Website profiles · Technology insights · Alternatives

heroku.com Paid content

Categories: Development Productivity

Tags: Developers

Experience fully managed app hosting that just works. Build, deploy, and scale on the battle-tested platform that defines the industry.

Visit website

Updated: 2026-09-03 15:08 Language: English (default) Access: Normal

Profile views 15 Outbound visits 7
Heroku Full homepage screenshot

Website Overview

An established domain and managed infrastructure suggest continuity of operations and may support dependable delivery, although neither guarantees service quality. Page metadata, canonical configuration and social previews work together to provide more consistent search and sharing presentation.

Domain and Registration

Registered in 2007, this domain has about 19 years of history. That suggests continuity, although ownership and purpose may have changed. The registrar, MarkMonitor Inc., specializes in corporate domain and brand management, suggesting attention to domain asset protection. Transfer-protection status is present, helping reduce the risk of unauthorized domain transfers. The domain uses the common .com extension, which is not an independent safety signal.

DNS and Email

Nameservers are provided by NS1, indicating managed DNS hosting. MX records point to the Google Workspace email service. No CNAME was found; the observed records resolve directly to addresses. SPF and DMARC are configured. DKIM status is unknown. TXT records include verification markers for Google. Such markers may also remain after a service stops being used.

TLS and Certificates

The public key uses EC with 256 bits. The server supplied a complete certificate chain. No organization name is present in the certificate; the available fields are consistent with domain validation. The certificate was issued by Let's Encrypt, commonly associated with automated certificate services. The certificate's total validity is about 89 days, consistent with a short renewal cycle.

HTTP and Browser Security

No X-Powered-By header was found, reducing one common source of backend fingerprinting information. All six checked browser-security headers are present. Their effectiveness still depends on the policy values and application behavior. The x-cache response header indicates a CDN or caching proxy in the delivery path. No obvious internal addresses or debug information were found in the headers. The Server header identifies nginx without an exact version.

Technology Stack Analysis

The public page identifies WordPress, jQuery, Google Tag Manager, nginx without precise versions, leaving fewer clues for version-specific scanning.

Search and Social Sharing

Twitter Card metadata is configured. JSON-LD includes Organization data, helping describe the organization as an entity. The title has 54 characters, within a common display range. A meta description is present, with 135 characters. The observed directives allow indexing and link following.

Hosting and Email

DNSNS1
HostingAutomattic, Inc
EmailGoogle Workspace
Location United States flagSan Francisco, California, United States 192.0.66.110

Pages, Search and Sharing

Meta descriptionExperience fully managed app hosting that just works. Build, deploy, and scale on the battle-tested platform that defines the industry.
Canonical URLhttps://www.heroku.com/
LanguageEnglish (default)
Twitter Cardsummary_large_image
All bots 0 allowed · 5 disallowed
  • Disallow/readme.html
  • Disallow/wp-admin/
  • Disallow/wp-content/themes/orbitmedia-elementor/html/
  • Disallow/wp-json/
  • Disallow/?rest_route=

Registration details RDAP / WHOIS

RegistrarMarkMonitor Inc.
Registered2007-06-15
Expires2027-06-15
Domain statusclient delete prohibited、client transfer prohibited、client update prohibited、server delete prohibited、server transfer prohibited、server update prohibited
Nameserversdns1.p01.nsone.net、dns2.p01.nsone.net、dns3.p01.nsone.net、dns4.p01.nsone.net、ns01.herokudns.net、ns02.herokudns.net、ns03.herokudns.net、ns04.herokudns.net
DNSSECunsigned

DNS records

TypeNameValueTTLPriority
Aheroku.com192.0.66.110300
AAAAheroku.com2a04:fa87:fffd::c000:426e300
MXheroku.comsmtp.google.com4501
NSheroku.comdns1.p01.nsone.net450
NSheroku.comdns2.p01.nsone.net450
NSheroku.comdns3.p01.nsone.net450
NSheroku.comdns4.p01.nsone.net450
NSheroku.comns01.herokudns.net450
NSheroku.comns02.herokudns.net450
NSheroku.comns03.herokudns.net450
NSheroku.comns04.herokudns.net450
TXTheroku.com36fded18-0a5e-4a1f-b182-d2e4cfb54606450
TXTheroku.comgoogle-site-verification=0lwG2NjL9452N97Edm9qR-fw8FyHVWarr4WKwWKIoSA450
TXTheroku.comgoogle-site-verification=8HRJpo1MsC3G8GZpZiEWM5yXbzFB8NKa38O6ZjuTc-w450
TXTheroku.comgoogle-site-verification=uk9Ibe3zvPE8drXYiXzryAr19xY3fdyBeEkBp5fkiZY450
TXTheroku.comv=spf1 ip4:167.89.4.18 include:_spf.google.com include:mailgun.org include:aspmx.pardot.com exists:%{i}._spf.corp.salesforce.com ~all450
DMARC_dmarc.reject100.salesforce.comv=DMARC1;p=reject;fo=1:d:s;pct=100;rua=mailto:[email protected],mailto:[email protected];ruf=mailto:[email protected]3600

TLS and certificates

AssessmentNormal configuration
Supported protocolsTLSv1.2、TLSv1.3
Negotiated protocolTLSv1.3
Certificate subjectheroku.com
IssuerLet's Encrypt
Valid until2026-10-05T07:02 · Remaining when checked: 31 days
Verification detailsCertificate trust: Passed · Hostname match: Passed

HTTP response headers

HeaderValue
content-typetext/html; charset=UTF-8
cache-controlpublic, max-age=3600
servernginx
strict-transport-securitymax-age=31536000
content-security-policydefault-src https: data: wss://*.hotjar.com wss://*.crazyegg.com *.crazyegg.com wss://*.zohopublic.com; script-src https: blob: data: 'unsafe-inline' 'unsafe-eval'; style-src https: data: 'unsafe-inline'; img-src data: https: 'unsafe-inline'; font-src data: https: 'unsafe-inline'; frame-ancestors 'self'; object-src 'self' blob; upgrade-insecure-requests; media-src 'self' blob: data: https:;
x-frame-optionsSAMEORIGIN
x-content-type-optionsnosniff
referrer-policyno-referrer-when-downgrade
permissions-policyautoplay=(), camera=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), publickey-credentials-get=(), usb=(), browsing-topics=()

Identified technologies

WordPressjQueryGoogle Tag Managernginx

Recent Updates

Related questions

More questions →

No related questions yet.

User reviews (0)