Herdexeoz.com is a brand-new domain that does nothing but redirect visitors to the real website of Boehringer Ingelheim, a pharmaceutical giant. That alone should make you stop. Scammers often register domains that look like misspellings or random strings and then point them to trusted sites to trick people into thinking they're somewhere official. In this case, the site itself is unreachable, has no HTTPS, and provides zero information about who runs it. If you landed here expecting a legitimate business, you were misdirected. For any site that sends you elsewhere without explanation, especially one this young, the safest move is to close the tab. Don't enter any personal information or click any links on herdexeoz.com. There are no reviews or user experiences to lean on because the site barely exists. Stick with the official domain of the company you were trying to reach.
In plain English
This site is dangerous. It's a 4-day-old domain that redirects to a legitimate pharmaceutical company, which is a classic sign of a phishing or impersonation scam. There's no secure connection, no contact info, and no reason to trust it. Stay away.
What you should do now
Don't panic. These steps limit the damage, and the sooner you take them the better.
Don't enter any details
No passwords, card numbers or personal information — even if the site looks professional.
Close the tab
Especially if you got here from an email, text message or social media ad.
Already paid? Call your bank
Contact your bank or card provider right away. They can often stop or reverse a recent payment.
Warn others
Report the site and share this check with anyone who sent you the link.
Where the score comes from
The site doesn't support HTTPS at all, which is a critical failure for any website. A TLS error means your connection can't be secured, making it unsafe to visit.
This domain is just 4 days old and immediately redirects to a completely different company's website. That's a textbook sign of impersonation or a parked domain with no real ownership.
No blacklists or malware flags exist yet, but the domain has no history and wasn't even around long enough to be archived. Absence of evidence isn't evidence of safety here.
The site is unreachable and provides no contact information, about page, or any way to identify who runs it. That's a red flag for any website, especially one that claims to be a business.
Since the site redirects to another domain without serving its own content, there are no privacy policies or terms of service. For a site that may be used for phishing, that's a serious gap.
The domain has email authentication set up, but it lacks basic security measures like DNSSEC and MX records. The hosting provider is neutral, but the overall setup feels hastily thrown together.
What we checked
Think this verdict is wrong?
Site owners can request a fresh scan. Scores update automatically as signals change.