vacationrentalinsurance.com

HTML metadata

Title: Vacation Rental Insurance for Renters, Plus Damage Protection
Description: Get travel insurance designed for vacation rental trips—from short getaways to globetrotting. You can even get coverage for accidental damage to the rental.
Language: en
Canonical: https://www.vacationrentalinsurance.com/

Technology

Analytics

Google Tag Manager

Third-party hosts loaded (4)

view.ceros.com×2
htp.tokenex.com×1
transcend-cdn.com×1
www.googletagmanager.com×1

Registration

Registrar

Register.com - Network Solutions, LLC

Created

2005-08-26

Expires

2028-08-26 828 days left

Updated

2025-07-26

Name servers

ns-1060.awsdns-04.org
ns-1951.awsdns-51.co.uk
ns-198.awsdns-24.com
ns-738.awsdns-28.net

DNS records live

NS

ns-1060.awsdns-04.org
ns-1951.awsdns-51.co.uk
ns-198.awsdns-24.com
ns-738.awsdns-28.net

MX

10 vacationrentalinsurance-com.mail.protection.outlook.com

TXT

Show 5 TXT records

z7m440yty99rfyfcy7vw9j8brd56sx7b
07j82gqk11qm9s3nw7r0pqf5wq4z8lzv
0ed1fe018a65d3ac2a49bc407eb80b718f1cb3ee41
n7znb1jrfb18gqdr3yspg98tr85gyz0y
yxvnz4g6sx7t6m3ngnzfpdr5m1499k3p

Verified for

Microsoft 365

Email authentication strong

SPF

v=spf1 mx include:_netblocks.mimecast.com include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; rua=mailto:xa9hnjr7@ag.us.dmarcian.com; ruf=mailto:xa9hnjr7@fr.us.dmarcian.com; fo=1;

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VICfVYVMZdBlIBdd7dZUDUHrJ7R04sMOfqZvzMMy19+48maXjy4CsmnwHH1DK9hX35e9OxIZl2eGp…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBazS7/oLGOWdELkeokgxeKNIEJfBU1A31cri83HhGVoKY7vcIIarwo5gY3cgi5Sf/OJx0zzF1ID79…

selectors probed

Certificate (current)

DigiCert Global G2 TLS RSA SHA256 2020 CA1

from 2025-04-21 to 2026-05-22

Expires in 1 day

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.vacationrentalinsurance.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy
cross-origin-embedder-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=(self)
x-content-type-options: nosniff
content-security-policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' transcend-cdn.com cdn.transcend.io telemetry.us.transcend.io *.tokenex.com *.google.com *.gstatic.com *.facebook.net optimize.google.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com www.googleoptimize.com *.clarity.ms *.ceros.com *.b0e8.com *.marinsm.com *.prfct.co blob: data:;connect-src 'self' transcend-cdn.com telemetry.us.transcend.io *.google-analytics.com *.google.com *.analytics.google.com https://analytics.google.com stats.g.doubleclick.net *.clarity.ms *.facebook.com blob: data:;img-src data: 'self' *.vacationrentalinsurance.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.google.com *.gstatic.com *.clarity.ms *.b0e8.com *.prfct.co *.facebook.com *.adnxs.com *.bing.com blob: data:;
strict-transport-security: max-age=63072000; includeSubdomains; preload
cross-origin-opener-policy: unsafe-none
cross-origin-embedder-policy: unsafe-none
cross-origin-resource-policy: cross-origin