hiltongrandvacations.com

.com crawl

First seen 2026-04-11 · Last seen 2026-05-19 · ok HTTP/1.1 200 3007 ms crawled 2026-05-19

DE · 104.126.37.129 · AS20940 Akamai International B.V.

Reputation 100/100

Classifying

HTML metadata

Title: Hilton Grand Vacations
Language: en

Technology

CDN: Akamai

Analytics

Google Tag Manager
Segment

Fonts

Google Fonts

Social widgets

Vimeo Embed

Third-party hosts loaded (7)

www.googletagmanager.com×2
cdn.segment.com×1
ctfassets.apps.onegrandvacation.com×1
fonts.googleapis.com×1
fonts.gstatic.com×1
kit.fontawesome.com×1
player.vimeo.com×1

Registration

Registrar

MarkMonitor Inc.

Created

2001-10-19

Expires

2026-10-19 151 days left

Updated

2025-09-17

Name servers

a1-181.akam.net
a20-67.akam.net
a26-67.akam.net
a28-65.akam.net
a3-64.akam.net
a5-65.akam.net

DNS records live

NS

asia1.akam.net
asia9.akam.net
eur5.akam.net
eur6.akam.net
ns1-104.akam.net
ns1-7.akam.net
use1.akam.net
use4.akam.net

TXT

Show 10 TXT records

plsnwts4k14snvrxpb5x0tl0lqtl280f
klqydym8pdn26n43kp064s5h7qd2qf61
p9g514319pj9smnpd1cvcdq4krpw42sf
yxp8hlf4nckfcn8s284kdysk3xn553jk
3hpf449crlt5n8pgd1zwjby4k7djchk6
8kmyr3pcsjq759kl5mxjfzbl0fppxxk7
_abux1wc0876h0fl9w53s7s1zfox1bf8
t538wk5tnnc743pmpcqr2g92z9357px1
1xbh02dpty7nw3784g7gsyz6rljm2wz8
084gj2q3tpnx97wl7zh7bxq29y3kkgly

Verified for

Google
Segment

Email authentication no MX

SPF

v=spf1 ip4:208.95.133.25 ip4:198.71.232.3 include:mktomail.com -all

strict (-all)

DMARC

v=DMARC1; p=none; rua=mailto:xmygcwst@ag.us.dmarcian.com;

policy: none (monitoring only)

DKIM

s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmL/PW1oUltnwtQL4FUtSo+AM9ciBPv7dOvm/Szvxfa7NTcVKpi7f8NbF1q2DQ9c0rQBRX8VZgFZmPi7Y7…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0geD+ARx1bh03pRt/tr8sYNV2flMoJYr7ZDbrO2ULw7ZKKrmpkTcKDtc0LRrVMbH0mh171QvBGcxY1ojx…

selectors probed

Certificate (current)

DigiCert Global G3 TLS ECC SHA384 2020 CA1

from 2026-01-30 to 2027-02-02

Expires in 257 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.hiltongrandvacations.com/

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy
permissions-policy

findings

missing frame protection

Header values

referrer-policy: strict-origin-when-cross-origin
permissions-policy: geolocation=(), microphone=(), camera=(), payment=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'nonce-T9BW0A796rLT2CKgOcotYQ==' 'strict-dynamic' 'unsafe-eval' https://www.instagram.com https://platform.instagram.com https://kit.fontawesome.com https://cdn.segment.com https://assets.ctfassets.net http://assets.ctfassets.net https://dev.visualwebsiteoptimizer.com https://www.youtube.com https://cmp.osano.com https://maps.googleapis.com https://www.googletagmanager.com https://s.yimg.com https://player.vimeo.com https://www.vimeo.com https://b-code.liadm.com https://t.contentsquare.net https://www.clarity.ms https://bat.bing.com https://vimeo.com http://b-code.liadm.com https://scripts.clarity.ms https://www.google.com https://www.gstatic.com https://connect.facebook.net https://hub.whisp.io https://whispassets.blob.core.windows.net https://api.whisp.io https://text.whisp.io https://validate.whisp.io https://use.typekit.net https://p.typekit.net https://www.facebook.com blob: https://www.instagram.com https://platform.instagram.com https://kit.
strict-transport-security: max-age=31536000 ; includeSubDomains