favehotels.com

.com crawl

First seen 2026-04-22 · Last seen 2026-05-16 · ok HTTP/1.1 200 1092 ms crawled 2026-05-16

US · 3.164.68.116 · AS16509 Amazon.com, Inc.

Reputation 100/100

Classifying

Technology

CDN: Amazon CloudFront
Server: AmazonS3

Registration

Registrar

Gandi SAS

Created

2007-12-26

Expires

2026-12-26 220 days left

Updated

2025-11-19

Name servers

ns-1281.awsdns-32.org
ns-2046.awsdns-63.co.uk
ns-242.awsdns-30.com
ns-568.awsdns-07.net

DNS records live

NS

ns-1281.awsdns-32.org
ns-2046.awsdns-63.co.uk
ns-242.awsdns-30.com
ns-568.awsdns-07.net

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

google-site-verification=DN1ynyt1rKmxRFOLaY6U_9Wg4YCVgKoWX5wtzDeUY4U

Email authentication strong

SPF

v=spf1 include:_spf.google.com include:amazonses.com include:servers.mcsv.net -all

strict (-all)

DMARC

v=DMARC1; p=reject; sp=none; rua=mailto:sentec-d@dmarc.report-uri.com; ruf=mailto:sentec-d@dmarc.report-uri.com; rf=afrf; pct=100; ri=86400

policy: reject (enforced) · sp=none

DKIM

google: v=DKIM1; k=rsa; t=y; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCOauAyMqzbE1mwRlFjxut026wbi7OPrvybVeXSFhZUjiEaLcFdkTBMqa+uOOFLGmFtK1gLi+ZrfTSLa…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

Amazon RSA 2048 M01

from 2025-10-31 to 2026-11-30

Expires in 194 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://favehotels.com/

present

strict-transport-security
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

missing Content Security Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), cross-origin-isolated=(self), display-capture=(), document-domain=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(self), fullscreen=(self), geolocation=(self "https://www.google-analytics.com"), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), navigation-override=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(), xr-spatial-tracking=()
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains