halekulani.com

HTML metadata

Title

Luxury Waikiki Oceanfront Accommodations | Halekulani Hotel

Description

Halekulani is a cherished luxury Waikiki oceanfront hotel offering a long tradition of excellence in hospitality, cuisine and amenities.

Language

en-US

Generator

Powered by WPBakery Page Builder - drag and drop page builder for WordPress.

Canonical

https://www.halekulani.com/

Translations

en
ja

Feeds

Halekulani Hotel » Home Comments Feed RSS

Open Graph

url: https://www.halekulani.com/
title: Luxury Waikiki Oceanfront Accommodations
locale: en_US
site name: Halekulani Hotel
description: Halekulani is a cherished luxury Waikiki oceanfront hotel offering a long tradition of excellence in hospitality, cuisine and amenities.

Technology

CDN: Cloudflare
CMS: WordPress

Analytics

Google Tag Manager

Fonts

Adobe Fonts

Social widgets

Vimeo Embed

Third-party hosts loaded (9)

assets.navisperformance.com×2
challenges.cloudflare.com×2
consent.cookiefirst.com×2
use.typekit.net×2
www.navistechnologies.info×2
opensource.org×1
player.vimeo.com×1
www.googletagmanager.com×1
www.halekulani.jp×1

Social

Contact

Phone

Address

2199 Kalia Road, 96815, Honolulu, HI, US

Registration

Registrar

Network Solutions, LLC

Created

1996-02-20

Expires

2028-02-21 643 days left

Updated

2022-02-09

Name servers

hank.ns.cloudflare.com
rita.ns.cloudflare.com

DNS records live

NS

hank.ns.cloudflare.com
rita.ns.cloudflare.com

MX

10 d248208a.ess.barracudanetworks.com
20 d248208b.ess.barracudanetworks.com

TXT

facebook-domain-verification=i47tl3zzp9tyxxf2a64ocrgym3jqlv

Email authentication strong

SPF

v=spf1 ip4:66.192.216.50 include:spf.ess.barracudanetworks.com include:spf.synxis.com include:sendgrid.net -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; fo=1; rua=mailto:sqcywh6u@ag.dmarcian.com,mailto:rua+halekulani.com@dmarc.barracudanetworks.com; ruf=mailto:sqcywh6u@fr.dmarcian.com,mailto:ruf+halekulani.com@dmarc.barracudanetworks.com

policy: quarantine

DKIM

Show 4 DKIM selectors

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCqUeyqiue+HayePY639Z2zNwtqvqSnV60ymT/MLR71VhpHEiRtKucJXRMQtS8C5pSQWglhFjyob93m2tIXgH…
selector2: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC/LrMlaeVih7BBjxXcp+42jjoZMLSiO9w4aZBWWwIoAYJs5bUCRlN61YMAvwR2R67XuHIksjgQSXrwl+66t1…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+pM/owuuvwMKEGmaBqkt76QE0ddZfBHUaC2DLy2jAjOEHvNhn9OAy3WPd16dWdHsJcII/ZXV5X2M0tJI4N…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC0n8ozQrD81+mEWX1edF+rljm22YKfXjMEGmvke4QkNm8WfCscpYQvozsRQgjphe6MIdq5ACoAwSXzcX6yi9nvV2…

selectors probed

Certificate (current)

WE1

from 2026-04-13 to 2026-07-12

Expires in 54 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 65/100 Checked live page: https://www.halekulani.com/

present

content-security-policy
x-frame-options
x-content-type-options

findings

missing HSTS
CSP allows unsafe inline scripts/styles
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' tools.ietf.org www.navistechnologies.info sslwidget.criteo.com rules.quantcount.com js.ipredictive.com static.criteo.net beacon.sojern.com secure.quantserve.com script.crazyegg.com blob: maps.googleapis.com assetscdn.stackla.com vjs.zencdn.net www.google.com assetscdn.stackla.com assets.navisperformance.com consent.cookiefirst.com www.navistechnologies.info code.jquery.com use.typekit.net connect.facebook.net www.googleadservices.com www.gstatic.com fonts.gstatic.com www.googletagmanager.com www.google-analytics.com ajax.googleapis.com cdnjs.cloudflare.com www.youtube.com googleads.g.doubleclick.net challenges.cloudflare.com static.cloudflareinsights.com static.sojern.com live.rezync.com storage.googleapis.com tags.srv.stackadapt.com srv.stackadapt.com ap.srv.stackadapt.com east.srv.stackadapt.com uw.srv.stackadapt.com eu.srv.stackadapt.com qvdt3feo.com dashboard.searchatlas.com data:; img-src 'self' scontent.cdninstagram.com assetscdn.st