marathonarcorewards.com

.com crawl

First seen 2026-04-21 · Last seen 2026-05-18 · ok HTTP/1.1 200 1178 ms crawled 2026-05-15

US · 45.223.163.78 · AS19551 Incapsula Inc

Reputation 95/100 weak security headers

Classifying

HTML metadata

Title: Join Marathon ARCO Rewards Today - MarathonArcoRewards.com
Description: Marathon ARCO Rewards
Language: en
Canonical: https://www.marathonarcorewards.com

Open Graph

url: https://www.marathonarcorewards.com
title: Join Marathon ARCO Rewards Today - MarathonArcoRewards.com
site name: MarathonArcoRewards.com
description: Marathon ARCO Rewards

Technology

Server: Apache

Analytics

Google Tag Manager

Fonts

Adobe Fonts

Third-party hosts loaded (5)

cdn.jsdelivr.net×1
code.jquery.com×1
kit.fontawesome.com×1
use.typekit.net×1
www.googletagmanager.com×1

Social

Registration

Registrar

GoDaddy.com, LLC

Created

2023-01-31

Expires

2028-01-31 622 days left

Updated

2023-01-31

Name servers

ns1-01.azure-dns.com
ns2-01.azure-dns.net
ns3-01.azure-dns.org
ns4-01.azure-dns.info

DNS records live

NS

ns1-01.azure-dns.com
ns2-01.azure-dns.net
ns3-01.azure-dns.org
ns4-01.azure-dns.info

MX

10 mxa-002c4401.gslb.pphosted.com
10 mxb-002c4401.gslb.pphosted.com

TXT

Show 6 TXT records

_7hhx22gm57tw85wlewy4wnyw5jbs3dy
_hq2g1ubtzo9wxe6thwee0z7tue7uxzs
MS=ms39875348
435b6dy59s47sy7blnxzldsj008pcr1x
_sitelock-domain-validation=c5082155558c010d
globalsign-domain-verification=08CB6DF996AB20CF83C853B46E4C480F

Email authentication strong

SPF: v=spf1 include:email.freshdesk.com include:cust-spf.exacttarget.com include:mail-spf.devrev.ai -all
strict (-all)
DMARC: v=DMARC1; p=reject; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com
policy: reject (enforced)
DKIM: no key found at common selectors

Certificate (current)

GlobalSign Atlas R3 DV TLS CA 2026 Q1

from 2026-03-30 to 2026-06-28

Expires in 41 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://marathonarcorewards.com/home

findings

missing HSTS
missing Content Security Policy
missing frame protection
missing content type protection
missing Referrer Policy
missing Permissions Policy