.net
  • dns2.cscdns.net
MX
  • 0 welloft-com.mail.protection.outlook.com
TXT
  • google-site-verification=gaQ379tqNXuuhHpzFwakuU5bH8DLOg3PoRFUDw05Q1k
  • MS=ms70608484

Email authentication strong

SPF
v=spf1 include:spf.protection.outlook.com -all
strict (-all)
DMARC
v=DMARC1; p=quarantine; pct=100; fo=1; rua=mailto:dmarc_itadmin@welloft.com; ruf=mailto:dmarc_itadmin@welloft.com;
policy: quarantine
DKIM
  • selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoaYPFIvnULY38xuQ2PC210nBW0zZTlUEXO7NQ9n6XDVaQcMgNV9rjAzFeHUbBy/lrwx9Hd7IRVal1…
  • selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2H/LNr+HVtrECmV5Mt3kEp+e8s6HthSK91eCpNrKhedF0nvedvwxBLn9jWm+74632r5B5njJ0ky479…
selectors probed

Certificate (current)

Amazon RSA 2048 M01
from 2026-03-30 to 2026-10-14
Expires in 148 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://www.welloft.com/en

findings
  • missing HSTS
  • missing Content Security Policy
  • missing frame protection
  • missing content type protection
  • missing Referrer Policy
  • missing Permissions Policy

Links to (4)

Linked from (2)