halowaypoint.com

.com crawl

First seen 2026-04-12 · Last seen 2026-05-17 · ok HTTP/1.1 200 1514 ms crawled 2026-05-06

US · 20.118.48.11 · AS8075 Microsoft Corporation

Reputation 100/100

Classifying

HTML metadata

Title: Halo - Official Site (en)
Description: HaloWaypoint.com is the official site for the Halo universe, featuring the latest information about Halo games and media, news from 343 Industries and the home of the Halo community.
Language: en-us

Open Graph

title: Halo - Official Site
locale: en_US
site name: Halo Waypoint
description: HaloWaypoint.com is the official site for the Halo universe, featuring the latest information about Halo games and media, news from 343 Industries and the home of the Halo community.

Technology

CDN: Azure Front Door
CMS: WordPress

Third-party hosts loaded (2)

assets.xbox.com×1
wcpstatic.microsoft.com×1

Social

Registration

Registrar

MarkMonitor Inc.

Created

2009-05-12

Expires

2027-05-12 358 days left

Updated

2026-04-10

Name servers

ns1-38.azure-dns.com
ns2-38.azure-dns.net
ns3-38.azure-dns.org
ns4-38.azure-dns.info

DNS records live

NS

ns1-38.azure-dns.com
ns2-38.azure-dns.net
ns3-38.azure-dns.org
ns4-38.azure-dns.info

MX

10 halowaypoint-com.mail.protection.outlook.com

TXT

MS=ms77570926
MS=ms53370958
d365mktkey=ucuGpFLWYXpeeITglvxzkdnZFbAkeiNlTWdnxT7yGK8x

Email authentication strong

SPF: v=spf1 include:_spf-ssg-a.microsoft.com include:spf.mailjet.com ~all
softfail (~all)
DMARC: v=DMARC1; p=reject; pct=100; rua=mailto:rua@dmarc.microsoft; ruf=mailto:ruf@dmarc.microsoft; fo=1
policy: reject (enforced)
DKIM: no key found at common selectors

Certificate (current)

GeoTrust TLS RSA CA G1

from 2026-01-28 to 2026-07-29

Expires in 71 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.halowaypoint.com/

present

strict-transport-security
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

missing Content Security Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=(), microphone=(), camera=()
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload