indexo.dev

awardwallet.com

.com crawl

First seen 2026-04-14 · Last seen 2026-05-06 · ok HTTP/1.1 200 4457 ms crawled 2026-05-08

US · 13.33.235.120 · AS16509 Amazon.com, Inc.

Reputation 100/100

Classifying

HTML metadata

Title
Track your rewards and travel plans in a convenient, secure place
Description
AwardWallet helps you track frequent flyer miles and hotel points as well as book reward tickets
Language
en
Canonical
https://awardwallet.com/
Translations
  • de
  • es
  • fr
  • pt
  • ru
  • zh-hans
  • zh-hant

Technology

CDN
Amazon CloudFront
Server
CloudFront

Third-party hosts loaded (2)

  • d2xfav0ywhr7jn.cloudfront.net×79
  • chrome.google.com×1

Social

Registration

Registrar
GoDaddy.com, LLC
Created
2004-07-15
Expires
2027-07-15 421 days left
Updated
2022-09-06
Name servers
  • ns-1116.awsdns-11.org
  • ns-1865.awsdns-41.co.uk
  • ns-478.awsdns-59.com
  • ns-704.awsdns-24.net

DNS records live

NS
  • ns-1116.awsdns-11.org
  • ns-1865.awsdns-41.co.uk
  • ns-478.awsdns-59.com
  • ns-704.awsdns-24.net
MX
Show 7 MX records
  • 10 aspmx.l.google.com
  • 20 alt1.aspmx.l.google.com
  • 20 alt2.aspmx.l.google.com
  • 30 aspmx2.googlemail.com
  • 30 aspmx3.googlemail.com
  • 30 aspmx4.googlemail.com
  • 30 aspmx5.googlemail.com
TXT
Show 4 TXT records
  • ahrefs-site-verification_7ac58d798f658f5fdc6c4a3b74c955a30c79a7df574fc2cf2f6b70f6a4549c9f
  • google-site-verification=a_IhB9L_awL2xBb3RtYj0Nwwv7nhQYOw8fgknaZEOO0
  • google-site-verification=ofZEYFYyWdLOqrVlsn7KqN4OXBBN5Gw7I8JFnmXmCp8
  • DQv+xZt6v7u83oSWGbk6OUTCf/OrCc+NSWQ7XKTJi84=

Email authentication strong

SPF
v=spf1 ip4:107.20.225.149 ip4:107.20.237.178 ip4:34.192.129.42 ip4:34.195.1.70 ip4:52.4.194.53 include:_spf.google.com mx include:_spf.sparkpostmail.com -all
strict (-all)
DMARC
v=DMARC1; p=quarantine; sp=quarantine; aspf=s; adkim=s; rua=mailto:dmarc-reports@awardwallet.com
policy: quarantine · sp=quarantine
DKIM
  • google: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQClF+A0ZI8aHl6AgeRm/4eDN984X7JlAJ5Op3oGYDphCJOY7gyeXaoSf4m/0tYxiGu9z4XwYnYFe/VivU+Aeg…
  • k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…
selectors probed

Certificate (current)

GlobalSign Extended Validation CA - SHA256 - G3
from 2025-06-12 to 2026-07-14
Expires in 56 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://awardwallet.com/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • permissions-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing Referrer Policy
Header values
x-frame-options
SAMEORIGIN
permissions-policy
accelerometer=(self), ambient-light-sensor=(), autoplay=(self), battery=(), camera=(), clipboard-read=(self), clipboard-write=(self), cross-origin-isolated=(), display-capture=(self), document-domain=(), encrypted-media=(self), execution-while-not-rendered=(self), execution-while-out-of-viewport=(self), fullscreen=(self), geolocation=(self), gyroscope=(self), keyboard-map=(), magnetometer=(self), microphone=(), midi=(), navigation-override=(), payment=(self), picture-in-picture=(), publickey-credentials-get=(self), screen-wake-lock=(self), sync-xhr=(), usb=(), web-share=(self), xr-spatial-tracking=()
x-content-type-options
nosniff
content-security-policy
default-src 'self'; frame-src 'self' https://facebook.com *.facebook.com https://*.youcanbook.me https://www.google.com https://www.youtube.com *.vimeo.com *.doubleclick.net https://optimize.google.com https://js.stripe.com https://challenges.cloudflare.com https://app.termly.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.digitrust.mgr.consensu.org http://connect.facebook.net https://connect.facebook.net http://hm.baidu.com http://www.google-analytics.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://optimize.google.com https://d2xfav0ywhr7jn.cloudfront.net https://cmp.quantcast.com https://secure.quantserve.com https://rules.quantcount.com https://maps.googleapis.com https://www.google-analytics.com/analytics.js https://stats.g.doubleclick.net/dc.js https://connect.facebook.net/en_US/sdk.js https://unpkg.com/@googlemaps/markerclusterer/dist/index.min.js https://www.googletagmanager.com http://cdnjs.cloudflare.com/ajax/libs/req
strict-transport-security
max-age=31536000

Links to (7)

Linked from (1)