uchooserewards.com

.com crawl

First seen 2026-04-15 · Last seen 2026-05-10 · ok HTTP/1.1 200 5982 ms crawled 2026-05-10

US · 104.18.17.58 · AS13335 Cloudflare, Inc.

Reputation 100/100

Classifying

HTML metadata

Title: uChoose Rewards
Language: en

Technology

CDN: Cloudflare

Analytics

Cloudflare Insights

Third-party hosts loaded (3)

images.affinitysolutions.com×5
static.cloudflareinsights.com×1
www.google.com×1

Registration

Registrar

CSC Corporate Domains, Inc.

Created

2008-03-10

Expires

2027-03-10 294 days left

Updated

2026-03-06

Name servers

dns2.p07.nsone.net
dns4.p07.nsone.net
ns1.p201.dns.oraclecloud.net
ns2.p201.dns.oraclecloud.net

DNS records live

NS

dns2.p07.nsone.net
dns4.p07.nsone.net
ns1.p201.dns.oraclecloud.net
ns2.p201.dns.oraclecloud.net

MX

10 corp01.affinitysolutions.com

TXT

_xue803khc0e2c8lxfwi8waxznscxxwk

Email authentication strong

SPF: v=spf1 a mx ip4:192.40.160.0/19 ip4:74.91.80.0/20 ip4:63.128.95.133 include:affinitysolutionsspf.smtp.com include:jangomail.com include:spf.protection.outlook.com -all
strict (-all)
DMARC: v=DMARC1; p=reject; fo=0; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com
policy: reject (enforced)
DKIM: no key found at common selectors

Certificate (current)

DigiCert Global G2 TLS RSA SHA256 2020 CA1

from 2025-09-17 to 2026-10-19

Expires in 152 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://uchooserewards.com/e/members/verifypasswd.php?sid=40XXdKrlo40&method=login

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self' 'unsafe-inline' *.affinitysolutions.com *.uchooserewards.com *.gstatic.com images.affinitysolutions.com fonts.googleapis.com www.google.com cas-webapp.internal.ondotsystems.com:18226 *.afssn.com; frame-ancestors 'self'; img-src 'self' data: *.affinitysolutions.com;
strict-transport-security: max-age=31536000; includeSubDomains; preload