indexo.dev

wyndhamrewardscreditcard.com

.com crawl

First seen 2026-04-24 · Last seen 2026-05-15 · ok HTTP/1.1 200 27185 ms crawled 2026-05-18

CA · 99.79.156.93 · AS16509 Amazon.com, Inc.

Reputation 100/100

Classifying

HTML metadata

Title
Wyndham Rewards Earner Card

Technology

CDN
Akamai
CMS
WordPress
Analytics
  • Google Tag Manager
Ads
  • Google Ads (DoubleClick)
Fonts
  • Google Fonts
Third-party hosts loaded (8)
  • cdnjs.cloudflare.com×2
  • www.barclaycardus.com×2
  • www.googletagmanager.com×2
  • ad.doubleclick.net×1
  • assets.adobedtm.com×1
  • dev.visualwebsiteoptimizer.com×1
  • fonts.googleapis.com×1
  • www.facebook.com×1

Registration

Registrar
Network Solutions, LLC
Created
2017-10-06
Expires
2026-10-06 138 days left
Updated
2026-04-10
Name servers
  • ns3.level3.net
  • ns4.level3.net

DNS records live

NS
  • ns3.level3.net
  • ns4.level3.net
TXT
  • _jktkwvozbkzis7vbn9vhx8ifux4cpip
  • _bo242welowusbamxjfgmhj5x0ysrc7o

Email authentication no MX

SPF
not published
DMARC
not published
DKIM
no key found at common selectors

Certificate (current)

DigiCert Global G2 TLS RSA SHA256 2020 CA1
from 2025-05-06 to 2026-05-07
Expired 14 days ago

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.wyndhamrewardscreditcard.com/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • permissions-policy
findings
  • short HSTS max-age
  • CSP allows unsafe inline scripts/styles
  • weak frame protection
  • missing Referrer Policy
Header values
x-frame-options
DENY, SAMEORIGIN
permissions-policy
camera=(), geolocation=(), microphone=()
x-content-type-options
nosniff
content-security-policy
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://dev.visualwebsiteoptimizer.com https://cdnjs.cloudflare.com https://assets.adobedtm.com https://www.googletagmanager.com https://connect.facebook.net https://static.ads-twitter.com https://s.go-mpulse.net https://s2.go-mpulse.net https://c.go-mpulse.net https://analytics.twitter.com https://cm.g.doubleclick.net https://safeframe.googlesyndication.com https://ib.adnxs.com https://20825233p.rfihub.com https://a.rfihub.com https://684d0d4c.akstat.io https://www.barclaycardus.com https://metrics.barclaycardus.com https://googleads.g.doubleclick.net; connect-src 'self' https://dev.visualwebsiteoptimizer.com https://www.facebook.com https://edge.adobedc.net https://assets.adobedtm.com https://www.googletagmanager.com https://fonts.googleapis.com https://fonts.gstatic.com https://s.go-mpulse.net https://s2.go-mpulse.net https://c.go-mpulse.net https://connect.facebook.net https://static.ads-twitter.com https://a
strict-transport-security
max-age=86400

Links to (5)

Linked from (1)