hrewards.com

.com crawl

First seen 2026-04-11 · Last seen 2026-05-19 · ok HTTP/1.1 200 1363 ms crawled 2026-05-18

US · 13.33.235.93 · AS16509 Amazon.com, Inc.

Reputation 95/100 weak security headers

Classifying

HTML metadata

Title
H Rewards - Book Hotels worldwide
Description
Book Steigenberger, Intercity- & Zleep Hotels and many more brands on our official website - H Rewards
Language
en
Canonical
https://hrewards.com/en
Translations
  • ar
  • cs
  • da
  • de
  • en
  • es
  • fr
  • hu
  • it
  • ja
  • ko
  • nl
  • pt
  • ru
  • sv
  • uk
  • zh

Technology

CDN
Amazon CloudFront
CMS
Next.js
Cookie consent
  • Usercentrics

Third-party hosts loaded (1)

  • app.usercentrics.eu×1

Registration

Registrar
GoDaddy.com, LLC
Created
2012-04-15
Expires
2027-04-15 330 days left
Updated
2026-03-24
Name servers
  • ns-1045.awsdns-02.org
  • ns-1587.awsdns-06.co.uk
  • ns-507.awsdns-63.com
  • ns-590.awsdns-09.net

DNS records live

NS
  • ns-1045.awsdns-02.org
  • ns-1587.awsdns-06.co.uk
  • ns-507.awsdns-63.com
  • ns-590.awsdns-09.net
MX
  • 10 hrewards-com.mail.protection.outlook.com
TXT
  • facebook-domain-verification=nk8dnc9w37b3y4gan71j6ryzv409xy
  • google-site-verification=0eCE1fOQsHDwIXUaTSQw2CTtID3rs2lcCEEf3f5DD2k
  • verification-code-site-App_lark=8qlTc6dCJm1TWUkSrtrt

Email authentication strong

SPF
v=spf1 include:spf.protection.outlook.com include:amazonses.com ip4:46.189.68.59 ip4:88.205.123.40 ip4:88.205.123.39 ip4:185.98.184.0/24 ip4:80.82.206.0/26 include:spf.myincert.com ~all
softfail (~all)
DMARC
v=DMARC1; p=quarantine
policy: quarantine
DKIM
  • selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNeNmWvgm0vyh8RzvXzqRJKp/fd5GD1W7OgXuFbqhSwUeI0VQOvk2A4aOmCAAPaz6VAcXcgkc6MMtt…
selectors probed

Certificate (current)

Amazon RSA 2048 M01
from 2026-01-26 to 2027-02-25
Expires in 281 days

HTTP security headers

Header hygiene 40/100 Checked live page: https://hrewards.com/en

present
  • x-frame-options
findings
  • missing HSTS
  • missing Content Security Policy
  • missing content type protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
x-frame-options
SAMEORIGIN

Links to (3)

Linked from (15)