indexo.dev

questhotels.com

.com crawl

First seen 2026-05-30 · Last seen 2026-05-31 · ok HTTP/1.1 200 121 ms crawled 2026-05-31

US · 3.164.206.29 · AS16509 Amazon.com, Inc.

Reputation 86/100 dmarc partial coverage weak subdomain policy

Classifying

Technology

CDN
Amazon CloudFront
Server
AmazonS3

Registration

Registrar
Gandi SAS
Created
1999-07-12
Expires
2026-07-12 40 days left
Updated
2025-11-19
Name servers
  • ns-1361.awsdns-42.org
  • ns-1593.awsdns-07.co.uk
  • ns-164.awsdns-20.com
  • ns-986.awsdns-59.net

DNS records live

NS
  • ns-1361.awsdns-42.org
  • ns-1593.awsdns-07.co.uk
  • ns-164.awsdns-20.com
  • ns-986.awsdns-59.net
MX
  • 1 aspmx.l.google.com
  • 10 alt3.aspmx.l.google.com
  • 10 alt4.aspmx.l.google.com
  • 5 alt1.aspmx.l.google.com
  • 5 alt2.aspmx.l.google.com

Email authentication partial

SPF
v=spf1 include:_spf.google.com include:amazonses.com include:servers.mcsv.net -all
strict (-all)
DMARC
v=DMARC1; p=reject; sp=none; rua=mailto:sentec-d@dmarc.report-uri.com; ruf=mailto:sentec-d@dmarc.report-uri.com; rf=afrf; pct=99; ri=86400
policy: reject (enforced) · pct=99 · sp=none
DKIM
  • google: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCFGpm2TAaWehvVg6nHcQcRvf8uZbOXzlTbgquxk3cqmcIfNQO6ZfgjdJDo0N8tAvI6RXMhyZ0tbolmZy6XAR…
  • k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
selectors probed

Certificate (current)

Amazon RSA 2048 M01
from 2026-01-08 to 2027-02-07
Expires in 250 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://questhotels.com/

present
  • strict-transport-security
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • missing Content Security Policy
Header values
referrer-policy
strict-origin-when-cross-origin
x-frame-options
SAMEORIGIN
permissions-policy
accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), cross-origin-isolated=(self), display-capture=(), document-domain=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(self), fullscreen=(self), geolocation=(self "https://www.google-analytics.com"), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), navigation-override=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(), xr-spatial-tracking=()
x-content-type-options
nosniff
strict-transport-security
max-age=31536000; includeSubDomains

Linked from (2)