rixos.com

HTML metadata

Title

Welcome to Rixos All-inclusive Resorts

Description

Our All-inclusive resorts and hotels offer you an exclusive travel experience: for a romantic escape or a family holiday, book your next stay with Rixos!

Language

en

Generator

Drupal 10 (https://www.drupal.org)

Canonical

https://www.rixos.com/

Translations

ar
de
en
es
fr
hi
hr
it
kk
ko
nl
pl
pt
ro
ru
ta
th
tr
uk
vi
zh

Open Graph

url: https://www.rixos.com/
title: Rixos

Technology

CDN: Cloudflare
CMS: Drupal

Analytics

Cloudflare Insights
Google Tag Manager

Cookie consent

OneTrust

Third-party hosts loaded (7)

mmf5angy1.twic.pics×61
static.cloudflareinsights.com×2
cdn.cookielaw.org×1
cdn.weglot.com×1
staticaws.fbwebprogram.com×1
www.facebook.com×1
www.googletagmanager.com×1

Social

Contact

Phone

+90 850 755 1 797

Registration

Registrar

CSC Corporate Domains, Inc.

Created

2001-02-10

Expires

2027-02-10 265 days left

Updated

2026-04-09

Name servers

roxy.ns.cloudflare.com
watson.ns.cloudflare.com

DNS records live

NS

roxy.ns.cloudflare.com
watson.ns.cloudflare.com

MX

5 accor.in.tmes.trendmicro.eu

TXT

Show 4 TXT records

tmes=8a3cdc346562bd1a02542980c8dfe45d
Ptok1vVtLX46kn8801hD6SF+wsNxhnTYxlKyDvi1zMnIClnEqyyc48r1dKGyubv2xia50E6iQq/JA+6UJ5B+uQ==
_fi6f77u7n0gl277w4pbn8d2eek06mkf
_nimge8hbh6ae2ovc1ywa3xlhvooq5gv

Verified for

GlobalSign
Google
Meta
Microsoft 365

Email authentication strong

SPF: v=spf1 ip4:85.115.56.190/32 include:spf.tmes.trendmicro.eu ip4:103.19.95.100/30 include:ivvy.net include:oracle.accor.com ip4:62.192.13.116 include:amazonses.com include:spf.exclaimer.net include:_spf.mail.hostinger.com -all
strict (-all)
DMARC: v=DMARC1; p=quarantine; rf=afrf; sp=none; fo=1; pct=100; ri=86400; adkim=s; aspf=s
policy: quarantine · sp=none
DKIM: no key found at common selectors

Certificate (current)

Sectigo Public Server Authentication CA DV R36

from 2025-06-05 to 2026-06-08

Expires in 18 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.rixos.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

short HSTS max-age
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self'; connect-src 'self' www.google-analytics.com cdn.plyr.io noembed.com *.google.com *.google.com.ua *.doubleclick.net *.yandex.ru *.facebook.com *.facebook.net *.usabilla.com *.accor.com *.accorhotels.com www.googletagmanager.com maps.googleapis.com staticaws.fbwebprogram.com *.accorhotels.ws www.ahstatic.com cdn.hypemarks.com *.twic.pics themes.googleusercontent.com cdnjs.cloudflare.com/ajax/libs/cropper/4.0.0/cropper.min.js cdnjs.cloudflare.com/ajax/libs/cropper/4.0.0/cropper.min.css maps.gstatic.com fonts.gstatic.com fonts.googleapis.com *.youtube.com *.vimeo.com *.googleadservices.com ipinfo.io cdn.cookielaw.org *.onetrust.com *.cookielaw.org *.ytimg.com *.atdmt.com *.contentsquare.net contentsquare.net *.contentsquare.com contentsquare.com *.dengage.com *.criteo.net *.criteo.com criteo.net criteo.com *.cloudfront.net *.sojern.com sojern.com rixoshappydays.com beacon.sojern.com *.onetrust.io onetrust.io tintup.com *.tintup.com amazonaws.com *.amazonaws.com advertis
strict-transport-security: max-age=2592000; includeSubDomains