hiltontohome.com

.com crawl

First seen 2026-05-08 · Last seen 2026-05-19 · ok HTTP/1.1 200 4527 ms crawled 2026-05-15

US · 18.160.46.67 · AS16509 Amazon.com, Inc.

Reputation 100/100

Classifying

HTML metadata

Open Graph

site name: europe.hiltontohome.com

Technology

CDN: Amazon CloudFront
Server: nginx

Third-party hosts loaded (1)

static.zdassets.com×1

Registration

Registrar

MarkMonitor Inc.

Created

2005-08-24

Expires

2026-08-24 95 days left

Updated

2025-07-23

Name servers

ns1.hotelsathome.com
ns2.hotelsathome.com
ns3.hotelsathome.com
ns4.hotelsathome.com
ns5.hotelsathome.com
ns6.hotelsathome.com

DNS records live

NS

ns1.hotelsathome.com
ns2.hotelsathome.com
ns3.hotelsathome.com
ns4.hotelsathome.com
ns5.hotelsathome.com
ns6.hotelsathome.com

MX

5 mx1-us1.ppe-hosted.com
5 mx2-us1.ppe-hosted.com

TXT

Show 5 TXT records

hes=f9233b6e34a67dabafada4b535faa93e
z73h83gtyhfpm1909qmzs4c8h40mqmpq
ppe-85cc042ae814730d11a5
dbrfdcldbd89pkxbwpx81l47zc0plwv0
_1xxitb6dznoljm1wmvk9enpgyb2jhxs

Verified for

Google
Microsoft 365

Email authentication strong

SPF

v=spf1 a:dispatch-us.ppe-hosted.com include:mail.zendesk.com include:sendgrid.net include:_spf.smtp.com include:spf.protection.outlook.com include:cust-spf.exacttarget.com ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; sp=reject; aspf=r; rua=mailto:dmarc-report@hiltontohome.com; ruf=mailto:dmarc-report@hiltontohome.com; fo=1; pct=100

policy: reject (enforced) · sp=reject

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaEznEpMm2p39A623R5lIvspYgoGc4qPU5yLipQIsiiTNea44+MP5MsWjskdknYema90O5z+uSIK1Y…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgAWEO6+yq4T9TW3IvgVMdLyh78r9cRpYgfEA4NiJFjDt+c9nojVFYONTPEB7SYqKTcqBHZEAy0dQCYc5g…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9iCMc4WIJOFrT/zne+qocavGVrYbTKHUR/dFYqC7s0FnNzV7x/aRAdEV9AiqTOM02JLJBGWfOxYEcubeb…

selectors probed

Certificate (current)

Sectigo Public Server Authentication CA DV R36

from 2025-11-06 to 2026-12-07

Expires in 200 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://europe.hiltontohome.com/en/?___store=hileu_en

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
missing Permissions Policy

Header values

referrer-policy: origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src https: data: 'unsafe-inline' 'unsafe-eval'
strict-transport-security: max-age=63072000; includeSubdomains; preload