hotelbeds.com

HTML metadata

Title: Travel Technology Provider | Hotelbeds
Description: Elevate your B2B travel experience with solutions powered by leading travel technology providers. Discover accommodation, payments mobility experiences and more
Language: en
Canonical: https://discover.hotelbeds.com/

Open Graph

title: Home Hotelbeds

Technology

CDN: Amazon CloudFront
Server: AmazonS3
CMS: Next.js

Third-party hosts loaded (1)

maps.googleapis.com×1

Social

Registration

Registrar

EuroDNS S.A.

Created

2001-06-19

Expires

2027-06-19 395 days left

Updated

2025-08-11

Name servers

ns-1040.awsdns-02.org
ns-1714.awsdns-22.co.uk
ns-402.awsdns-50.com
ns-827.awsdns-39.net

DNS records live

NS

ns-1040.awsdns-02.org
ns-1714.awsdns-22.co.uk
ns-402.awsdns-50.com
ns-827.awsdns-39.net

MX

0 hotelbeds-com.mail.protection.outlook.com

TXT

Show 24 TXT records

_globalsign-domain-verification=eQmwTpzgoJD5B86VRSPZjjbMXWXPbIGaFH_eAiSZoY
l0VXjVBIi6S36dzvLvtX3odNNEB9jrtbNjYKA8FgSuTRrR/XqfihnsNwiZkLz34oKm7fZQTHJ/E3E8ABsP+MIw==
globalsign-domain-verification=1DB7CF5C65F08C29DB1C86D1869A8262
atlassian-domain-verification=Zz/xj4T7F2L2pBdwZxDWyV1aBg7VQjPQWykDOsfW5/Jjibb23Cp93/G8bjPtaVSa
apple-domain-verification=RVTW4Ucab0QuY9Gi
globalsign-domain-verification=8BD62D8A55F4CEB707D505636CAC9CFE
SFMC-wJOCISibqm2FQ9H-oa-ZOjW_6_6RF6DNqVh31EL3
_globalsign-domain-verification=HjfO1aqqqyuxEnGi8NIbQ2q7mn6xBhbvFY1ULp2lsA
globalsign-domain-verification=387a0e7e3f64fc1b7270156881bead64
globalsign-domain-verification=9acfffdb694cee57df588061f655e83e
drift-domain-verification=098d6f50aad6069790c15db96824950dbb15b0e0111e98a7fccb10501407e9e5
9psp630rcywrg3vc8lx8p13w8wxqbvrl
apple-domain-verification=FmsXFiCC2baUuYMg
docusign=87b54fb3-5324-4f9f-9272-ee8a4f67a537
_globalsign-domain-verification=CvLiBvVk71XXYnQxu_VBDzXbqOJQHM8O0OqZExH6sJ
_globalsign-domain-verification=7lu77F44QDDXMONr7UPBqVBhdfRbply03ELZ_DWTtZ
globalsign-domain-verification=68fe4e715b29ae1ddbdc484bd60187b4
atlassian-domain-verification=t3TDBIvzDYmeIKoo6tOkRMyAP7RcgLmq6g/uADRXunMA/bQc8NQQulkwVb6AbY5/
x80cmcqglhqdsk8435r5dzskk8m0gdrz
miro-verification=ea9d6daa669b4baec10a3216b5e3cdb52f66df2d
smartsheet-site-validation=wIljC_aoRnM3PlyXXhH7_uwj94wxDMbs
8wS+EwCmxXt0V76wDlJ82WASVpSXCN0Gc8UZqP2Vanw=
6xhjgxq7xk9r4z24sm3s5y2zkxvn2bff4
5j2mklvl7z149ph1py4pt32fpmfqdfz3

Email authentication partial

SPF: v=spf1 mx ip4:18.197.237.85 ip4:18.192.171.83 ip4:3.75.123.210 ip4:3.121.252.143 include:spf.protection.outlook.com include:_spf.salesforce.com include:app.sgizmo.com include:amazonses.com include:cust-spf.exacttarget.com -all
strict (-all)
DMARC: v=DMARC1;p=none;rua=mailto:soc@hotelbeds.com;ruf=mailto:soc@hotelbeds.com;fo=0:1:s
policy: none (monitoring only)
DKIM: no key found at common selectors

Certificate (current)

Amazon RSA 2048 M03

from 2025-07-15 to 2026-08-14

Expires in 86 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://discover.hotelbeds.com

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=(self)
x-content-type-options: nosniff
content-security-policy: default-src 'self' https://*.hotelbeds.com; font-src 'self' data: https://cdn.landbot.io https://*.hotelbeds.com https://fonts.gstatic.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.doubleclick.net https://*.cookiebot.com https://js.driftt.com https://*.cloudflare.com https://*.googleapis.com https://*.weglot.com https://*.googletagmanager.com https://*.cleverstory.io https://*.landbot.io https://*.hotelbeds.com https://*.bedsonline.com https://*.hbxgroup.com https://*.gta-travel.cn https://*.hotjar.com https://connect.facebook.net; img-src 'self' data: https://*.google.com https://*.google.es https://*.googletagmanager.com https://*.cookiebot.com https://*.googleapis.com https://*.googleadservices.com https://*.hotelbeds.com https://s.zkcdn.net https://www.facebook.com; style-src 'self' 'unsafe-inline' https://*.cloudflare.com https://*.googleapis.com https://*.weglot.com https://*.landbot.io https://*.hotelbeds.com; frame-src 'self' https://td.doubleclick.net https://
strict-transport-security: max-age=31536000; includeSubDomains; preload